Service Provider to conduct a specialised training program on integrated risk management and internal controls in defence procurement for relevant personnel of the Defence Procurement Agency (DPA)

General background

The EUACI is a collaborative initiative funded by the European Union and the Government of Denmark, with the aim of supporting Ukraine in its efforts to reduce corruption at both national and local levels. The new phase, launched in January 2024, focuses on key strategic objectives: reducing corruption in Ukraine, advancing anticorruption reforms, and implementing reconstruction efforts in war-affected areas with a strong emphasis on transparency, accountability, and integrity.

The EUACI is implementing the project “Enhancing Integrity in the Defence Sector” with funding from, the European Union’s Foreign Policy Instruments (FPI) (hereinafter – EUACI Defence Program).

One of the beneficiaries of the EUACI Defence Program is the Defence Procurement Agency under the Ministry of Defence of Ukraine (hereinafter – DPA).

DPA – is a state enterprise, established to optimize and centralize procurement processes in the field of national security and defence. Its main goal is to ensure transparency and efficiency in defence procurement, as well as the timely and high-quality supply of equipment and materials to the Armed Forces of Ukraine.

Previously, the DPA was responsible only for the procurement of lethal defence equipment. However, from January 1, 2026, following the integration of the State Operator for Non-Lethal Acquisition (SE DOT), the DPA functions as a unified agency that also carries out defence procurement of non-lethal nomenclature.

The scope of tasks assigned to the DPA in the field of procurement program management requires continuous strengthening of institutional capacity in risk management and internal control, ensuring best practices in preventing potential corruption, violations and abuses.

In this context, the EUACI seeks to strengthen the institutional and operational capacity of the Defence Procurement Agency (DPA) by enhancing the competencies of its relevant staff at both operational and oversight levels in the area of risk management and internal control. This is particularly relevant given the complexity of defence procurement processes and the elevated corruption risks of operational inefficiencies and weaknesses. In this regard, the EUACI intends to provide technical assistance to the DPA by supporting the delivery of a comprehensive training program on risk management and internal control, tailored to the specificities of the defence procurement sector and grounded in internationally recognised best practices, relevant national and international standards, as well as NATO principles and approaches, with a main focus on the assessment and management of corruption risks.

Objective of the Training Program

The objective of the Training Program is to strengthen the capacity of the DPA staff responsible for operational, compliance, internal control and anti-corruption work to effectively identify, assess, manage and mitigate corruption and other types of risks in defence procurement activities, in line with international risk management standards, NATO requirements and good governance principles.

The training program aims to:

• strengthen professional competencies of the DPA staff responsible for operational, compliance, internal control and anti-corruption work in applying risk-based approaches to procurement processes and other DPA activities;
• enhance practical understanding of risk management and internal control concepts and approaches among program directors, heads of operational units acting as risk owners at the operational level and the DPA staff from compliance, internal control and anti-corruption units;
• support the implementation and sustainability of an integrated risk management and internal control system within the Agency, aligned with internationally recognised frameworks (e.g. ISO 31000, COSO ERM) and NATO requirements;
• promote a shared risk culture and clear allocation of roles and responsibilities in risk management and internal control across operational and oversights functions;
• contribute to improved integrity, transparency and accountability in defence procurement decision-making.

Scope of Work and Deliverables

The Service Provider will be required to:

• Develop training topics and agenda for each training modules to achieve the goals of the training program listed above in close consultations with the EUACI and the DPA. Each training topics and agenda should be adapted to the context of the DPA’s operational activities and the specifics of defense procurement. The training program should consist of two (2) training modules.

The first training module is expected to cover risk management and internal control fundamentals, with a focus on corruption risks of defense procurement, and may include, but not limited to, the following tentative topics:

1. Introduction to risk management and internal control: concept, objectives, specific risk landscape and control environment of defence procurement agencies;

2. International risk management and internal control standards and frameworks: general overview;

3. Risk governance and internal control model: roles and responsibilities;

4. Risk identification and internal control design: practical approaches and process documentation, risk treatment frameworks and key controls, risk-related decision-making;

5. Types of risks and control challenges in defence procurement: typical risks and control weaknesses scenarios in procurement, contracting, logistics, and supplier management;

6. Risk appetite, risk tolerance and control proportionality: concepts, practical use, as well as linking risk appetite to strategic and operational objectives, adequacy of control responses.

7. Applied case studies, workshops, practical exercises: real-world scenarios, including international experience and best practices in the defence procurement sector, in particular from NATO and EU countries, with a focus on corruption risk-based controls.

The second training module is expected to cover more advanced stages of the risk management cycle, control measures and related practical tools, with a focus on corruption risks of defense procurement, and may include, but not limited to, the following tentative topics: 

1. Advanced risk and control assessment methodologies: in-depth overview of risk assessment methods, risk identification techniques, risk analysis, control design and evaluation in practice;

2. Risk treatment, internal controls, and integration: design and assessment of risk treatment measures, risk-based internal control and compliance systems, specifics of fraud and corruption risk assessment;

3. Practical tools, templates, and documentation: risk management and internal control documentation, monitoring, review, and continuous improvement mechanisms, risk communication and the role of control functions;

4. Applied case studies and real-world scenarios: complex, multi-risk scenarios relevant to defence procurement and group work on advanced risk assessment and mitigation design, and lessons learned from practical implementation with the focus on corruption risks and building integrity components.

• Pre-evaluation of needs of participants to make the training more targeted and adjust the training program accordingly.
• Identify and engage trainers/speakers for each training module. It would be an advantage if the trainers have experience with cases in the defence area or/and good governance in the public/large private sector. The Service Provider should provide list of proposed speakers/trainers and their CVs for EUACI’s approval.

This list should include:

1. The name and professional background of each expert.

2. Their area of specialization relevant to the proposed topics.

3. A short justification of their relevance and experience in providing capacity-building support, particularly in the context of public sector, risk-management, defence procurement.

• Prepare all hard copies of materials for each training module for each participant.
• Manage the venue for the first training module and meal/catering for participants.

The venue should be suitable for at least 20 participants + trainers/speaker + EUACI representative.

The catering should include 1 lunch and 3 coffee-brakes for 20 people for each training day (2 days).

• Conduct 2 (two) training modules offline in Kyiv in accordance with the approved training program and daily agenda. Obtain a registration list as proof of participation.
• The first training module will last two days and be conducted on the Service Provider’s premises, the second module will be a full one-day training delivered on the DPA’s premises.

• Target audience of the first training module: procurement program directors, operational-level managers and employees of internal control, compliance, and anti-corruption departments of the DPA. Total: 20 participants.
• Target audience of the second training module: employees of internal control, compliance, and anti-corruption departments of the DPA. Total: 20 participants.
• Issue the certificates of completion to all participants who successfully complete the training
• Conduct final evaluation and gather feedback from participants on the training modules and analyse to assess satisfaction and areas for improvement as follows:
• The Service Provider will be responsible for sending a link to the on-line Google form for training feedback that will be provided by the EUACI. The on-line form is to be completed by training participants immediately after the training, and not later than 5 days from training date. The Service Provider should send the reminder(s) to participants during these 5 days if the response rate is lower than 82%.
• The Service Provider will be responsible for filling in the on-line Google form “Passport of the training” within 5 days after the training.
• The EUACI responsible staff may conduct a review meeting to discuss results of the participants´ training feedback before closing the contract.
• The EUACI hired external MEAL team will conduct 6 months post training assessment with a limited sample of training participants to evaluate how they apply skills obtained at the training in the longer-term perspective.
• Prepare a short final report with observations and lessons learned, the result of the evaluation and recommendations for future development of staff.

Timeline for some deliverables

Table 1: Tentative timeline for some deliverables

Methodology

The candidate for the Service Provider must submit a proposal outlining the methodology of the training program. This proposal should include:

Training Methodology Document (maximum 2 pages) –a clear and structured methodology for delivering the training program, including:

• The proposed pedagogical approach, highlighting the use of case studies, practical exercises, and real-life scenarios to ensure applied learning in areas related to internal controls, risk-management and anti-corruption practices.
  • An explanation of how each training module will integrate practical tools and examples to promote effective risk management and internal control system, leadership, and risk-based decision-making within the DPA.
  • The proposed main topics for each of 2 modules of training program.

The proposed methodology should demonstrate an understanding of the DPA’s operational context and the critical role of effective risk-management and internal control system in the defence procurement area.

After the selection of the Service Provider, the topics, agenda, and speakers may be negotiated and adjusted in agreement with the EUACI. While tentative training topics are listed above, candidates are encouraged to modify them or propose their own if they address similarly relevant issues related to capacity building.

Start date and period of implementation of tasks

The expected duration of the contract is 3 months, with a tentative start at the beginning of April 2026 and completion in June 2026 (including reporting to the EUACI).

The tentative timeline for training is given in Table 1.

Estimated budget

The maximum budget available for this assignment is up to EUR 10 000. This amount includes all fees of the trainers/speakers and training organizers, meals or catering for participants including the service fee, conference/study rooms, printing study materials etc.

Note that the EUACIas an international technical assistance program is not a VAT payer and will provide all the necessary documents required.

Payment

Payment will be made in a maximum of two instalments.

The first instalment, representing a maximum of 30% of the total contract value, will be made after receipt of the Service Provider’s deliverables 1-2 form the Table 1, and invoice.

The second and final payment will be made upon receipt and approval of the Final Report and a Final Invoice.

The payment will be made in UAH according to the official NBU exchange rate.

Requirements for the Service Provider:

1. Expertise and capacity in Training Development:
2. Have at least 10 years of proven working experience in developing and delivering training programs on risk-management, internal control, integrity and good governance and related topics for management staff and relevant specialist of public/large private sector.
3.  Availability of own equipped training facilities in Kyiv.
4. Be able to ensure economic and technical capacities to perform the requested services as well as a relevant legal status to hire experts.
5. Have proven experience in organizing corporate trainings (especially for public sector staff).
6. Compliance and Ethics:
7. Adherence to ethical standards and legal requirements.
8. Commitment to confidentiality and data security.

Bids will be evaluated in accordance with the criteria provided below:

HOW TO APPLY

The proposals with:

• Financial Offer in EUR;
• Methodology for training program;
• Preliminary agenda of training program with the list of covered topics;
• CV of the inhouse trainers/lecturers or external experts/trainers involved by the Service Provider;
• Portfolio of relevant projects.

shall be submitted in electronic format only within the below deadline to the email: [email protected], cc [email protected] indicating the subject line “Training Program for the DPA”.

Any clarification questions for the bid request should be addressed to [email protected], no later than 15 March 2026, 17:00 Kyiv time.

The deadline for submitting proposals is 22 March 2026, 18:00 Kyiv time.

Bidding language: English.