Trellix skyhigh suite license renewals, support and maintenance – cipc bid 08 2026 2027

Closing date: 10 September 2026 at 11:00. No briefing session scheduled.

Supply Chain enquiries: Mr Hans Mmako ([email protected]). Technical enquiries: Mr Alfred Sekhula ([email protected]), Mr Andile Stulo ([email protected]), Mr Solly Bopape ([email protected]). Proposals to [email protected]. Physical submission to Tender Box at DTIC main gate, 77 Meintjies Street, Sunnyside.

Bidders must submit one original hard copy of the technical proposal and one USB containing both technical and price proposals in separate folders. The USB must be in PDF format, read-only, not password protected, and contain all documents including SBD forms. The price proposal must also be submitted in a separate sealed envelope marked with the bidder's name, containing SBD 3.3, SBD 1, and a price breakdown on company letterhead. All pages must be signed, initialled, and numbered. Bids must be deposited in the CIPC Tender Box at the DTIC main gate, 77 Meintjies Street, Sunnyside. Late or incomplete submissions will not be accepted.

Bidders must submit one original hard copy and one USB containing technical and price proposals in separate folders. USB must be PDF, read-only, no password, all documents included. Price proposal in separate sealed envelope with SBD 3.3, SBD 1, and price breakdown. All pages signed and numbered.

Evaluation is in three phases. Phase 1: compliance with mandatory requirements (SBD forms, tax clearance, B-BBEE certificate, CSD registration, OEM certificate). Phase 2: functional evaluation out of 100 points, minimum 60 to proceed. Criteria: OEM partnership status (60 points), resource competency (20), reference letters (20). Phase 3: price and preferential procurement using 80/20 system. Price 80 points, specific goals 20 points. Specific goals: black ownership (10), women ownership (8), disability ownership (2). CSD report and B-BBEE certificate are primary evidence. Lowest price gets full marks.

The scope is the renewal of Trellix Skyhigh Suite licenses, including support and maintenance for one year. The suite must support workstations, servers, cloud environments, firewall logs, and applications. Required capabilities include firewall integration, endpoint protection, investigation, incident management, threat intelligence, response, visibility and detection, data collection and analytics. Support must include 24/7 monitoring, threat hunting, and identification of critical threats within one hour. The supplier must provide training and skills transfer to CIPC staff.

Service providers must indicate through a project plan how they will implement, support and maintain the solution over the 1-year period.

Functional evaluation requires CVs of support team with experience in Trellix/Skyhigh services, and at least two reference letters/testimonials confirming successful delivery and support.

The Senior Manager: Information Assurance will subject the quality of service to quality control. If quality is not to the required level, the service provider must provide another resource at their own cost.

Pricing must be submitted as bill of quantities with unit costs, VAT inclusive, in ZAR, valid for 120 days. Total price (ceiling) carried to SBD 3.3 and SBD 1. Prices must remain firm for contract duration. All costs including transportation must be included.

Prices must be quoted in South African Rand, inclusive of VAT, and valid for 120 days. The total bid price (ceiling amount) must be carried over to SBD 3.3 and SBD 1. Prices must remain firm for the contract duration. All costs, including transportation, must be included. No advance payment will be made; payment will be per deliverables within PFMA prescribed periods. The bidder must submit a bill of quantities with unit costs.

Mandatory documents: SBD 1 (Invitation to Bid), SBD 4 (Declaration of Interest), SBD 8 (Past SCM Practices), SBD 9 (Independent Bid Determination), valid Tax Clearance Certificate (original), valid B-BBEE certificate (SANAS accredited) or sworn affidavit for EME/QSE, proof of CSD registration, and OEM partnership certificate for Trellix/Skyhigh. Failure to submit any mandatory document results in disqualification.

Bidders must submit OHS requirements: signed Health, Safety & Environmental Policy (OHS Act Section 16(1)), acceptance of OHS legislative obligations, valid COIDA letter. Upon award, OHS Act Section 37(2) agreement and OHS file compliance required.

The solution must support continued and uninterrupted ICT services, maintain system and business data integrity, and defend against cybersecurity attacks.

Proprietary rights: all work product belongs to CIPC; resource may not copy documents. Indemnity: resources indemnify CIPC against losses, damages, claims from injury, death, property damage, or IP infringement. Quality: CIPC may review quality and require replacement at provider's cost.

Special conditions: bidder must ensure confidentiality and integrity of information; CIPC may negotiate price; no travel costs covered; GCC applies; no advance payment; prices VAT inclusive; successful bidder must sign Declaration of Secrecy and SLA; resources must be available immediately; training and skills transfer required; license documentation provided; bidders may be asked to demonstrate claims; resources assessed; CIPC may not appoint.

Mandatory requirements: bid must be received on time, completed and signed; Declaration of Interest; original valid Tax Clearance Certificate; company registration certificate; valid B-BBEE certificate or sworn affidavit. OEM partnership certificate/letter for the proposed solution is mandatory.

Phase 3: Price 80 points, specific goals 20 points. Specific goals: black ownership (10 points), women ownership (8 points), disability ownership (2 points). CSD report and B-BBEE certificate are primary evidence. Lowest price gets full marks.