Cybersecurity vulnerability testing software license for a period of 12 months

{"name":null,"email":"[email protected]","phone":null,"department":"SUPPLY CHAIN MANAGEMENT","address":"........................................................................"}

Submit the completed bid with all required forms and documents in the tender box on or before the closing date and time. Emailed quotations will not be accepted. Quotations received after the specified closing time and date will not be considered. It is the bidder's responsibility to ensure correct delivery into the tender box. Use of Tippex or erasable ink will result in non-responsiveness. All quotations must remain valid for 90 days after the closing date. Prices must be inclusive of VAT where applicable.

All prospective/interested Service Providers must complete the MBD 4, MBD 6.1, MBD 7.1, MBD 8, MBD 9 and Declaration of Bidder forms which are appended to the notice document. Tenderers are required to submit valid proof of claims for specific goals as stipulated in MBD 6.1. Failure to submit the documents requested above will result in a tender being non-responsive.

The 80/20 preference point system applies (for requirements with a Rand value up to R50,000,000, all applicable taxes included). Points will be allocated for specific goals claimed under the preference point system, with proof required for each specific goal claimed. Bidders must indicate how they claim points for each preference point system.

Cybersecurity vulnerability testing software license

For a period of 12 months

Buffalo City Metropolitan Development Agency (“BCMDA”)

of 23

Terms of reference: cybersecurity vulnerability testing software

License for a period of 12 months

The BCMDA is looking for a service provider to supply the software license for conducting

cybersecurity vulnerability testing. The licence must permit authorised vulnerability

assessments in the entity's environment and, where applicable, authorised third-party/client

environments.

The purpose of this Request for Proposal (RFP) is to find a suitable service supply a software

license cybersecurity for a vulnerability testing software for a period of 12 months.

The vulnerability software should at a minimum allow the Agency to perform the following

tasks:

a. Vulnerability Scanning

• Network vulnerability scanning.

• Internal vulnerability assessments.

• Scanning of servers, network infrastructure and devices.

• Scanning of authorised IP addresses, subnets and network ranges.

• Scheduled and on-demand vulnerability assessments.

b. Asset Discovery and Identification

• Discover authorised network-connected assets.

• Identify operating systems and software.

• Identify network services and exposed ports.

• Maintain an inventory of discovered assets.

• Identify assets requiring further security assessment.

c. Vulnerability Identification

• Known vulnerabilities and missing security patches.

• Outdated software and operating systems.

• Security misconfigurations.

• Weak or insecure services and protocols.

• Other security weaknesses relevant to the assessed environment.

of 23

d. Vulnerability Risk Assessment

• Assign severity ratings to identified vulnerabilities.

• Support CVSS scoring or an equivalent recognised vulnerability scoring

methodology.

• Categorise vulnerabilities according to severity.

• Enable BCMDA to identify critical and high-priority vulnerabilities.

• Provide information that assists ICT personnel in prioritising remediation.

e. Reporting

• Asset-based reports.

• Vulnerability-based reports.

• Severity-based reports.

• Remediation-oriented reports.

f. Scan Scheduling and Management

• Scheduled vulnerability scans.

• Recurring scanning capabilities.

• Configurable scanning policies.

• Centralised scan management.

4. Mandatory requirements

• Bidders must submit proof of completion of two previous project(s) for provision and

installation of ICT Vulnerability Testing Software Licenses in the last five years.

Such proof must be letter(s) of reference/completion detailing the Rand Value of work

performed at a price of minimum combined aggregate of R 100 000.00 or above.

• Failure to submit letter(s) of reference/completion will result in the bid being deemed

non- responsive. NO PURCHASE ORDERS / INVOICES / APPOINTMENT LETTERS

Will be accepted in this regard.

of 23

The vulnerability software should at a minimum allow the Agency to perform the following: [scope of work details as per terms of reference].

word “competitor” shall include any individual or organization, other than the bidder,

whether or not affiliated with the bidder, who:

(a) has been requested to submit a bid in response to this bid invitation;

(b) could potentially submit a bid in response to this bid invitation, based

on their qualifications, abilities or experience; and

(c) provides the same goods and services as the bidder and/or is in the

same line of business as the bidder

8. Service Providers must submit confirmation that the bidder’s municipal accounts are not

in arrears for a period exceeding 3 months. Such confirmation must be for the company

must be as follows:

o statements of municipal accounts showing the age of the municipal debt; OR

o a tenderers debt clearance certificate from their respective municipality that is

stamped and signed by that municipality; OR

o lease agreements (signed by both lessor and lessee) must be submitted and

must be supported by:

o a written confirmation from the lessor stating that the bidder is not in arrears with

regards to their payment obligations in terms of the lease agreement.

9. IN ADDITION TO 8 ABOVE: Service Providers must submit confirmation that its

directors’ municipal accounts are not in arrears for a period exceeding 3 months. Such

confirmation must be for the directors and must be as follows:

o statements of municipal accounts showing the age of the municipal debt; OR

o a tenderers debt clearance certificate from their respective municipality that is

stamped and signed by that municipality; OR

o lease agreements (signed by both lessor and lessee) must be submitted and

must be supported by:

o a written confirmation from the lessor stating that the bidder is not in arrears with

regards to their payment obligations in terms of the lease agreement.

10. Bidders must submit proof of completion of two previous project(s) for provision and

installation of ICT Vulnerability Testing Software Licenses in the last five years. Such

proof must be letter(s) of reference/completion detailing the Rand Value of work

performed at a price of minimum combined aggregate of R 100 000.00 or above.

Price 80

Specific goals 20

Total points for Price and SPECIFIC GOALS 100

Quotations must be submitted in hard copy in a sealed envelope, clearly marked: NOTICE CYBERSECURITY VULNERABILITY TESTING SOFTWARE LICENSE FOR A PERIOD

OF 12 MONTHS and must be deposited in the QUOTATIONS BOX, At the offices of the Buffalo

City Metropolitan Development Agency, 69 FRERE ROAD, VINCENT, EAST LONDON (CORNER

Of frere road and windsor road vincent - use entrance at windsor road),

5201 not later than the cut-off time of 12h00, 17 september 2026.

of 23

Specifications

For a period of 12 months

Buffalo City Metropolitan Development Agency (“BCMDA”)

of 23

Terms of reference: cybersecurity vulnerability testing software

License for a period of 12 months

1. Introduction

cybersecurity vulnerability testing. The licence must permit authorised vulnerability

assessments in the entity's environment and, where applicable, authorised third-party/client

environments.

2. Purpose

The purpose of this Request for Proposal (RFP) is to find a suitable service supply a software

license cybersecurity for a vulnerability testing software for a period of 12 months.

3. Scope of work

• Bidders must submit proof of completion of two previous project(s) for provision and

installation of ICT Vulnerability Testing Software Licenses in the last five years.

Such proof must be letter(s) of reference/completion detailing the Rand Value of work

performed at a price of minimum combined aggregate of R 100 000.00 or above.

• Failure to submit letter(s) of reference/completion will result in the bid being deemed

non- responsive. NO PURCHASE ORDERS / INVOICES / APPOINTMENT LETTERS

1. Vulnerability Testing Software Licence (12 1

months)

2. Training (Scope of Work areas) 1

Item Qty Total

1. Vulnerability Testing Software Licence (12 1

months)

2. Training (Scope of Work areas) 1

Total excluding VAT

VAT

Total including VAT

of 23

Mbd 4

Declaration of interest

1. No bid will be accepted from persons in the service of the state1.

2. Any person, having a kinship with persons in the service of the state, including a blood

relationship, may make an offer or offers in terms of this invitation to bid. In view of

possible allegations of favouritism, should the resulting bid, or part thereof, be awarded

to persons connected with or related to persons in service of the state, it is required that

the bidder or their authorised representative declare their position in relation to the

evaluating/adjudicating authority.

3 In order to give effect to the above, the following questionnaire must be completed

and submitted with the bid.

3.1 Full Name of bidder or his or her representative:..............................................

3.2 Identity Number: .......................................................................................

3.3 Position occupied in the Company (director, trustee, hareholder2):......................

3.4 Company Registration Number: ..................................................................

3.5 Tax Reference Number:..............................................................................

3.6 VAT Registration Number: ........................................................................

3.7 The names of all directors / trustees / shareholders members, their individual identity

numbers and state employee numbers must be indicated in paragraph 4 below.

3.8 Are you presently in the service of the state? YES / NO

3.8.1 If yes, furnish particulars. ....................................................................

1MSCM Regulations: “in the service of the state” means to be –

(a) a member of –

(i) any municipal council;

(ii) any provincial legislature; or

(iii) the national Assembly or the national Council of provinces;

(b) a member of the board of directors of any municipal entity;

(c) an official of any municipality or municipal entity;

(d) an employee of any national or provincial department, national or provincial public entity or

constitutional institution within the meaning of the Public Finance Management Act, 1999 (Act

No.);

(e) an executive member of the accounting authority of any national or provincial public entity; or

(f) an employee of Parliament or a provincial legislature.

2 Shareholder” means a person who owns shares in the company and is actively involved in the

management of the company or business and exercises control over the company.

of 23

3.9 Have you been in the service of the state for the past twelve months? ...YES / NO

3.9.1 If yes, furnish particulars....................................................................

...........................................................................................................

3.10 Do you have any relationship (family, friend, other) with persons

in the service of the state and who may be involved with

the evaluation and or adjudication of this bid? ................................. YES / NO

3.10.1 If yes, furnish particulars.

..........................................................................................

..........................................................................................

3.11 Are you, aware of any relationship (family, friend, other) between

any other bidder and any persons in the service of the state who

may be involved with the evaluation and or adjudication of this bid? YES / NO

3.11.1 If yes, furnish particulars

.............................................................................................

.......................................................................................................

3.12 Are any of the company’s directors, trustees, managers,

principle shareholders or stakeholders in service of the state? YES / NO

3.12.1 If yes, furnish particulars.

...........................................................................................

...........................................................................................

3.13 Are any spouse, child or parent of the company’s directors

trustees, managers, principle shareholders or stakeholders

in service of the state? YES / NO

3.13.1 If yes, furnish particulars.

...........................................................................................

...........................................................................................

3.14 Do you or any of the directors, trustees, managers,

principle shareholders, or stakeholders of this company

have any interest in any other related companies or

business whether or not they are bidding for this contract. YES / NO

3.14.1 If yes, furnish particulars:

.........................................................................................

.........................................................................................

of 23

4. Full details of directors / trustees / members / shareholders.

Full Name Identity Number State Employee

Number

......................................... ............................................

Signature Date

........................................ .............................................

Capacity Name of Bidder

of 23

Mbd 6.1

Preference points claim form in terms of the preferential

Procurement regulations 2022

This preference form must form part of all tenders invited. It contains general information

and serves as a claim form for preference points for specific goals.

Nb: before completing this form, tenderers must study the

General conditions, definitions and directives applicable in

Respect of the tender and preferential procurement

Regulations, 2022

1. General conditions

1.1 The following preference point systems are applicable to invitations to tender:

• the 80/20 system for requirements with a Rand value of up to R50 000 000 (all

applicable taxes included); and

• the 90/10 system for requirements with a Rand value above R50 000 000 (all

applicable taxes included).

1.2 Preference point system applicable to this RFQ

a) The applicable preference point system for this tender is the 80/20 preference point

system.

1.3 Points for this tender shall be awarded for:

(a) Price; and

(b) Specific Goals.

1.4 The maximum points for this tender are allocated as follows:

Points

Price 80

Specific goals 20

Total points for Price and SPECIFIC GOALS 100

1.5 Failure on the part of a tenderer to submit proof or documentation required in terms of

this tender to claim points for specific goals with the tender, will be interpreted to mean

that preference points for specific goals are not claimed.

1.6 The organ of state reserves the right to require of a tenderer, either before a tender is

adjudicated or at any time subsequently, to substantiate any claim in regard to

preferences, in any manner required by the organ of state.

of 23

2. Definitions

(a) “tender” means a written offer in the form determined by an organ of state in

response to an invitation to provide goods or services through price quotations,

competitive tendering process or any other method envisaged in legislation;

(b) “price” means an amount of money tendered for goods or services, and

includes all applicable taxes less all unconditional discounts;

(c) “rand value” means the total estimated value of a contract in Rand, calculated at the

time of bid invitation, and includes all applicable taxes;

(d) “tender for income-generating contracts” means a written offer in the form

determined by an organ of state in response to an invitation for the origination of

income-generating contracts through any method envisaged in legislation that will

result in a legal agreement between the organ of state and a third party that produces

revenue for the organ of state, and includes, but is not limited to, leasing and disposal

of assets and concession contracts, excluding direct sales and disposal of assets

through public auctions; and

(e) “the Act” means the Preferential Procurement Policy Framework Act, 2000 (Act No.

).

3. Formulae for procurement of goods and services

3.1. Points awarded for price

3.1.1 The 80/20 preference point systems

A maximum of 80 points is allocated for price on the following basis:

Pt−Pmin

Ps= 80(1− )

Pmin

Where

Ps = Points scored for price of tender under consideration

Pt = Price of tender under consideration

Pmin = Price of lowest acceptable tender

4. Points awarded for specific goals

4.1. In terms of Regulation 4(2); 5(2); 6(2) and 7(2) of the Preferential Procurement

Regulations, preference points must be awarded for specific goals stated in the tender.

For the purposes of this tender the tenderer will be allocated points based on the goals

stated in table 1 below as may be supported by proof/ documentation stated in table

1 below:

Table 1: Specific goals for the tender and points claimed are indicated per the table

below.

Note to tenderers: The tenderer must indicate how they claim points for each

preference point system.)

of 23

Number of Required proof for specific

Number of points points goals claimed

allocated claimed

The specific goals (80/20 (80/20 system) allocated points in system)

terms of this tender (To be completed

(To be by the organ of

completed by state)

the tenderer)

B-BBEE Level one 8 B-BBEE certificate confirming

status contributor B-BBEE level one status

contribution

Enterprise located 5 Proof of Municipal account as

within the BCMM per tender conditions above

municipal area

Enterprise owned by 3 Detailed CSD report /

majority black women detailed B-BBEE certificate

demonstrating black women

ownership

Enterprise owned by 3 Detailed CSD report /

majority black youth detailed B-BBEE certificate

demonstrating black youth

ownership

Enterprise owned by 1 Proof from Registered

majority disabled Medical Practitioner / SARS

person(s) exemption (ITR-DD Form) /

CSD detailed report

Total points 20

Declaration with regard to company/firm

4.2. Name of company/firm...............................................................................

4.3. Company registration number: .....................................................................

4.4. Type of company/ firm

 Partnership/Joint Venture / Consortium

 One-person business/sole propriety

 Close corporation

 Public Company

 Personal Liability Company

 (Pty) Limited

 Non-Profit Company

 State Owned Company

[Tick applicable box]

4.5. I, the undersigned, who is duly authorised to do so on behalf of the company/firm,

certify that the points claimed, based on the specific goals as advised in the tender,

qualifies the company/ firm for the preference(s) shown and I acknowledge that:

of 23

i) The information furnished is true and correct;

ii) The preference points claimed are in accordance with the General Conditions as

indicated in paragraph 1 of this form;

iii) In the event of a contract being awarded as a result of points claimed as shown

in paragraphs 1.4 and 4.2, the contractor may be required to furnish

documentary proof to the satisfaction of the organ of state that the claims are

correct;

iv) If the specific goals have been claimed or obtained on a fraudulent basis or any

of the conditions of contract have not been fulfilled, the organ of state may, in

addition to any other remedy it may have –

(a) disqualify the person from the tendering process;

(b) recover costs, losses or damages it has incurred or suffered as a

result of that person’s conduct;

(c) cancel the contract and claim any damages which it has suffered

as a result of having to make less favourable arrangements due

to such cancellation;

(d) recommend that the tenderer or contractor, its shareholders and

directors, or only the shareholders and directors who acted on a

fraudulent basis, be restricted from obtaining business from any

organ of state for a period not exceeding 10 years, after the audi

alteram partem (hear the other side) rule has been applied; and

(e) forward the matter for criminal prosecution, if deemed necessary.

..............................................

Signature(s) of tenderer(s)

Surname and name: ................................................................

Date: ...............................................................

Address: ...............................................................

...............................................................

...............................................................

...............................................................

of 23

Mbd 7.1

Contract form – purchase of goods/works/ services

Part i – form of offer

(To be filled by the bidder)

a) I hereby undertake to supply all goods / works / service as described in the attached

bidding documents:

__________________________________________________ (Name of Company) in

accordance with the requirements and specification stipulated in this document with NOTICE

at the prices by quoted. My offer remains binding upon me and open for acceptance

by the BCMDA during the validity period indicated and calculated from the closing time of bid.

b) THE OFFERED TOTAL OF THE PRICE INCLUSIVE OF VALUE ADDED TAX IS:

__________________________________________________Rand (in words);

R__________________________ (in figures)

c) Binding documents, viz

▪ Invitation to bid

▪ Pricing schedule

▪ Specification

▪ Declaration of interests

▪ Form of offer and acceptance

▪ General and Special conditions of the contract

▪ Other (please specify)

d) I confirm that I have satisfied myself as to the correctness and validity of my bid that

the prices and rates quoted cover all the goods/ works / services specified in the

bidding documents; that the prices and rates cover all my obligations and I accept that

any mistakes regarding prices / rates and calculations will be at my own risk.

e) I accept full responsibility for the proper execution and fulfilment of all obligations and

conditions devolving on me under this agreement as the principal liable for the due

fulfilment of this contract.

f) I declare that I have no participation in any collusive practices with any bidder or any

other person regarding this bid or any other bid.

g) Certify that the information furnished on declaration forms is true and correct.

of 23

h) I accept that, in addition to cancellation of a contract, action may be taken against me

should the declarations proved to be false.

i) A Service Level Agreement (SLA) will be signed on acceptance of your offer which will

detail the conditions of contract.

j) I confirm that I am duly authorised to sign this bid and the contract.

Signed at ____________________ on this_____ day of ___________________ 2026.

Name & Surname: ______________________________________________

Capacity: ______________________________________________

Signature: ______________________________________________

Name of Firm: ______________________________________________

Date: ______________________________________________

Initials & Surname of Witness: ______________________________________

of 23

12.2 Part ii – acceptance form

(To be filled by the BCMDA)

a) I ________________________________ in my capacity as

__________________________________________ accept your bid under reference

NOTICE for the supply of goods / works / services indicated hereunder and

further specified in the annexure(s).

b) I undertake to make payment for the goods delivered / works / services rendered in

accordance with the terms and conditions of this contract within 30 (thirty) days after

receipt of invoice accompanied by proof of delivery note /.

c) I confirm that I am duly authorised to sign this contract.

Signed at _______________________ on this ____ day of _________________ 2026.

Initials & Surname:

of 23

5. Pricing schedule

4.2. Name of company/firm...............................................................................

4.3. Company registration number: .....................................................................

4.4. Type of company/ firm

 Partnership/Joint Venture / Consortium

 One-person business/sole propriety

 Close corporation

 Public Company

 Personal Liability Company

 (Pty) Limited

 Non-Profit Company

 State Owned Company

[Tick applicable box]

4.5. I, the undersigned, who is duly authorised to do so on behalf of the company/firm,

certify that the points claimed, based on the specific goals as advised in the tender,

qualifies the company/ firm for the preference(s) shown and I acknowledge that:

of 23

i) The information furnished is true and correct;

ii) The preference points claimed are in accordance with the General Conditions as

indicated in paragraph 1 of this form;

iii) In the event of a contract being awarded as a result of points claimed as shown

in paragraphs 1.4 and 4.2, the contractor may be required to furnish

documentary proof to the satisfaction of the organ of state that the claims are

correct;

iv) If the specific goals have been claimed or obtained on a fraudulent basis or any

of the conditions of contract have not been fulfilled, the organ of state may, in

addition to any other remedy it may have –

(a) disqualify the person from the tendering process;

(b) recover costs, losses or damages it has incurred or suffered as a

result of that person’s conduct;

(c) cancel the contract and claim any damages which it has suffered

as a result of having to make less favourable arrangements due

to such cancellation;

(d) recommend that the tenderer or contractor, its shareholders and

directors, or only the shareholders and directors who acted on a

fraudulent basis, be restricted from obtaining business from any

organ of state for a period not exceeding 10 years, after the audi

alteram partem (hear the other side) rule has been applied; and

(e) forward the matter for criminal prosecution, if deemed necessary.

..............................................

Signature(s) of tenderer(s)

Surname and name: ................................................................

Date: ...............................................................

Address: ...............................................................

...............................................................

...............................................................

...............................................................

of 23

Mbd 7.1

Contract form – purchase of goods/works/ services

Part i – form of offer

(To be filled by the bidder)

a) I hereby undertake to supply all goods / works / service as described in the attached

bidding documents:

__________________________________________________ (Name of Company) in

accordance with the requirements and specification stipulated in this document with NOTICE

at the prices by quoted. My offer remains binding upon me and open for acceptance

by the BCMDA during the validity period indicated and calculated from the closing time of bid.

b) THE OFFERED TOTAL OF THE PRICE INCLUSIVE OF VALUE ADDED TAX IS:

__________________________________________________Rand (in words);

R__________________________ (in figures)

c) Binding documents, viz

▪ Invitation to bid

▪ Pricing schedule

▪ Specification

▪ Declaration of interests

▪ Form of offer and acceptance

▪ General and Special conditions of the contract

▪ Other (please specify)

d) I confirm that I have satisfied myself as to the correctness and validity of my bid that

the prices and rates quoted cover all the goods/ works / services specified in the

bidding documents; that the prices and rates cover all my obligations and I accept that

any mistakes regarding prices / rates and calculations will be at my own risk.

e) I accept full responsibility for the proper execution and fulfilment of all obligations and

conditions devolving on me under this agreement as the principal liable for the due

fulfilment of this contract.

f) I declare that I have no participation in any collusive practices with any bidder or any

other person regarding this bid or any other bid.

g) Certify that the information furnished on declaration forms is true and correct.

of 23

h) I accept that, in addition to cancellation of a contract, action may be taken against me

should the declarations proved to be false.

i) A Service Level Agreement (SLA) will be signed on acceptance of your offer which will

detail the conditions of contract.

j) I confirm that I am duly authorised to sign this bid and the contract.

Signed at ____________________ on this_____ day of ___________________ 2026.

Name & Surname: ______________________________________________

Capacity: ______________________________________________

Signature: ______________________________________________

Name of Firm: ______________________________________________

Date: ______________________________________________

Initials & Surname of Witness: ______________________________________

of 23

12.2 Part ii – acceptance form

(To be filled by the BCMDA)

a) I ________________________________ in my capacity as

__________________________________________ accept your bid under reference

4.4 Does the Does Is the bidder or any of its directors owe any Yes No

municipal rates and taxes or municipal charges to the municipality /

municipal entity, or to any other municipality / municipal entity, that

is in arrears for more than three months?

4.4.1 If so, furnish particulars:

4.5 Was any contract between the bidder and the municipality / Yes No

municipal entity or any other organ of state terminated during the

past five years on account of failure to perform on or comply with the

contract?

4.7.1 If so, furnish particulars:

Csd number

CSD report /

Central Supplier Database

Appointment letters

1. Service Providers must be registered on National Treasury’s Central Supplier Database

and submit a summary report as proof of registration or alternatively reflect the CSD

2. All prospective/interested Service Providers must complete the MBD 4, MBD 6.1,

MBD 7.1, MBD 8, MBD 9 and Declaration of Bidder forms which are appended to

MBD 6.1 below.

o lease agreements (signed by both lessor and lessee) must be submitted and

st be registered on National Treasury’s Central Supplier Database

regards to their payment obligations in terms of the lease agreement.

B-BBEE Minimum Level: one

Points Allocation: 3 points

B-BBEE Details: points based on the goals

stated in table 1 below as may be supported by proof/ documentation stated in table

1 below:

Table 1: Specific goals for the tender and points claimed are indicated per the table

below.

Note to tenderers: The tenderer must indicate how they claim points for each

preference point system.)

of 23

Number of Required proof for specific

Number of points points goals claimed

allocated claimed

The specific goals (80/20 (80/20 system) allocated points in system)

terms of this tender (To be completed

(To be by the organ of

completed by state)

the tenderer)

B-BBEE Level one 8 B-BBEE certificate confirming

status contributor B-BBEE level one status

contribution

Enterprise located 5 Proof of Municipal account as

within the BCMM per tender conditions above

municipal area

Enterprise owned by 3 Detailed CSD report /

majority black women detailed B-BBEE certificate

demonstrating black women

ownership

Enterprise owned by 3 Detailed CSD report /

majority black youth detailed B-BBEE certificate

demonstrating black youth

ownership

Enterprise owned by 1 Proof from Registered

majority disabled Medical Practitioner / SARS

person(s) exemption (ITR-DD Form) /

CSD detailed report

Total points 20

Declaration with regard to company/firm

4.2. Name of company/firm...............................................................................

4.3. Company registration number: .....................................................................

4.4. Type of company/ firm

 Partnership/Joint Venture / Consortium

 One-person business/sole propriety

 Close corporation

 Public Company

 Personal Liability Company

 (Pty) Limited

 Non-Profit Company

 State Owned Company

[Tick applicable box]

4.5. I, the undersigned,

requirements (Compliance Evaluation):

1. Service Providers must be registered on National Treasury’s Central Supplier Database

and submit a summary report as proof of registration or alternatively reflect the CSD

supplier number on their proposal.

2. All prospective/interested Service Providers must complete the MBD 4, MBD 6.1,

MBD 7.1, MBD 8, MBD 9 and Declaration of Bidder forms which are appended to

the notice document.

tasks:

a. Vulnerability Scanning

• Network vulnerability scanning.

• Internal vulnerability assessments.

• Scanning of servers, network infrastructure and devices.

• Scanning of authorised IP addresses, subnets and network ranges.

• Scheduled and on-demand vulnerability assessments.

b. Asset Discovery and Identification

• Discover authorised network-connected assets.

• Identify operating systems and software.

• Identify network services and exposed ports.

• Maintain an inventory of discovered assets.

• Identify assets requiring further security assessment.

c. Vulnerability Identification

• Known vulnerabilities and missing security patches.

• Outdated software and operating systems.

• Security misconfigurations.

• Weak or insecure services and protocols.

• Other security weaknesses relevant to the assessed environment.

of 23

d. Vulnerability Risk Assessment

• Assign severity ratings to identified vulnerabilities.

• Support CVSS scoring or an equivalent recognised vulnerability scoring

methodology.

• Categorise vulnerabilities according to severity.

• Enable BCMDA to identify critical and high-priority vulnerabilities.

• Provide information that assists ICT personnel in prioritising remediation.

e. Reporting

• Asset-based reports.

• Vulnerability-based reports.

• Severity-based reports.

• Remediation-oriented reports.

f. Scan Scheduling and Management

• Scheduled vulnerability scans.

• Recurring scanning capabilities.

• Configurable scanning policies.

• Centralised scan management.

enterprise:

i) authorizes the Employer to obtain a tax clearance certificate from the South African Revenue

Services that my / our tax matters are in order;

ii) confirms that neither the name of the enterprise or the name of any partner, manager, director

or other person, who wholly or partly exercises, or may exercise, control over the enterprise

appears on the Register of Tender Defaulters established in terms of the Prevention and

Combating of Corrupt Activities Act of 2004;

iii) confirms that no partner, member, director or other person, who wholly or partly exercises, or

may exercise, control over the enterprise appears, has within the last five years been convicted

of fraud or corruption;

iv) confirms that I / we are not associated, linked or involved with any other tendering entities

submitting tender offers and have no other relationship with any of the tenderers or those

responsible for compiling the scope of work that could cause or be interpreted as a conflict of

interest; and

iv) confirms that the contents of this questionnaire are within my personal knowledge and are to

the best of my belief both true and correct.

ensure that, when bids are considered, reasonable steps are taken to prevent any form

of bid-rigging.

5 In order to give effect to the above, the attached Certificate of Bid Determination (MBD

9. must be completed and submitted with the bid:

BCMDA reserves the right to request further written information or clarification on any aspect. The BCMDA does not bind itself to accept the lowest priced tender or any tender. All quotations are valid for 90 days after the closing date. BCMDA will not take responsibility for incorrectly delivered quotations sent by courier. Quotations must be submitted in hard copy in a sealed envelope, clearly marked: NOTICE CYBERSECURITY VULNERABILITY TESTING SOFTWARE LICENSE FOR A PERIOD OF 12 MONTHS and deposited in the QUOTATIONS BOX at the offices of the Buffalo City Metropolitan Development Agency, 69 FRERE ROAD, VINCENT, EAST LONDON (CORNER OF FRERE ROAD AND WINDSOR ROAD VINCENT - USE ENTRANCE AT WINDSOR ROAD), 5201 NOT LATER THAN THE CUT-OFF TIME OF 12H00, 17 SEPTEMBER 2026.

Bidders must meet all minimum requirements for compliance evaluation and the mandatory requirements stipulated in section 8 of the terms of reference. Bidders must submit confirmation that the bidder's municipal accounts are not in arrears, and that its directors' municipal accounts are not in arrears for a period exceeding 3 months. Where the bidder is not the owner of the premises, a lease agreement (signed by both lessor and lessee) must be submitted, supported by a written confirmation from the lessor that the bidder is not in arrears with payment obligations. Bidders must provide proof of relevant experience, including letters of reference or completion detailing the Rand value of work performed at a minimum combined aggregate of R 100,000.00 or above. Bidders must not be listed on the Register for Tender Defaulters in terms of section 29 of the Prevention and Combating of Corrupt Activities Act.

The 80/20 preference point system applies. Points will be allocated for specific goals claimed under the preference point system, with proof required for each specific goal claimed. Bidders must indicate how they claim points for each preference point system.