Managed information security, switches, access points, firewall, soc monitoring and network redesign for bankseta

Tender advertised: 04 August 2026 at 11:00.

Non-compulsory virtual briefing: 14 August 2026 at 11:00. Bidders must indicate attendance in writing within 5 days of advertising.

Final questions and answers due: 21 August 2026 (close of business).

Closing date: 28 August 2026 at 11:00.

Tender evaluation, bidder verification and due diligence: 15 September 2026.

Clarification presentations if required: 20 September 2026.

Provisional contract award: 30 September 2026.

Contract signatures: 01 October 2026.

SCM contact: Mr Jack Serite, Specialist: Supply Chain Management Unit, email [email protected], copy [email protected].

Escalation contacts: [email protected] and [email protected].

Submission address: Eco Origin Office Park, Block C2, 349 Witch-Hazel Avenue, Eco Park Estate, Highveld, Centurion, 0144.

Submission format:

• One original hardcopy marked "Original", one hard copy of the original, and one soft copy (preferably on a memory stick).
• Three envelopes: Envelope 1 – Original; Envelope 2 – Hard copy of original plus soft copy; Envelope 3 – Pricing schedule, SBD 1, and the BANKSETA Preference Points Claim Document.
• Each envelope must be clearly marked with the submission description and bid number.
• Deliver to the submission box at the BANKSETA reception: Eco Origin Office Park, Block C2, 349 Witch-Hazel Avenue, Eco Park Estate, Highveld, Centurion, 0144. Use gate 1; allow at least 30 minutes for security.
• Sign the submission register when depositing.
• Faxed, telexed, or emailed submissions are not accepted.
• Late submissions are rejected.
• Returnable documents: proposal and pricing schedule (Annexure A), SBD 1, SBD 4, SBD 6.1, CSD report, and signed special conditions. Missing or unsigned documents lead to immediate disqualification.
• For joint ventures, each partner must submit all documents plus the JV agreement.
• Proposals must remain valid for 150 days after closing.

Evaluation in three phases:

1. Compliance/eligibility – bids failing this are disqualified.
2. Technical/functionality – minimum threshold 75% (fallback 65% if no bid reaches 75%).
3. Price and BANKSETA preference points – highest combined score wins.

Technical/functionality weighting (total 100):

• Track record of bidder (reference letters): 30 points. 0 letters = 0, 1 = 1, 2 = 2, 3 = 3, 4 = 4, 5 or more = 5 points.
• Team leader experience and qualification: 30 points. Requires NQF Level 6 or higher and IT project management experience. Points based on years of experience: less than 1 = 0, 1 to <2 = 1, 2 to <3 = 2, 3 to <4 = 3, 4 to <5 = 4, 5+ = 5.
• Team member 1 experience and qualification: 40 points. Requires NQF Level 5 or higher, a certificate in network/cyber security, and relevant experience. Points based on years of experience: less than 1 = 0, 1 to <2 = 1, 2 to <3 = 2, 3 to <4 = 3, 4 to <5 = 4, 5+ = 5.

Price and preference points: 80/20 system. 80 points for price using the formula Ps = 80(1 - (Pt - Pmin)/Pmin). 20 points for BANKSETA specific goals: black ownership 7, women ownership 4, youth ownership 4, disability ownership/employment 2, small/medium business 3.

Preference points criteria:

• Black ownership: 51% or more black ownership.
• Youth ownership: 33% or more youth (35 years and below) ownership.
• Disability: 10% or more shareholding by persons with disabilities OR 5% or more permanent staff with disabilities.
• Small/medium business: annual turnover up to R10 million, 100% South African owned.
• An entity may claim points in multiple categories based on the same shareholders.
• False information leads to disqualification and reporting to National Treasury.

Scope: managed information security services including switches, access points, Windows firewall, network monitoring (SOC), and network redesign.

Implementation phase – provision of critical network equipment as a service:

• Centurion: 6 x 48-port PoE switches, 7 x Wi-Fi access points (min 20m radius).
• Bloemfontein: 1 x 24-port PoE switch, 1 x access point.
• East London: 1 x 24-port PoE switch, 1 x access point.
• Polokwane: 1 x 24-port PoE switch, 1 x access point.
• Durban: 1 x 24-port PoE switch, 1 x access point.
• Configure and partition VLANs for printers, switches, voice, data, access control and surveillance cameras.

Support and maintenance:

• Provide network monitoring for the duration of the contract.
• All switches and access points must be centrally managed (accessed, controlled, configured).

Network diagram review and design:

• Within 6 months of appointment: produce low-level diagram (IP addresses for critical equipment) and high-level diagram (for planning, audit, presentation).
• In year 3: review both diagrams on BANKSETA approval.
• In the last year, 6 months before contract end: review both diagrams.

Repair and installation:

• Up to 20 network points per year for printers, access points and endpoints, subject to BANKSETA approval.

New offices (Cape Town, North West, Mpumalanga) – provision and configuration as a service:

• Each: 1 x 24-port PoE switch and 1 x access point (min 20m radius).
• Support and maintenance for these offices, pro-rated in the year of implementation.

Reporting:

• Monthly and quarterly reports covering network monitoring, bandwidth utilisation, vulnerability management, critical infrastructure health, and change management.

User awareness:

• 2 phishing campaigns per year.
• 2 presentation sessions per year via Microsoft Teams.

Team requirements:

• Minimum two team members, one per role.
• Team leader: NQF Level 6 or higher, IT project management experience.
• Team member 1: NQF Level 5 or higher, certificate in network/cyber security, experience in network security (switches, routers, wireless, firewall, monitoring, SOC).
• Track record: reference letters from clients on client letterhead, signed and dated, with contact details.

Pricing schedule (Annexure A) must be completed in full using the provided format; failure leads to disqualification.

Prices remain fixed for each indicated year for the contract duration; no adjustments after contract signing.

VAT must be shown separately at 15%.

Total bidding price must be indicated.

All pricing assumptions, excluded costs and estimated costs must be documented.

Pricing must cover all items in the scope.

For new offices not yet established, pricing is for provisioning and configuration as a service; BANKSETA pays pro-rata in the year of implementation.

CSD registration: mandatory, checked before award. Bidders must not be restricted from doing business with the public sector, must have compliant tax status, and directors must not be state employees without permission.

Returnable forms (all must be completed and signed):

• SBD 1 (Invitation to Bid): bidder details and offer cover page.
• SBD 4 (Declaration of Interest): discloses any director/shareholder employed by the state or connected to the procuring institution; false disclosure disqualifies.
• SBD 6.1 (Preference Points Claim): claims BANKSETA preference points; failure to submit means no preference points claimed.
• CSD report.
• Special conditions: must be accepted by signing the last page.
• For joint ventures: each partner must have valid tax clearance or CSD tax status, signed JV agreement, and joint preference points claim.
• B-BBEE: BANKSETA does not allocate points for B-BBEE status level; preference points are based on BANKSETA specific goals (black, women, youth, disability, small/medium business ownership).

Evaluation timeline: bidder verification and due diligence 15 September 2026; clarification presentations 20 September 2026; provisional award 30 September 2026; contract signatures 01 October 2026.

Evaluation phases: compliance/eligibility, technical/functionality (minimum 75%, fallback 65%), then price and preference points (80/20 system).

Technical scoring: track record (reference letters) 30 points; team leader experience/qualification 30 points; team member 1 experience/qualification 40 points. Each criterion scored out of 5, then weighted.

Preference points (20 points total): black ownership 7, women ownership 4, youth ownership 4, disability 2, small/medium business 3. Claims must be substantiated; false information leads to disqualification and reporting to National Treasury.