Compliance Checklist for ICT Government Tenders in South Africa

Government ICT

tenders are notoriously complex. Because technology changes rapidly and security is of paramount importance, the evaluation criteria for IT bids are often much more technical than general supply contracts. To ensure your bid reaches the final evaluation stage, use this comprehensive compliance checklist tailored to the South African public sector.

1. OEM Authorizations: Proof of Partnership

If you are selling hardware or proprietary software (e.g., Microsoft, Cisco, Dell), you must provide a current Original Equipment Manufacturer (OEM) authorization letter. This proves you are an authorized partner and that the government will receive genuine products and support.

• Check that the letter is addressed to your company specifically.
• Ensure the letter is not older than 12 months.
• Verify that your partner 'tier' (e.g., Gold, Platinum) matches the tender requirements.

2. Data Privacy and POPIA Compliance

With the Protection of Personal Information Act (POPIA) now fully in force, any IT software or database tender will require you to demonstrate your data handling policies.

• Information Officer: Proof that your company has registered an Information Officer with the Regulator.
• Data Protection Policy: A document outlining how you encrypt, store, and delete personal data.

3. ICASA Licensing (for Networking Tenders)

For tenders involving network infrastructure, fibre, or VoIP services, you must provide proof of your ICASA licenses:

• ECS (Electronic Communications
  Service): For providing internet and voice services.
• ECNS (Electronic Communications
  Network Service): For building
  physical network infrastructure.

4. Security Standards (ISO 27001)

For cloud-based or high-security data projects, ISO 27001 certification is becoming a standard 'pre-qualification' hurdle. If you don't have the certificate, ensure your Information Security Policy is robust and aligns with international best practices.

ICT Compliance Quick Checklist

Conclusion

Compliance in ICT

is about protecting the state from technical failure and data breaches. By ensuring your OEM relationships are documented, your data policies are POPIA-compliant, and your technical licenses are current, you eliminate 90% of the reasons for disqualification. Use this checklist as your final 'sanity check' before sealing your next IT bid.