What are the submission requirements for this tender (Ref: ICASA 25-2026)?

• Submit one (1) original, three (3) hard copies, and one (1) electronic copy on a USB in PDF format. • Pricing must be submitted in a separate sealed envelope. • The original copy must be signed in ink by an authorized representative and initialed on every page. • Ensure the electronic copy matches the hard copies and submit the USB in a sealed padded envelope. • Deposit bids into the ICASA bid box located at Block C Reception, 350 Witch-Hazel Avenue, Eco Point Office Park, Centurion. • Closing date: 29 July 2026 at 11:00. Late bids will not be accepted. • Bids sent by post or courier must reach the office and be deposited into the bid box by the closing date. • Use official forms provided; do not re-type. • Failure to comply with submission requirements may result in disqualification.

How will bids be evaluated?

Eligible bidders must: 1) Be registered on the National Treasury Central Supplier Database (CSD), 2) Submit valid tax clearance certificate(s)/pin(s) for all entities involved, 3) Not be blacklisted on the National Treasury database, 4) Not have directors/members who are persons in the service of the state, 5) For JV/Consortium: provide signed legal agreement and tax clearance for each partner, 6) Meet the 80% functionality evaluation threshold, 7) Score >8/10 in live demonstration phase, 8) Submit all mandatory SBD forms completed and signed, 9) Provide proof for specific goals claims (CIPC documents, disability confirmation, CSD registration report).

What are the technical specifications?

• Scope: Review and update the ICASA IT Strategy for a period of 6 months. • The bid is subject to the Preferential Procurement Policy Framework Act (PPPFA) 2000 and Preferential Procurement Regulations 2022. • Bids must be submitted in English. • Confidentiality: All information in the bid document is proprietary to ICASA and may only be used for proposal preparation. • Bidders must not make news releases about this bid without ICASA's consent. • The RFB and appended documentation form the basis for a formal contract. • Refer to Annexure A for detailed functional criteria and terms of reference.

What financial requirements apply to bidders?

• Pricing must be submitted in a separate sealed envelope. • All prices must be VAT inclusive and quoted in South African Rand (ZAR). • Indicate total bid price clearly; it must match the price in the pricing schedule. • Specify if rates are firm for the full contract period; if not, detail adjustment basis (e.g., CPI). • Consortium or joint venture partners must submit complete sets of latest audited financial statements. • No price adjustments 100% linked to exchange rate variations are allowed. • Clearly indicate any portion of the price linked to exchange rates. • All additional costs must be specified. • Use SBD 3.1 Pricing Schedule form. • Certified invoices must be rendered for persons involved in the project, with hourly/daily rates specified.

What compliance and legal requirements must bidders meet?

• Mandatory registration on the Central Supplier Database (CSD) with National Treasury. • Submit valid Tax Clearance Certificate(s) or PIN: - For individual bidders: Tax Clearance Certificate/PIN. - For joint ventures: Tax Clearance Certificates/PINs for each entity and a signed legal agreement. - For consortia: Tax Clearance Certificates/PINs for each entity and a signed legal agreement. - For subcontracting: Main bidder and subcontractor Tax Clearance Certificates/PINs. • Failure to submit mandatory documents results in disqualification from functionality evaluation and no preferential points. • Submit proof for preferential points (CIPC document, doctor's letter confirming disability, CSD Registration Report). • Complete all required SBD forms (SBD 1, 2, 3.1, 4, 5, 6.1, 7.1, 8, 9, and Declaration in terms of Fronting). • International companies are encouraged to partner with local companies and provide an agreement. • Disclosure of any potential conflict of interest is required.

What are the important dates and deadlines for this tender?

• Closing date: 29 July 2026. • Closing time: 11:00. • Bid validity period: 120 calendar days from 29 July 2026. • ICASA may request an extension of the validity period if evaluation is not finalized within this period. • No briefing session or site visit dates are specified.

Who should be contacted for queries about this tender?

• For bid enquiries: Bid Administration Office. • Email: BidAdministration@icasa.org.za. • Telephone: (012) 568 3629. • Submission address: Block C Reception, 350 Witch-Hazel Avenue, Eco Point Office Park, Centurion. • All questions must be addressed to the Supply Chain Unit via email.

ICASA IT Strategy Review & Update Tender in Gauteng

DocumentAnnexure A-C - Terms Of Reference IT Strategy .pdfReview complete

Description

Source: Annexure A-C - Terms Of Reference IT Strategy .pdf

ICASA is the regulator for communications, broadcasting, and postal services.
The IT Division requires a service provider to review and update its draft IT strategy to ensure it is forward-looking, aligned with ICASA’s 5-year Strategic Plan, and includes digital modernisation, AI, OT, and stakeholder consultation.
The engagement aims to produce a practical, costed strategy with a 5-year implementation plan.

Submission Guidelines

Source: Annexure A-C - Terms Of Reference IT Strategy .pdf (unknown)

Submit the following completed and signed documents as part of your bid: SBD 1 (Invitation to Bid), SBD 2 (Tax Clearance Certificate Requirements), SBD 3.1 (Pricing schedule), SBD 4 (Declaration of Interest), SBD 5 (National Industrial Participation Programme), SBD 6.1 (Preference Points claim form), SBD 7.1 (Contract form), SBD 8 (Declaration of Bidder’s Past Supply Chain Management Practices), SBD 9 (Certificate of Independent Bid Determination), and a Declaration in terms of Fronting.
Failure to submit any required document will result in disqualification.
You must also complete and submit Annexure C (Functionality Requirements) covering both Deliverable Requirements (C1-C5) and Methodology Requirements (C6-C10).

Returnable Documents

Source: Annexure A-C - Terms Of Reference IT Strategy .pdf (unknown)

Required returnable documents: SBD 1, SBD 2, SBD 3.1, SBD 4, SBD 5, SBD 6.1, SBD 7.1, SBD 8, SBD 9, Declaration in terms of Fronting.
Also submit completed Annexure C (Functionality Requirements) covering Deliverable Requirements (C1-C5) and Methodology Requirements (C6-C10).

Evaluation Criteria

Source: Annexure A-C - Terms Of Reference IT Strategy .pdf (unknown)

Administrative compliance with all SBD forms; 2) Capacity for onsite engagements in Centurion (purely online providers disqualified); 3) Minimum 3 onsite facilitation sessions; 4) Provision of reference letters for past IT strategy projects (last 5 years); 5) Functional evaluation score ≥80/100 to proceed to presentation phase.

Technical Specifications

Source: Annexure A-C - Terms Of Reference IT Strategy .pdf (unknown)

Scope of Work – Minimum Specifications:

Review the current ICASA Business and IT landscape.
Articulate key digital modernisation programmes.
Integrate emerging technologies (AI) with international benchmarking.
Include Operational Technology (OT) considerations.
Conduct broader consultation with key ICASA stakeholders.
Align the IT strategy with the approved ICASA 5-year Strategic Plan.
Produce a complete IT strategy document ready for internal approval.
Develop a costed 5-year implementation plan with year-by-year roadmap and cost estimates.
Conduct at least three onsite facilitation sessions at ICASA head office in Centurion (bidder decides duration).
Provide a detailed project plan confirming completion within the 6-month contract period.
Provide a detailed proposal/methodology.

Onsite Facilitation Requirements (Mandatory):

At least three sessions at ICASA Centurion head office.
Service provider prepares facilitation materials, leads sessions, captures outputs.
Service provider covers all travel costs for facilitators.
Coordinate with ICASA project owner to identify and schedule stakeholders at least 10 working days before each session.
Submit a stakeholder engagement report within 5 working days after each session.

Deliverables:

Project inception report.
Current state assessment report (including gap analysis and IT maturity assessment).
Stakeholder engagement report.
Draft IT strategy document.
ICASA review and feedback.
Final IT strategy document (submitted in Microsoft Word and PDF with editable graphics).
Costed 5-year implementation plan.
Final stakeholder presentation.
Project closure report.

Costed 5-Year Implementation Plan Requirements:

Cover years 1–5 with annual focus themes: Foundation/Quick Wins, Core Capability Development, Digital Enablement, Advanced Capability (AI integration, OT/IT convergence), Innovation and Maturity.
Each year must include: estimated cost in ZAR, key initiatives, resource requirements, milestones, key risks and mitigating actions.
Plan must be presented in a format suitable for ICASA’s annual budget planning, with costs referenced to current South African market benchmarks.

Project Management Requirements:

Project plan must include: Work Breakdown Structure, Milestones, Timing (Gantt chart), Resources, Risk Management (risk register), Quality Control.
Governance: ICASA CIO is Project Sponsor; designated IT manager is Project Owner; service provider must appoint a named Project Lead.
Fortnightly progress meetings and written progress reports required.

Methodology

Source: Annexure A-C - Terms Of Reference IT Strategy .pdf

Service provider must provide a detailed methodology covering: discovery and assessment, stakeholder engagement, strategy development, implementation planning, and quality assurance.
Methodology must address structured processes, use of frameworks (e.g., COBIT, TOGAF), validation steps with ICASA, and at least three formal review cycles.

Experience & Qualifications

Source: Annexure A-C - Terms Of Reference IT Strategy .pdf

Provide contactable reference letters from previous IT Strategy projects completed in the last 5 years. Letters must be on client letterhead and include client name, contact details, completion date, and description of services.
Provide company profile demonstrating years of experience in IT Strategy Development.

Quality Management

Source: Annexure A-C - Terms Of Reference IT Strategy .pdf

Project plan must include Quality Control Management as a required element.
Methodology must include a quality assurance process for all deliverables before submission, review checkpoints, a process for addressing ICASA comments, and formal sign-off on each key deliverable.

Pricing Schedule

Source: Annexure A-C - Terms Of Reference IT Strategy .pdf (unknown)

Submit SBD 3.1 Pricing schedule.
The costed 5-year implementation plan must include annual cost estimates in ZAR, referenced to market benchmarks.

Financial Requirements

Source: Annexure A-C - Terms Of Reference IT Strategy .pdf (unknown)

Submit SBD 3.1 Pricing schedule as part of administrative compliance.
The costed 5-year implementation plan must include estimated costs for each year expressed in South African Rand.
Cost estimates must be realistic, referenced to current South African market benchmarks, and presented in a format suitable for ICASA’s annual budget planning.

Compliance Requirements

Source: Annexure A-C - Terms Of Reference IT Strategy .pdf (unknown)

Mandatory Compliance Documents (Phase 1 Administrative Compliance):

SBD 1, SBD 2, SBD 3.1, SBD 4, SBD 5, SBD 6.1, SBD 7.1, SBD 8, SBD 9, and Declaration in terms of Fronting.

Mandatory Requirements (Phase 2 – failure leads to disqualification):

Service provider must have capacity to provide on-site engagements at ICASA’s office in Centurion. Out-of-country providers relying solely on online services will not be considered.
Must conduct at least three onsite facilitation sessions at ICASA Centurion.
Must prepare and deliver a complete IT strategy document that is costed and includes a year-by-year implementation plan for five years.

B-BBEE/Preference Points:

Submit SBD 6.1 Preference Points claim form.

Contractual Terms

Source: Annexure A-C - Terms Of Reference IT Strategy .pdf

The contract period is 6 months.
Required contract documents: SBD 7.1 (Contract form for rendering of services).

Requirements

Source: Annexure A-C - Terms Of Reference IT Strategy .pdf (unknown)

Mandatory onsite facilitation: at least three sessions at ICASA Centurion; service provider covers travel costs.
Mandatory deliverables: complete IT strategy document and costed 5-year implementation plan.

Section

Source: Annexure A-C - Terms Of Reference IT Strategy .pdf

See standard evaluationCriteria field for full details.

DocumentAnnexure D - IT Strategy - draft.pdfReview complete

DocumentGCC ICASA 25 2026.pdfReview complete

DocumentAnnexure J Bid Document.pdfReview complete

DocumentAnnexure E - ICASA_Strategic Plan 2025 - 2030.pdfReview complete

I am thrilled to unveil the strategic vision behind our upcoming IT strategy

implementation, specifically tailored to transform our operations in the dynamic

industries of Communication, Broadcasting, and Postal Services. This initiative is

pivotal in propelling ICASA towards a future marked by innovation, efficiency, and

unparalleled connectivity.

At its core level, IT strategy defines what our ICASA IT group wants to achieve and

the path we will take to get there. This IT strategy envisage to chatter a direction for

our Efforts- Keeping all stakeholders focused on the work that bring value add to our

organisation and customers. it is an opportunity to frame how ICASA’s IT team

contributes to the overall business. This process involves establishing our IT vision

and mission, forming strategic goals.

This process involves establishing our IT

vision and mission, forming strategic goals.

Digital ICT strategy 2024

P a g e | 9

3.1 Purpose

The purpose of an IT strategy is to align information technology initiatives with the

overall business objectives and goals of an organization. It serves as a roadmap,

guiding the use and implementation of technology to support and enhance business

processes, improve efficiency, increase competitive advantage, and achieve strategic

outcomes. An effective IT strategy helps in:

Figure 1:STRATEGY PURPOSE OVERVIEW

Digital ICT strategy 2024

P a g e | 10

3.2 Strategy Vision

Revolutionizing telecom, broadcasting, and postal sectors through seamless

integration and innovation. Redefining standards, enhancing experiences, and

leading in dynamic connectivity for businesses and consumers.

Empowering Tomorrow's Connectivity: Our IT strategy envisions a future where

seamless integration and cutting-edge technology revolutionize the

telecommunications, broadcasting, and postal sectors. By pioneering innovative

solutions, we aim to redefine industry standards, enhance customer experiences,

and create unparalleled competition. Embracing digital transformation and

unparalleled connectivity, we will lead the way in shaping a dynamic, interconnected

future for businesses and consumers alike.

3.4 Strategic Importance

Figure 2:strategic importance

Digital ICT strategy 2024

P a g e | 11

3.5 What’s In It for You?

Figure 3:WHATS IN IT FOR YOU

3.6 Your Role in the IT Strategy

Your active engagement and expertise are vital in ensuring the success of our IT

strategy. We encourage your feedback, collaboration, and innovative ideas as we

embark on this transformative journey together. By embracing these technological

advancements, we are poised to lead the industry, delivering unparalleled services to

our customers and stakeholders alike

Digital ICT strategy 2024

P a g e | 12

Vision, Mission, and Core Vales

Figure 4:VISION, MISSION, VALUES

Digital ICT strategy 2024

P a g e | 13

IT structure

The IT division is led by the Chief Information Officer (CIO). The CIO reports directly

to the Chief Executive Officer (CEO). The IT human resources currently comprised of

13 full-time hires and three graduates. Moreover, there are suppliers/service

providers that provide professional services to the IT division. These are managed

through SLA’s.

The IT structure is as per the organogram shown below

5.1 Current IT Structure

Figure 5:CURRENT IT STRUCTURE

Digital ICT strategy 2024

P a g e | 14

5.2 Furure IT structure

Figure 6:FUTURE IT STRUCTURE OVERVIEW

Digital ICT strategy 2024

P a g e | 15

The IT department structure is designed to intricately support and drive the

organization's strategic priorities. With a focus on modularity and specialized

functions, the following teams within the IT department operate with distinct

mandates.

5.2.1 Customer Experience Team

5.2.2 Infrastructure Team

5.2.3 Product Development Team

5.2.4 Architecture Team

5.2.5 Product Delivery Team:

5.2.6 Security Team

5.2.7 Project Management Office (PMO):

The IT department's modularity allows each team to focus on its specialized mandate

while collectively contributing to the overarching organizational strategy. The distinct

Product Development and Managed Services teams ensure a clear focus on

innovation and ongoing operational excellence, respectively, aligning seamlessly with

the broader strategic goals of the organization. This structure positions technology as

a strategic enabler for achieving business objectives and fostering digital

transformation.

Digital ICT strategy 2024

P a g e | 16

Digital ICT strategy 2024

P a g e | 17

Strategic priorities

Strategic priorities refer to the key focus areas or objectives that an

organization identifies as critical to its long-term success and

achievement of its overall goals. These priorities guide the organization's

decision-making processes, resource allocation, and strategic initiatives.

Strategic priorities are typically established based on the organization's

mission, vision, and assessment of internal and external factors, aiming to

address challenges, capitalize on opportunities, and ensure sustainable

growth and competitiveness.

Digital ICT strategy 2024

P a g e | 18

6.1 IT strategy adoption

Plan

Digital ICT strategy 2024

P a g e | 19

This strategy advocates for a unified Business Technology (BT) approach, positioning

IT as a strategic partner integrated into business operations across regulated sectors

such as electronic communications, broadcasting, and postal services. Unlike the

bimodal approach, BT dissolves the artificial divide between legacy and modern

systems by driving transformation through end-to-end value creation, agility, and

business-aligned innovation. This document presents how to realize a BT vision

under constrained budgets and limited technical skills.

Purpose: Align IT holistically with business goals, regulatory mandates, and

customer value.

Scope: End-to-end digital business transformation encompassing all

technologies and functions.

Context: Fragmented systems and silos impede agility; the BT approach

enables cohesion, adaptability, and service excellence.

6.1.1 BT Strategic Objectives

Align all technology initiatives with defined business capabilities and

outcomes.

Transform IT teams into cross-functional business delivery teams.
Build a unified digital operating model that evolves with regulation and public

needs.

Shift investment from systems to platforms enabling agility, compliance, and

scale.

6.1.2 Strategic Themes and Initiatives

Theme Business Technology Approach

Value Delivery Prioritize customer journeys and regulatory service

mandates

Architecture Create composable, API-first, platform-enabled

architecture

Governance Embed regulatory rules in workflows and data

policies

Talent Form hybrid tech-business squads and continuous

learning paths

Digital Experience Integrate citizen feedback into development cycles

Business-IT Operating Establish a Digital Business Office to coordinate all

Model efforts

Digital ICT strategy 2024

P a g e | 20

6.1.3 Implementation Roadmap

6.1.4 Success Metrics

% Business capabilities digitized
% Service improvement as perceived by end-users
Increase in cross-functional delivery squads
Reduction in time-to-policy implementation
Compliance automation coverage rate

6.1.5 Governance & Policy Alignment

Ensure cross-functional policy and IT integration
Promote digital accountability aligned to national mandates (e.g., National ICT

Policy, POPIA)

Facilitate ongoing audit-readiness with embedded analytics and workflows
Use the Digital Business Office to steer enterprise-wide coordination

Digital ICT strategy 2024

P a g e | 21

Digital ICT strategy 2024

P a g e | 22

6.2 Cybersecurity

Digital ICT strategy 2024

P a g e | 23

In the digital age, robust cybersecurity protocols are paramount to safeguarding

sensitive information, Protecting against cyber threats, and ensuring the

organization's operational continuity. This plan outlines a comprehensive approach to

cybersecurity protocols within the IT strategy, focusing on prevention, detection,

response, and continuous improvement.

By implementing this Cybersecurity Protocols Plan, the organization can create a

resilient security framework that protects against cyber threats, ensures compliance

with regulations, and fosters a culture of security awareness and vigilance.

Continuous evaluation and adaptation to emerging threats are crucial to maintaining

the effectiveness of cybersecurity protocols over time.

Figure 7:Data Strategy

6.2.1 Servers, Devices, and Storage

The strategy ensures the security of servers, devices, and storage systems

by implementing robust access controls, encryption, and monitoring

mechanisms. This involves regular vulnerability assessments, patch

management, and adherence to best practices for securing hardware and

software infrastructure.

6.2.2 Customers, Users, and IoT Interfaces

Security measures are implemented to protect customer data, user accounts, and

IoT interfaces from unauthorized access and cyber threats. This includes user

authentication, data encryption, and network segmentation to isolate IoT devices

and prevent potential breaches.

Digital ICT strategy 2024

P a g e | 24

6.2.3 IT Personnel and Management

The strategy emphasizes the importance of training IT personnel on security best

practices and providing clear guidelines for

managing security incidents. This involves establishing roles and responsibilities,

conducting regular security awareness training, and fostering a culture of vigilance

and accountability among IT staff.

6.2.4 Security and Governance Requirements

The strategy aligns with security and governance requirements by establishing

policies, procedures, and controls to ensure compliance with regulatory standards

and industry best practices. This includes implementing frameworks such as ISO

27001, NIST, or CIS benchmarks to guide security operations and risk management

activities.

6.2.5 Desired IT Environment

Security measures are tailored to support the desired IT environment, whether it

involves on-premises infrastructure, cloud-based services, or hybrid deployments.

This includes evaluating the security implications of different deployment models and

implementing appropriate controls to mitigate risks associated with each

environment.

6.2.6 IT Asset Inventory

A comprehensive IT asset inventory is maintained to track and manage all

hardware, software, and data assets within ICASA. This involves conducting regular

asset audits, implementing asset tracking systems, and enforcing policies for asset

management and disposal to prevent unauthorized access or loss of sensitive

information.

Digital ICT strategy 2024

P a g e | 25

6.3 Investment plan

Digital ICT strategy 2024

P a g e | 26

Total Estimated Investment: 450 million rands

This investment plan outlines the strategic allocation of resources toward key

initiatives essential for modernizing and strengthening regulatory services within the

electronic communications, broadcasting, and postal sectors. Each component aligns

with national public interest priorities and regulatory mandates.

6.3.1 Digital Transformation of Regulatory Services

Estimated Budget: ZAR 85 million

Overview: This initiative modernizes legacy systems and digitizes core regulatory

functions. It aims to streamline licensing, compliance monitoring, data collection,

and reporting mechanisms through a centralized, automated platform.

Key Components:

1 Automated Spectrum Management System (ASMS)

2 Electronic Licensing & Permit Portals

3 Case Management and Enforcement Platforms

4 Interoperability and API-Enabled Services

Expected Outcomes:

1 Reduced application turnaround time

2 Transparent and traceable workflows

3 Improved regulatory efficiency and accessibility

Compliance Alignment: Supports the ECA, ICASA mandates, and aligns with eGovernment service delivery frameworks.

Digital ICT strategy 2024

P a g e | 27

6.3.2 Cybersecurity & Compliance Readiness

Estimated Budget: ZAR 85 million

Overview: This component ensures the security posture of the regulatory IT

landscape is mature, compliant, and resilient against evolving threats.

Key Components:

1 Zero Trust Architecture

2 SIEM (Security Information and Event Management) Tools

3 Regulatory Compliance Frameworks (POPIA, ECTA, NCPF)

4 Incident Response and Business Continuity Plans

Expected Outcomes:

1 Enhanced threat detection and response

2 Regulatory audit readiness

3 Reduced risk of data breaches and service outages

Compliance Alignment: Ensures adherence to POPIA, Cybercrimes Act, and the

National Cybersecurity Policy Framework (NCPF).

6.3.3 Cloud Infrastructure & Hybrid IT

Estimated Budget: ZAR 60 million

Overview: Enable scalable, secure, and cost-effective infrastructure for service

delivery through cloud adoption and hybrid IT.

Key Components:

1 Hybrid Cloud Data Centers (GovCloud & Private)

2 Virtualized Licensing & Registry Systems

3 Disaster Recovery & High Availability Solutions

Expected Outcomes:

1 Improved infrastructure agility

2 Reduced capital expenditure on physical infrastructure

Enhanced performance and uptime

Compliance Alignment: Aligns with the Department of Communications and Digital

Technologies (DCDT) Cloud Policy and government interoperability standards.

Digital ICT strategy 2024

P a g e | 28

6.3.4 RegTech & Data Intelligence

Estimated Budget: ZAR 45 million

Overview: Utilize regulatory technologies and data analytics to improve oversight,

compliance tracking, and policy formulation.

Key Components:

1 AI-Enabled Analytics Dashboards

2 Big Data Warehousing

3 Data Quality Management Frameworks

4 Monitoring & Predictive Modelling Tools

Expected Outcomes:

1 Real-time regulatory intelligence

2 Enhanced decision-making capabilities

3 Evidence-based policy development

Compliance Alignment: Supports data governance under POPIA and contributes to

evidence-led regulation under ICASA's mandate.

6.3.5 Stakeholder Experience & Digital Portals

Estimated Budget: ZAR 40 million

Overview: Design and develop unified digital access points for internal and external

stakeholders to engage with regulatory bodies.

Key Components:

1 Omnichannel Portals (Web, Mobile, Kiosks)

2 User Journey Mapping and Experience Design

3 Self-Service Capabilities (status check, submissions)

4 Stakeholder Communication Platforms

Expected Outcomes:

1 Increased stakeholder satisfaction and trust

2 Greater transparency in regulatory processes

3 Reduced reliance on manual engagements

Compliance Alignment: Supports Batho Pele principles, e-Government policy, and

the Public Service Regulations for service delivery.

Digital ICT strategy 2024

P a g e | 29

6.3.6 ICT Governance & Talent Development

Estimated Budget: ZAR 40 million

Overview: Strengthen internal ICT capabilities and ensure effective governance

structures to support sustained innovation and compliance.

Key Components:

1 ITIL & COBIT-Based Governance Frameworks

2 ICT Capacity Building and Certification Programs

3 Digital Skills Pipeline Partnerships with HEIs

4 Change Management and Knowledge Transfer Plans

Expected Outcomes:

1 Improved IT service management maturity

2 Sustainable digital talent pool

3 Reduced dependence on external consultants

Compliance Alignment: Supports National Digital & Future Skills Strategy and

DPSA ICT HR standards.

This ZAR 450 million investment plan provides a structured and compliant roadmap

to achieve digital transformation across ICASA IT. It addresses national digital

priorities while ensuring security, inclusivity, and performance. Strategic alignment

with sectoral legislation ensures that investments not only deliver operational

improvements but also uphold public interest objectives.

6.3.7 Phased Timeline

The phased budget reflects a progressive approach toward transformation, aligned

with capacity-building and change management. It also ensures operational

continuity, allowing each year to build upon the success and lessons of the previous.

Digital ICT strategy 2024

P a g e | 30

6.3.8 Investment Plan Cost Categories

Digital ICT strategy 2024

P a g e | 31

Infrastructure & Platforms (35%)

Description: Cloud migration, hybrid architecture, storage & compute

Explanation:

This is the backbone of your IT ecosystem. A large portion of the budget is allocated

here because it supports:

Cloud Migration: Moving from on-premise to cloud infrastructure for

scalability and cost-efficiency.

Hybrid Architecture: Combining on-premise and cloud environments to

ensure flexibility and legacy system support.

Storage & Compute: Investment in servers, virtual machines, and storage to

support applications and data processing.

This category ensures foundational readiness and performance, enabling agility,

system uptime, and future scalability.

Applications & Portals (30%)

Description: Licensing, spectrum, complaint handling, APIs

Explanation:

This is focused on delivering public-facing and internal business services:

Licensing & Spectrum Management: Systems enabling users to apply,

renew, and manage licenses—particularly important in regulatory

environments.

Complaint Handling: Digital platforms or CRM systems that manage and

resolve customer complaints efficiently.

APIs: Integrations that enable data sharing between internal and external

systems, improving automation and interoperability.

A high allocation is needed due to the cost of software development, integration, and

ensuring compliance with sector-specific regulations.

Digital ICT strategy 2024

P a g e | 32

Cybersecurity (15%)

Description: SOC, endpoint protection, monitoring, POPIA compliance

Explanation:

This category safeguards IT assets and sensitive data:

Security Operations Centre (SOC): Centralized unit for real-time threat

detection and incident response.

Endpoint Protection: Defending laptops, desktops, and mobile devices

against cyber threats.

Monitoring: Continuous surveillance of systems for anomalies and potential

breaches.

POPIA Compliance: Ensuring systems and processes meet South Africa’s

Protection of Personal Information Act standards.

Cyber threats are increasing, and regulatory compliance is strict, making this a

crucial area for investment.

Data & Analytics (10%)

Description: BI, compliance dashboards, data warehouse

Explanation:

Focused on making data-driven decisions:

Business Intelligence (BI): Tools and platforms that provide analytical

insights to executives and departments.

Compliance Dashboards: Visual tools that track regulatory and policy

compliance metrics.

Data Warehouse: A centralized repository that consolidates data from

various systems for analysis and reporting.

This investment supports transparency, strategic planning, and performance

monitoring.

Contingency & Refresh (5%)

Description: Technical debt, upgrades, license renewals

Explanation:

Provides flexibility and sustainability:

Technical Debt: Refactoring outdated code and systems that slow down

innovation or cause inefficiencies.

Digital ICT strategy 2024

P a g e | 33

Upgrades: Keeping systems, software, and hardware up to date to maintain

performance and security.

License Renewals: Annual or periodic software licensing costs that keep

solutions functional.

It acts as a buffer for unexpected costs and ensures the IT environment remains

current and compliant.

Digital ICT strategy 2024

Environmental

Source: Annexure D - IT Strategy - draft.pdf

CIO’s Foreword ........................................................................................................................................2
List of Abbreviations and Definitions .......................................................................................................7

Abbreviations ...................................................................................................................................................7

Definitions ........................................................................................................................................................7

Introduction ....................................................................................................................................8

3.1 Purpose ........................................................................................................................................9

3.2 Strategy Vision ...................................................................................................................... 10

3.4 Strategic Importance........................................................................................................... 10

3.5 What’s In It for You? ........................................................................................................... 11

3.6 Your Role in the IT Strategy ............................................................................................. 11

Vision, Mission, and Core Vales ........................................................................................... 12
IT structure ........................................................................................................................... 13

5.1 Current IT Structure ............................................................................................................ 13

5.2 Furure IT structure ................................................................................................................ 14

5.2.1 Customer Experience Team .................................................................................................... 15

5.2.2 Infrastructure Team ................................................................................................................ 15

5.2.3 Product Development Team ................................................................................................... 15

5.2.4 Architecture Team................................................................................................................... 15

5.2.5 Product Delivery Team: ........................................................................................................... 15

5.2.6 Security Team .......................................................................................................................... 15

5.2.7 Project Management Office (PMO): ....................................................................................... 15

...................................................................................................................................................................... 16

Strategic priorities .......................................................................................................................... 17

6.1 IT strategy adoption plan..................................................................................................... 18

6.1.1 BT Strategic Objectives ............................................................................................. 19

6.1.2 Strategic Themes and Initiatives ........................................................................... 19

6.1.3 Implementation Roadmap ........................................................................................ 20

6.1.4 Success Metrics ............................................................................................................. 20

6.1.5 Governance & Policy Alignment .............................................................................. 20

6.2 Cybersecurity ........................................................................................................................... 22

6.2.1 Servers, Devices, and Storage ............................................................................... 23

6.2.2 Customers, Users, and IoT Interfaces ................................................................. 23

6.2.3 IT Personnel and Management ............................................................................... 24

6.2.4 Security and Governance Requirements ............................................................. 24

6.2.5 Desired IT Environment ............................................................................................. 24

Digital ICT strategy 2024

P a g e | 5

6.2.6 IT Asset Inventory ....................................................................................................... 24

6.3 Investment plan ...................................................................................................................... 25

6.3.1 Digital Transformation of Regulatory Services ................................................. 26

6.3.2 Cybersecurity & Compliance Readiness .............................................................. 27

6.3.3 Cloud Infrastructure & Hybrid IT ........................................................................... 27

6.3.4 RegTech & Data Intelligence ................................................................................... 28

6.3.5 Stakeholder Experience & Digital Portals ........................................................... 28

6.3.6 ICT Governance & Talent Development .............................................................. 29

6.3.7 Phased Timeline ............................................................................................................ 29

6.3.8 Investment Plan Cost Categories ........................................................................... 30

6.4 IT strategy KPI .................................................................................................................. 35

6.4.1 System Uptime / Availability (%) .......................................................................... 35

6.4.2 Mean Time to Resolve (MTTR) ................................................................................ 35

6.4.3 IT Service SLA Compliance Rate (%) ................................................................... 35

6.4.4 IT Spend as % of Revenue ....................................................................................... 36

% of Budget Spent on Innovation ........................................................................................... 36

6.4.5 Security Incidents Resolved Within SLA (%) .................................................... 36

6.4.6 Vulnerability Remediation Time .............................................................................. 36

6.4.7 Employee Cyber Hygiene and Training Effectiveness .................................... 36

6.4.8 % of Applications Cloud-Ready or Migrated ...................................................... 36

6.4.9 Number of Automated Business Processes ........................................................ 37

6.4.10 User Satisfaction Score .............................................................................................. 37

6.4.11 First Contact Resolution Rate .................................................................................. 37

6.4.12 Strategic Projects Delivered On-Time .................................................................. 37

6.4.13 Technical Debt Index .................................................................................................. 37

6.5 IT strategy raci ...................................................................................................................... 38

6.6 Current Application landscape ......................................................................................... 39

6.7 SWOT analysis ....................................................................................................................... 40

6.8 IT/OT Convergence Strategy............................................................................................ 42

6.8.1 Strategic Rationale for IT/OT Convergence ....................................................... 42

6.8.2 Key Drivers and Benefits ........................................................................................... 42

6.8.3 Strategic Objectives .................................................................................................... 43

6.8.4 Current State Assessment ........................................................................................ 43

6.8.5 Future State Vision ...................................................................................................... 43

6.8.6 Implementation RoadMap (3 year Plan) ............................................................. 44

6.8.7 Governance and Oversight ....................................................................................... 45

Digital ICT strategy 2024

P a g e | 6

6.9 Digital transformation............................................................................................. 46

6.9.1 Inputs ............................................................................................................................... 47

6.9.2 Process ............................................................................................................................. 48

6.9.3 Outputs ............................................................................................................................ 48

6.10 Cloud adoption............................................................................................................ 51

6.10.1 Motivation to Adopt Cloud ........................................................................................ 52

6.10.2 Desired Business Outcomes ..................................................................................... 52

6.10.3 Financial Viability and Business Case ................................................................... 53

6.10.4 Building the Cloud Migration Plan .......................................................................... 53

6.10.5 Building the Cloud-First Culture ............................................................................. 53

6.10.6 Establishing Cloud Governance .............................................................................. 53

6.11 Digital transformation roadmap ................................................................... 54

...................................................................................................................................................................... 56

IT risk mitigation plan ................................................................................................... 56

7.1 Purpose and Scope ............................................................................................................... 57

7.2 Strategic IT Risks Overview .............................................................................................. 57

7.3 Risk Response Strategies .................................................................................................. 57

7.3.1 Mitigation ......................................................................................................................... 57

7.3.2 Avoidance ........................................................................................................................ 58

7.3.3 Transference .................................................................................................................. 58

7.3.4 Acceptance ...................................................................................................................... 58

Digital ICT strategy 2024

P a g e | 7

Contractual Terms

Source: GCC ICASA 25 2026.pdf

General Conditions: The General Conditions of Contract (GCC) apply to all bids, contracts, and orders, including functional and professional services.

Special Conditions: Where Special Conditions of Contract (SCC) exist, they take precedence over the GCC.

Costs: The purchaser is not liable for bid preparation expenses. A non-refundable fee for documents may be charged.

Confidentiality: The supplier must not disclose contract documents or purchaser information without prior written consent.

Performance Security: The successful bidder must furnish a performance security within 30 days of contract award, as specified in the SCC.

Inspections: The purchaser may inspect supplies and services at any stage. Costs are borne by the purchaser if compliant, by the supplier if non-compliant.

Delivery and Documents: Delivery terms and required documents are specified in the SCC.

Insurance: Goods must be fully insured as specified in the SCC.

Incidental Services: May include assembly, commissioning, tools, manuals, maintenance, and training, as specified in the SCC.

Warranty: Goods are warranted to be new, unused, and free from defects for 12 months after delivery or 18 months after shipment, unless otherwise specified in the SCC.

Payment: Method and conditions are specified in the SCC. Payments are made within 30 days of invoice submission, in Rand unless otherwise stated.

Price Variation: Prices cannot vary from the bid, except as authorized in the SCC.

Contract Amendments: Only by written agreement.

Assignment and Subcontracting: Requires purchaser's prior written consent; subcontracts must be notified.

Delays: Supplier must notify purchaser of delays; extensions may be granted with or without penalties.

Penalties: May be imposed for late delivery or non-performance, calculated using the prime interest rate.

Termination: Purchaser may terminate for default, corrupt practices, or insolvency. Restriction from public sector business for up to 10 years may be imposed.

Force Majeure: Supplier not liable for delays due to force majeure events.

Dispute Resolution: Parties must attempt amicable resolution, then mediation, then South African courts.

Liability: Supplier's liability is limited to the contract price, except for criminal negligence, willful misconduct, or defective equipment repair.

Governing Language and Law: Contract is in English and governed by South African law.

Notices: Sent by registered or ordinary mail to the address in the bid.

Taxes and Duties: Supplier responsible for all applicable taxes and duties. A SARS tax clearance certificate is required.

National Industrial Participation (NIP): The NIP Programme applies to contracts subject to the NIP obligation.

Restrictive Practices: Collusive bidding is prohibited and may lead to investigation, penalties, bid invalidation, contract termination, restriction from public sector business, and damages.

Contractual Terms

Source: Annexure J Bid Document.pdf

The laws of the Republic of South Africa govern the bid and any agreement.
ICASA is not liable for bid preparation costs.
ICASA may request written clarification within two days; failure to respond may disqualify the bid.
For consortia, joint ventures, or subcontractors, provide signed agreements stipulating work split and Rand value.
ICASA reserves the right to cancel/reject any bid, not award to the lowest bidder, award parts to different bidders, or not award at all.
Bidders accept the evaluation criteria as stated.
Do not qualify the proposal with own conditions; doing so may lead to disqualification.
If a bidder withdraws before validity expires, ICASA may recover additional costs.
Correspondence sent by prepaid registered post is deemed received after two days.
If parties fail to agree on price or specification changes within 14 days, ICASA may cancel the award.
All members of a consortium or JV must co-sign the document.
Amendments to the RFB are only valid if in writing and signed by ICASA.
Failure to enforce any provision does not waive rights.
Primary contractor is responsible for managing awarded work; no separate contract with subcontractors.
No interest payable on accounts in dispute.
ICASA is not liable for bid preparation expenses.
Disregarding contractual specifications may result in termination.
Bid response may be included in the final contract.
Bidders who do not sign declaration forms are not considered for preference points.
ICASA may conduct independent reference checks.
ICASA will not respond to enquiries 72 hours before closing.
Changes to wording in the document will be ignored during evaluation.
ICASA may extend bid validity period if evaluation is not completed.
Bidders must respond in writing to validity extension requests.
No upfront/deposit payments; payments based on agreed deliverables.
Disclosure of potential conflicts of interest is required.
Do not alter wording of criteria/questions.
International companies are encouraged to partner with local companies and provide an agreement.
ICASA reserves the right not to accept the lowest bid price and to consider specific goals.

IT strategy review and update service provider for icasa

IT strategy review and update service provider for icasa

Guide to Telecommunications Tenders in South Africa

Winning Broadband Rollout Tenders: Opportunities for Fiber and ISP Firms

SITA Act Compliance for Western Cape IT Suppliers: What It Means and How to Qualify in 2026

Compliance Checklist for ICT Government Tenders in South Africa

Information & Communication Technology Industry Profile

Critical Requirements

Regulatory Bodies

Typical Documents

Core procurement rules

Broad-Based Black Economic Empowerment Act (B-BBEE Act)

Constitution of the Republic of South Africa, 1996 – Section 217

Preferential Procurement Policy Framework Act (PPPFA)

Prevention and Combating of Corrupt Activities Act (PRECCA)

Public Procurement Act, 2024 (PPA)

Promotion of Access to Information Act (PAIA)

Promotion of Administrative Justice Act (PAJA)

Independent Communications Authority of South Africa (ICASA)

Similar Tenders

Strategic Risk Management Training Workshop

Colotech Paper

Ink Cartridge LOR16A HP 981Y (Black)

Visitor Management System

PROCUREMENT AND DELIVERY FOR THE LAPTOP AT THE IDT HEAD OFFICE

APPOINTMENT OF A SERVICE PROVIDER/S FOR THE PROVISION OF PHYSICAL SECURITY GUARDING FOR RAF OFFICES (POLOKWANE, MAFIKENG AND KIMBERLY) FOR A PERIOD OF FIVE (5) YEARS.

Strategic Risk Management Training Workshop

Colotech Paper

Ink Cartridge LOR16A HP 981Y (Black)

Visitor Management System

PROCUREMENT AND DELIVERY FOR THE LAPTOP AT THE IDT HEAD OFFICE

APPOINTMENT OF A SERVICE PROVIDER/S FOR THE PROVISION OF PHYSICAL SECURITY GUARDING FOR RAF OFFICES (POLOKWANE, MAFIKENG AND KIMBERLY) FOR A PERIOD OF FIVE (5) YEARS.