Annual renewal of 1,500 licenses for phishrod phishing platform with support and maintenance

Closing date: 18 June 2026. Closing time: 11:00. Briefing session: Compulsory (date, time, and venue not specified).

Bid enquiries contact: Tondi Mdunge. Email: [email protected]. Telephone: 012 427 5070. Submission email: [email protected].

Submit bids via email to [email protected] only. No hand delivery accepted. Bids must be deposited in the bid box situated at the specified street address (if applicable). Late bids will not be accepted. All bids must be submitted on the official forms provided (not to be re-typed). Bids must include: quotation on company letterhead (stamped), physical address, telephone numbers, company registration number, VAT registration number (if VAT is claimed), date, and signature. Quotation must be valid for 30 days. All bids must be accompanied by SBD 4 (Bidders Disclosure) form. Failure to comply may invalidate the bid.

Required documents: Official quotation on company letterhead (stamped) with physical address, telephone numbers, company registration number, VAT registration number (if applicable), date, and signature. Quotation must be valid for 30 days. SBD 4 (Bidders Disclosure) form must accompany all bids. Proof of authority (e.g., company resolution) must be submitted for the signatory. Tax Clearance Certificate (original) for goods/services valued at R30,000 or more. B-BBEE Status Level Verification Certificate or sworn affidavit (for EMEs/QSEs). CSD registration number. Health and Safety file (where applicable). Workmen’s Compensation Fund certificate of good standing (where applicable). For foreign suppliers, additional questionnaire may be required.

Scope: Annual renewal of 1,500 licenses for the existing Phishrod Phishing Platform, including support and maintenance for 1 year. Technical requirements for the Phishrod Platform: 1. PhishRod Simulator: 1000+ simulated phishing templates; ability to create/customize templates; customizable security awareness content; Active Directory integration; Phish Analyzer dashboard for phishing readiness statistics; detailed phishing analytics. 2. PhishRod Security Awareness Manager: Built-in computer-based training modules with quizzes (video customizable with customer logo only); wizard to assign training to groups/users; reminders for incomplete training; real-time dashboard for campaign progress; Active Directory integration; individual filtered reports. 3. Policy Compliance Manager: Create compliance projects; add policies/procedures; assign policies to users; approval workflow; question bank for policies; compliance dashboard. 4. PhishScout: Report suspicious emails with links/attachments; preliminary investigation with built-in intelligence (IP/Domain/Email/Attachment scanning); quarantine suspicious emails; escalation workflow to SOC/Email Security team; delete phishing emails from mailboxes. Services: Solution training (2 resources); provisioning of PhishRod Awareness Content Library; technical support & maintenance (1 year). Offsite deployment for on-premise model only. Mandatory requirement: Service provider must demonstrate that assigned personnel for maintenance and support are suitably qualified and competent. Submit evidence of relevant qualifications and/or experience of responsible individuals.

Service provider must demonstrate that personnel assigned to maintenance and support are suitably qualified and competent. Submit evidence of relevant qualifications and/or experience of the individuals responsible for these services.

Quotation must be on company letterhead, stamped, and include: physical address, telephone numbers, company registration number, VAT registration number (if VAT is claimed), date, and signature. Quotation must be valid for 30 days. Indicate delivery period. Price must be inclusive of VAT. Payment will be effected within 30 days of receipt of original invoice and statement. Quoting on fewer items/quantities than requested will invalidate the quotation. Valid Tax Clearance Certificate must be submitted for goods/services valued at R30,000 or more. Failure to submit may invalidate the offer.

Tax Compliance: Bidders must ensure compliance with tax obligations. Submit Tax Compliance Status (TCS) PIN issued by SARS (apply via e-filing at www.sars.gov.za) or a printed TCS certificate. If no TCS PIN is available but the bidder is registered on the Central Supplier Database (CSD), provide the CSD number. For consortia/joint ventures/sub-contractors, each party must submit a separate TCS certificate/PIN/CSD number. Bids from persons in the service of the state, or companies with directors/members in the service of the state, will not be considered. Central Supplier Database (CSD) registration number must be provided; failure to do so will invalidate the bid. B-BBEE: Submit B-BBEE Status Level Verification Certificate or sworn affidavit (for EMEs/QSEs) to qualify for preference points. Workmen’s Compensation: Submit a certificate of good standing with the Workmen’s Compensation Fund (where applicable). Health and Safety: Submit Health and Safety file (where applicable). Foreign Suppliers: If the entity is not a resident of RSA, does not have a branch/permanent establishment/source of income in RSA, and is not liable for taxation in RSA, registration for a TCS PIN is not required.

B-BBEE Status Level Verification Certificate or sworn affidavit (for EMEs/QSEs) must be submitted to qualify for preference points. Points are awarded based on the B-BBEE Status Level of Contributor as follows: Level 1 = 20, Level 2 = 18, Level 3 = 14, Level 4 = 12, Level 5 = 8, Level 6 = 6, Level 7 = 4, Level 8 = 2, Non-compliant = 0. Failure to submit proof will result in 0 points for B-BBEE.

Service provider must submit their Health and Safety file where applicable.

Bid is subject to the Preferential Procurement Policy Framework Act, 2000, and Preferential Procurement Regulations, 2021/22, as well as the General Conditions of Contract (GCC) and any other special conditions. Successful bidder must fill in and sign a written contract form (SBD7). Payment will be effected within 30 days of receipt of original invoice and statement. Price must be inclusive of VAT.

Tax Compliance: Submit TCS PIN (via SARS e-filing) or printed TCS certificate. If no TCS PIN, provide CSD number. Consortia/joint ventures/sub-contractors must each submit separate TCS/PIN/CSD. No bids accepted from state employees or entities with state-employed directors/members. CSD registration number is mandatory. Valid Tax Clearance Certificate required for goods/services over R30,000. B-BBEE certificate or sworn affidavit required for preference points. SBD 4 (Bidders Disclosure) form is mandatory. Quotation must meet all specified requirements; partial quotes will be disqualified.

Evaluation uses the 80/20 preference point system. 80 points for price (Ps = 80

• (Pmin / Pt)). 20 points for B-BBEE Status Level of Contributor, awarded per the following table: Level 1 = 20, Level 2 = 18, Level 3 = 14, Level 4 = 12, Level 5 = 8, Level 6 = 6, Level 7 = 4, Level 8 = 2, Non-compliant = 0. Bidders must submit proof of B-BBEE status to claim points.