Acsa website revamp: custom web application development (bid 53157)

This annexure details ACSA's mandatory IT standards and architecture. It is a technical specification document, not a scope description for the website revamp tender. The content covers:

• Detailed hardware specifications for desktops, laptops, servers, storage, backups, and networking.
• Required software platforms for operating systems, databases, and messaging.
• Network architecture models (three-tier and two-tier).
• Physical infrastructure categories and cabling standards.
• All proposed systems must comply with these standards; deviations require ACSA IT approval.

Service providers must demonstrate the capability to deliver a fully custom-coded website where ACSA retains all IP. They must have the technical expertise to comply with ACSA's extensive IT infrastructure standards (e.g., specific VPN configurations, OS/database platforms, hardware specifications) and integration requirements. Proposals deviating from the listed IT standards require explicit ACSA approval during the clarification phase.

The solution must be a fully custom website/web application built from the ground up, not on off-the-shelf CMS platforms (e.g., WordPress, Wix). The client must own the custom source code and intellectual property.

All IT equipment and software must comply with ACSA's detailed IT standards. Key requirements include:

• Connectivity: Via Site-to-Site or Point-to-Site VPN using specified encryption standards (AES-256, SHA255, DHG Group 14).
• Authentication: Must integrate with ACSA's Microsoft Active Directory/EntraID.
• Hardware Standards: Must use specified models for desktops (Dell OptiPlex), laptops (Dell Latitude), servers (Dell VXRail HCI or PowerEdge rack servers), storage (Dell/EMC Unity SAN), backups (Dell/EMC Data Domain), and networking (Cisco switches, routers, firewalls).
• Operating Systems: Back-end servers: Red Hat Enterprise Linux 8.10+, Ubuntu 22.x LTS+, or Windows Server 2022+. Front-end: Windows 11 Latest Current Branch.
• Virtualization: VMware version 8 is the standard hypervisor.
• Databases: Oracle 12c/11g or MS SQL 2022 R2 or latest equivalents.
• Messaging: Microsoft Exchange Online/Hybrid.
• Network Architecture: Three-tier model (Core, Distribution, Access) for large sites (ORTIA, CTIA, KSIA); Two-tier collapsed core model for smaller sites.
• Cabling: Must adhere to detailed cabling standards for fibre (OS2 single mode, orange sheath) and copper (Cat7 SFTP).
• Physical Infrastructure: IT facilities are categorized (Wire Centre, Core Centre, Data Centre) with specific availability ratings (99.999% to 99.67%).
• All hardware must have a minimum 5-year extended OEM warranty with 24x7 ProSupport Plus or equivalent.
• Software licensing costs for operating systems, databases, and productivity software must be included in the bid.
• Any deviation from listed standards requires approval from ACSA IT during the clarification phase.

ACSA's network design follows two hierarchical models:

• Three-tier model (Core, Distribution, Access layers) for large campuses like ORTIA, CTIA, KSIA.
• Two-tier collapsed core model (combined Core/Distribution and Access layers) for smaller sites like PLZ, ELS, GRJ, BFN, KIM, UTN.

The collapsed core design aims to reduce cost while maintaining redundancy benefits.

The document does not specify standard compliance requirements such as CSD registration, tax clearance, B-BBEE, CIDB, or CIPC. It focuses on technical IT standards.

The document contains technical specifications for file formats and fibre cabling safety standards, but does not address occupational health and safety (OHS) requirements, safety plans, or HSE compliance for the work environment.

The document specifies detailed technical standards for cabling, systems integration, and service management, but does not contain general contractual terms and conditions, contract duration, termination clauses, or penalties.

• This is a request for bids for the revamp of the ACSA website to enhance functionality, modernise design, improve user experience, and ensure SEO.
• The service provider must design and develop a fully custom website/web application from the ground up, not using off-the-shelf CMS platforms.
• Custom source code and intellectual property must be owned by ACSA.
• The document includes standard bidding forms, tax compliance requirements, and instructions to bidders.

• Bid closing date and time: 17 July 2026 at 12:00pm.
• Non-compulsory briefing session: 14 July 2026 at 09:30 via Microsoft Teams (Meeting ID: 364 448 424 740 982, Passcode: nx6JF2sV).
• Query/clarification deadline: Not specified (field blank in document).
• Site inspection: N/A.

• For bidding procedure enquiries: Contact Masana Sithole, Buyer. Email: [email protected]. Telephone: 011 729 7946.
• For bid submission: Email to [email protected].
• General ACSA contact: Tel +27 11 723 1400, Fax +27 11 453 9354.
• Address: Western Precinct, Aviation Park, O.R. Tambo International Airport, 1 Jones Road, Kempton Park, Gauteng, 1632. PO Box 75480, Gardenview, 2047.
• Do not contact other ACSA employees regarding this bid.

• Submit bid documents by email to [email protected] by 17 July 2026 at 12:00pm.
• Envelopes (if physical) must have bidder’s return address, full description, bid number, and SCM department details.
• Documents must be signed by an authorised person.
• Late bids will not be accepted.
• Use official forms provided; do not re-type.
• Mandatory returnable documents include SBD 3.3 (priced offer), ISO/IEC 27001 certificate, Declaration of Interest, SBD 4, SBD 6.1, Confidentiality Agreement, B-BBEE certificate/affidavit, tax PIN/CSD number, and others listed in Section 4.
• Failure to submit mandatory documents or comply with requirements may invalidate your bid.

Bidder must: 1) Hold valid ISO/IEC 27001 certification, 2) Demonstrate ability to deliver 100% of scope requirements in Annexure A, 3) Provide ≥3 signed reference letters from clients for modern website projects, 4) Commit to delivery within 6 months, 5) Be tax compliant (SARS tax pin/CSD), 6) Submit B-BBEE certificate/affidavit for preference points, 7) Have no conflicts of interest with ACSA employees/officials, 8) Not be listed on Register for Tender Defaulters or List of Restricted Suppliers, 9) Accept 120-day bid validity, 10) Sign confidentiality and non-disclosure agreement. Foreign suppliers must declare RSA tax residency status.

• Scope: Design and develop a fully custom website/web application from the ground up for ACSA.
• Solution must not be built on off-the-shelf CMS platforms (e.g., WordPress, Wix, Squarespace, Joomla).
• Custom source code and intellectual property must be owned by ACSA.
• Deliverables include assessment of current website, user needs documentation, removal of duplicate content, benchmarking against global airports, and final design sign-off by stakeholders.
• Full detailed scope is in Annexure A (attached but not extracted here).
• The revamp aims to enhance functionality, modernise design, improve user experience, and ensure SEO.

• Evaluation uses a staged approach: Stage 1 (Mandatory Requirements), Stage 2 (Functionality), Stage 3 (Price and Preference).

• Bidders must demonstrate experience in modern website development through verifiable reference letters from clients.
• Letters must have clear letterhead, client contact details, contract duration (MM-YYYY format), and be signed by authorised official.
• Scoring: 3 letters = 30 points, 2 letters = 15 points, 1 or 0 = 0 points.

• No specific quality management requirements extracted beyond the need for ISO/IEC 27001 certificate (information security) as a mandatory document.
• The non-compulsory briefing session on 14 July 2026 may provide further specifications.

• Use SBD 3.3 form to provide pricing schedule with project stages, descriptions, units, amounts, subtotal, plus 15% VAT, and total including VAT.
• No detailed bill of quantities or rates provided in extracted text.

• Pricing must be submitted using SBD 3.3 pricing schedule form.
• Include subtotal, plus 15% VAT, and total tendered amount including VAT.
• Prices must remain firm and valid for 120 business/working days (bid validity period).
• No specific bonds, guarantees, or payment terms are detailed in the extracted text.

• Tax Compliance: Submit SARS Tax Compliance Status (TCS) PIN or printed TCS certificate. If not available, provide CSD number. Each party in consortia/JV/sub-contractors must submit separate proof.
• Central Supplier Database (CSD): CSD report required.
• B-BBEE: Submit B-BBEE certificate and scorecard or BBBEE QSE/EME affidavit. Preference points awarded per SBD 6.1 (e.g., Level 1 = 5 points).
• Mandatory Documents: Include Certificate of Incorporation, VAT questionnaire, ACSA terms and conditions.
• Foreign Suppliers: Must complete questionnaire; if no RSA presence/income/tax liability, TCS PIN not required.
• Security Vetting: ACSA is a National Key Point; bidders may be subject to security vetting.

• Intellectual property of the custom source code must be owned by the client (ACSA).
• Confidentiality: ACSA will not disclose bidder information without written approval; bidders must not disclose ACSA information without approval and may need confidentiality agreements for third parties.
• ACSA is a National Key Point, requiring compliance with security laws; bidders may be subject to security vetting.
• Bid validity period: 120 business/working days with firm prices.
• ACSA reserves rights to award whole/part of bid, split award, negotiate, reject lowest bid, or cancel bid.

• Same as standard evaluationCriteria field: staged evaluation with mandatory requirements, functionality scoring (business requirements, experience, delivery timeline), and price/preference using 80/20 system.
• Includes detailed scoring tables and formulas for price and preference points.