Business continuity management services for sasseta (until 31 march 2030)

• Bidders must complete Annexure B (CV Template for Team Leader) and submit it with the Team Leader’s CV.
• The CV must demonstrate assignments led by the Team Leader/Project Manager, including employer, client, project description, and duration.
• This information will be used for evaluation purposes.

• This annexure (Annexure B) is a mandatory returnable document.
• Bidders must complete the CV template for the proposed Team Leader.
• Submit the completed annexure together with the Team Leader’s detailed CV.
• The CV must demonstrate assignments led by the Team Leader/Project Manager, including: employer name, client name, description of assignments/projects completed, and duration of each assignment.
• Ensure all fields in the provided table are fully completed.

Bidders must demonstrate the Team Leader's experience via documented project history; incomplete or missing Annexure B submissions may be disqualified.

• The Team Leader must have proven experience leading Business Continuity Management assignments.
• Bidders must provide a structured record of assignments led, covering: employer, client, project description, and duration.
• This information will be used directly in the evaluation of the bid.

• No specific compliance requirements are stated in this annexure.
• Practical guidance: Ensure your entity is registered on the Central Supplier Database (CSD), tax compliant, and holds a valid B-BBEE certificate as typically required by SASSETA tenders.

• Bidders must complete Annexure C for both the 1st and 2nd additional team members for evaluation purposes.
• The annexure captures each team member's assignment history, including employer, client, project description, and duration.
• This demonstrates the number of assignments per team member.

Returnable Documents: Bidders must complete Annexure C (CV templates) for both the 1st and 2nd additional team members for evaluation purposes, demonstrating the number of assignments for each team member.

Bidders must demonstrate relevant experience through team member CVs showing completed assignments/projects with specific employers and clients. Both additional team members must be documented.

• Bidders must complete Annexure C for both the 1st and 2nd additional team members.
• The annexure requires the following details for each team member:

• Full names and surname
• Employer name
• Client name
• Description of assignments/projects completed
• Duration of each assignment

• This information is used for evaluation purposes to demonstrate the number of assignments per team member.

No specific compliance requirements found in this annexure.

• SASSETA seeks a service provider to implement Business Continuity Management Services from appointment until 31 March 2030.
• The work must align with ISO 22301:2019 and BCI Good Practice Guidelines.
• Scope covers head office in Midrand and satellite offices in Newcastle and Durban.
• Key activities include Business Impact Analysis, review/update of BCP and DRP, training, and testing.
• Deliverables include Inception Report, BIA Reports, Risk Assessment, BCP Framework, Testing Plan, Final BCP Document, Training, and Maintenance Plan.

• Compulsory Virtual Briefing Session: 07 August 2026, 9h00-11h00 via Microsoft Teams. Must join by 9h14.
• Clarification Deadline: Queries must be submitted in writing by 12h00 on 07 August 2026.
• Closing Date and Time: 18 August 2026 at 11h00.
• Offer Validity Period: 120 days from the closing date.
• Contract Duration: From date of appointment until 31 March 2030.

• Submission and Bid Enquiries: Ms. Lebo Hlombe. Email proposals to [email protected].
• Clarification and Technical Enquiries: Ms. Lebo Hlombe. Email [email protected].
• SASSETA Anti-Corruption Hotline: 0800 162 111 for reporting suspicious calls or corruption.

• Submit proposals electronically via email to [email protected], maximum size 30 MB. Exceeding size will be rejected.
• Use email or WeTransfer. Do not set an expiry date. Submissions via Google Drive or requiring SASSETA to request access are non-responsive.
• Compulsory virtual briefing session on 07 August 2026, 9h00-11h00 via Microsoft Teams. Must join by 9h14. Non-attendance leads to automatic disqualification.
• Clarification queries must be in writing to Ms. Lebo Hlombe at [email protected] by 12h00 on 07 August 2026.
• Closing date and time: 18 August 2026 at 11h00. Late bids will not be considered.
• Required returnable documents: Fully completed Annexure B (Team Leader CV Template) and Annexure C (Two Additional Members CV Template). Non-submission leads to automatic disqualification.
• Initial each page of the General Conditions of Contract (Annexure A) and submit.
• Submit all Standard Bidding Documents: SBD 1, SBD 3.3, SBD 4, SBD 6.1.
• Bids can be rejected for fraud, corruption, abuse of SCM systems, or failure to perform on previous contracts.

Bidder must score minimum of 70% in functionality evaluation (project plan 20%, references 50%, team experience 30%). Must meet all mandatory requirements (team certifications, CVs, references) or face automatic disqualification. Proposals exceeding 30MB, submitted late, or via unauthorized methods (e.g., Google Drive) are non-responsive. Bidders with proven fraud/corruption or listed on tender defaulters are disqualified. Must comply with POPIA and anti-corruption clauses.

Scope: Implement Business Continuity Management Services for SASSETA head office in Midrand and two satellite offices (Newcastle and Durban) until 31 March 2030.

• Objectives: Enable efficient incident response, continued mission-critical operations, strengthen resilience, ensure tested continuity strategies, establish crisis management, provide testing/training framework, maintain availability of resources.
• Deliverables must comply with ISO 22301:2019, BCI GPG version 7, and COBIT.
• Key Tasks:

• Conduct Business Impact Analysis (BIA) to identify critical processes, determine RTO/RPO, develop department-specific continuity and recovery strategies, establish incident response protocols.
• Review and update existing Business Continuity Plan and Disaster Recovery Procedures, assessing all departments (CEO, CFO, HR, ICT, Finance, SCM, EQTA, Marketing, Learning Programmes, Grants, GRC, Skills Planning, Monitoring).
• Develop training materials and train key staff.
• Test BCP/DRP quarterly in first year, bi-annually thereafter; develop test plans, coordinate tests, present results.

• Required Deliverables: Inception Report, BIA Report per department, Risk Assessment Report, BCP Framework and Strategy, Testing and Simulation Plan, Final Comprehensive BCP Document, Training Sessions, Ongoing Maintenance and Review Plan.
• Project Timeline (Year 1): Weeks 1-2 inception; weeks 3-5 BIA and risk assessment; weeks 6-8 continuity plans; weeks 9-10 draft BCP and testing; weeks 11-12 finalisation. Years 2-4: Bi-annual desktop assessments and BCP testing.

• Bidding company must submit three or more signed reference letters on client letterheads demonstrating provision of Business Continuity Management Systems.
• Team leader and two additional members must each have three or more years of experience in BCMS consulting services, documented in Annexure B and C.
• Team qualifications are mandatory; non-submission leads to automatic disqualification.

• Deliverables must comply with ISO 22301, BCI GPG version 7, and COBIT.
• Project plan must be comprehensive with clear deliverables and timelines covering BIA, BCM strategy, protocols, policy, BCP update, DRP review, testing, implementation, and training.
• Team must have relevant professional certifications and qualifications as specified.
• Reference letters demonstrating BCMS provision are required.

• Pricing must be submitted on SBD 3.3, providing an all-inclusive cost for the project.
• The schedule includes items such as Project Initiation, BIA Workshops, Incident Management Plan, Critical System Analysis, Risk Assessment, BIA/Risk Report, BC Strategy, Formalised BC Plans, BC Exercise, Maintenance, Desktop Scenarios, Handover, Desktop Preparedness Assessment, BCR Testing, and Training.
• Offer valid for 120 days from closing date.
• For outer years, CPIX adjustment applies on anniversary month.

• Submit pricing on SBD 3.3 (Pricing Schedule). Provide an all-inclusive cost for the project assignment.
• Pricing must include all applicable taxes.
• Offer must be valid for 120 days from the closing date.
• For outer years, SASSETA will apply Consumer Price Index (CPIX) on the contract anniversary month.
• Travel and Disbursement (if required):

• Claim travel mileage as per Department of Transport rates.
• Book economy-class flights only.
• Hire cars: Group A (Gauteng), Group B (outside Gauteng).
• Use cost-effective transport (Uber/Taxify/Gautrain/shuttle).
• Accommodation limited to R1,400 per night per person (3-star, including dinner, breakfast, parking).
• Submit invoices/receipts and Google map for private car travel.
• All travel must be pre-approved by SASSETA.

Mandatory Team Qualifications (Non-submission leads to automatic disqualification):

• Team Leader/Project Manager: Master’s in Business Leadership (MBL) NQF Level 8 or higher; valid ISO 22301 PECB Senior Lead Implementor Certificate or MBCI/higher; Project Management Certificate; current IRMSA member; international qualifications SAQA verified.
• First Team Member: Bachelor’s in Management Leadership (BML) NQF Level 7 or higher; AMBCI from BCI.
• Second Team Member (ICT): ITIL Qualification; Prince 2/PMBOK/Agile qualification; COBIT.
• Submit Annexure B and C demonstrating three or more years of experience each in BCMS consulting services.

General Compliance:

• Register on National Treasury Central Supplier Database (CSD) by closing date and provide CSD report.
• Submit all required SBD forms (SBD 1, SBD 3.3, SBD 4, SBD 6.1).
• Tax Compliance: Provide SARS PIN or TCS certificate; if not registered, provide CSD number.
• B-BBEE: Submit valid B-BBEE certificate or sworn affidavit to qualify for preference points.
• CIPC: Submit valid company registration documents.
• Submit certified copies of identity documents of company directors.
• Declaration letter signed by bidder.
• Adhere to Prevention and Combating of Corrupt Activities Act, POPIA, and other applicable laws.

• Intellectual Property: All project products and data are confidential for SASSETA use. Service provider must sign a confidentiality agreement.
• Protection of Personal Information (POPIA): Vendor information will be used solely for bid evaluation, retained per records management policies, and secured digitally.
• General Conditions of Contract (GCC) in Annexure A must be initialled on each page and submitted; they form part of the contract.
• The organ of state may take action for fraudulent claims, including disqualification, cost recovery, contract cancellation, restriction from public sector business, and criminal prosecution.

• Specific Goals for preference points: 5 points for 100% Black ownership, 4 points for 30% Black Women ownership, 4 points for 30% Black youth ownership, 7 points for promotion of South African owned enterprises.
• Documents required for Specific Goals: Valid B-BBEE certificate/sworn affidavit, CIPC registration, certified ID copies of directors, CSD report, medical report (if any), declaration letter.
• Non-submission of required documents means points are not awarded.