Cyber security services – gauteng government tender

Email: [email protected]. Access‑code contacts: Betty – 082 885 4270; Cynthia Motaung – 083 461 6534. Submission address: BYLS Bridge Office Park, Olievenhoutbosch Road & Jean Ave, Centurion, 0062 (BID BOX MARKED 2).

• Submit bids in three sealed envelopes (Envelope 1: Phase 1 documents, Envelope 2: Technical/Functional proposal – 1 original + 1 copy, Envelope 3: Detailed price breakdown – 1 original + 1 copy).
• All envelopes must be placed in BID BOX MARKED 2 at BYLS Bridge Office Park, Centurion, clearly marked with the bid reference number (SACAA/CSM/00016/2025‑2026) and the company name.
• Closing date/time: 02 April 2026, 11:00 hrs. Late submissions, wrong box, or electronic submissions (email, fax, USB, etc.) will be disqualified.
• If using a courier, the delivery note must show the bid reference.
• Access to the office park requires an access code – arrange in advance with Betty (082 885 4270) or Cynthia Motaung (083 461 6534).
• Bids must be in English, neatly bound, and include all mandatory documents (CSD registration, tax PIN, B‑BBEE certificate, proof of authority).
• An amendment envelope may be used for changes, but must include the original bid.
• Failure to provide a complete price list or required references will render the bid non‑responsive.

Phase 1 – SCM Administrative (mandatory compliance): verify completeness of all required documents (CSD registration, SBD 1, SBD 3, SBD 4, preferential procurement forms). Phase 2 – Technical/Functional (mandatory): submit proof of Trend Micro partnership, at least 10 qualified staff (CISM, CEH, ISC2, Trend Micro Advanced), and trade reference letters (minimum 3, up to 5+ for higher points). Scoring: functionality weighted 70 points (minimum 70 points required to proceed). Phase 3 – Price & Specific Goal (80/20 preference point system): 80 points for price (formula Ps = 80 × [1 – (Pt‑Pmin)/Pt]), 20 points for B‑BBEE specific‑goal level (see table in tender). Only bidders meeting the 70‑point functionality threshold are evaluated in Phase 3.

Provide 24/7/365 cyber‑security monitoring, detection, threat hunting, and response using SACAA’s existing Trend Micro stack (Trend Vision One as exclusive SIEM). Monitor all listed Azure, cloud and on‑prem assets; ingest telemetry into Trend Vision One; deliver MDR, incident response, CREM, security‑awareness training, and platform administration. All platform admin staff must be South‑African based. No third‑party SIEM may be proposed. Provide additional ingestion and 6‑month retention credits as required.

Submit a detailed price schedule (firm prices in ZAR, VAT 15 % applicable). Price validity: 180 days from closing date. Include all cost elements (licence credits, travel, accommodation, consumables) with supporting invoices. Rates must be firm for the contract period or disclose adjustment basis (e.g., CPI). No USBs or electronic media accepted. Provide separate envelope for pricing (Envelope 3).

• Register on the Central Supplier Database (CSD) and provide CSD number.
• Submit SARS Tax Compliance Status (TCS) PIN or printed certificate; each consortium member must provide its own.
• Provide B‑BBEE status certificate or sworn affidavit (points claimed must be substantiated).
• Declare no directors, shareholders or partners are state employees; disclose any relationships with SACAA staff.
• Submit proof of authority (company resolution).
• Provide at least three (up to five) trade reference letters for CROC services delivered in South Africa within the last four years.
• No bidders from persons in the service of the State or close corporations with such persons will be accepted.