Comptia pentest+ complete bundle with retake and two-day online training for one ccma official

Issuing date: 08 October 2026

Closing: 16 October 2026 at 14:00

Quotation validity: 90 days from the closing date

No compulsory briefing or site visit is stated.

Enquiries

• Contact: Amukelani Mthombeni
• Email: [email protected]
• Telephone: 011 377 6955
• Contact: Welcome Tshabalala
• Email: [email protected]
• Telephone: 011 377 6743
• General SCM enquiries: [email protected]

Submission

• Method: email
• Submission email: [email protected]

Delivery address

CCMA National Office

28 Harrison Street

Johannesburg

2001

Submission method: email only

Submission email: [email protected]

Closing time: 14:00

Quotations must be on the bidder's official letterhead and must state a total fixed amount inclusive of all applicable taxes.

Quotation validity: 90 days from the closing date.

Late quotations will not be accepted.

Quotations sent to any address other than [email protected] will be disqualified.

Returnable documents

• SBD 4 (Bidder's Disclosure): declares whether any director, shareholder or controlling-interest holder is employed by the state or connected to a CCMA official; a false declaration disqualifies the bid.
• SBD 6.1 (Preference Points Claim Form): claims the 20 specific-goal points for ownership; no proof attached means no points awarded.
• Valid original SARS Tax Clearance Certificate.
• Valid SETA/QCTO/CHE accreditation certificate for the training.
• Proof of authorised CompTIA partner/reseller status, or written confirmation that the bundle will be procured through an authorised CompTIA channel.
• Proof of CSD registration.
• Proof of ownership: CIPC founding documents and ID copies of owners; a medical certificate confirming disability where PWD points are claimed.
• Detailed course outline, detailed project outline, facilitator CV, and three reference letters or attendance registers.
• POPIA consent form signed by the bidder's representative.

Documents to attach with the quotation:

• Proof of ownership: CIPC founding documents listing the ownership, and ID copies of the owners.
• Medical certificate confirming disability where PWD preference points are claimed.
• Proof of CSD registration before submission.

Failure to attach the ownership proof means the preference points are not awarded.

Three-stage evaluation

• Stage 1 — Mandatory requirements: failure to meet any mandatory requirement ends the evaluation and disqualifies the bid.
• Stage 2 — Functionality: minimum qualifying score 70 out of 100; bids below 70 are disqualified.
• Stage 3 — Price and specific goals: 80/20 preference point system under the PPPFA Regulations 2022.

Functionality scoring (100 points)

• Course outline mapped to CompTIA PenTest+ V3 exam objectives: 40 points; no detailed outline scores 0.
• Company experience in the training environment: 5 points (5 years or more = 5; 4 to under 5 = 4; 3 to under 4 = 3; 2 to under 3 = 2; 1 to under 2 = 1; under 1 year = 0).
• Facilitator expertise and qualifications: 25 points (relevant certification such as PenTest+, Security+, CISM, CEH, CISSP, OSCP or CISA = 10; 3 years' training facilitation experience = 15; below the thresholds = 0).
• References: 30 points (3 reference letters = 30; 2 = 20; 1 = 5; none = 0). CCMA will verify references with the clients.

Price and specific goals (100 points)

• Price: 80 points.
• Specific goals (ownership): 20 points — black-owned 8, women-owned 6, youth-owned 4, persons with disability-owned 2.
• Points for price and specific goals are added and rounded to two decimal places.

Supply of the CompTIA PenTest+ Complete Bundle with Retake for one CCMA official, plus facilitated online training.

Bundle contents

• Voucher plus retake assurance.
• CertMaster Perform.
• CertMaster Practice.

Training delivery

• Two-day facilitator-led interactive workshop delivered online via MS Teams.
• Orientation and guided learning covering the CompTIA PenTest+ V3 exam domains: planning and scoping, information gathering, vulnerability discovery and analysis, attacks and exploits, tools and automation, reporting and communication, and exam preparation.
• Practical demonstrations using the bundle resources, guidance on CertMaster Perform and CertMaster Practice, formative knowledge checks, and a post-workshop study plan.
• Interactive and participative sessions; content customised to CCMA needs and accredited by the relevant professional body.
• Learner aids for practical implementation, and support for learners with special needs or barriers to learning.
• Formative and summative assessments as part of the training; sufficient theoretical and practical training to ensure competence.

Deliverables

• Detailed course outline with the learning methodology for each section.
• Detailed project outline.
• Risk register outlining project risks and mitigation measures.
• Facilitator report to the Skills Development Facilitator covering course content and learner progress.
• Certificate on successful completion of the summative assessment.
• Certificate of attendance within 30 days after the last training day.

Contract duration: once-off.

The quotation must include a detailed course outline with the learning methodology for each section, and a detailed project outline.

The bundle must be practical and effective, enabling the participant to demonstrate correct understanding and application of the methodology, with immediate improvement in PenTest+ skills.

The online facilitated learning must include interactive and participative sessions, customised accredited material, learner aids, and formative and summative assessments.

The bidder must identify and respond to learners with special needs and barriers to learning, and must show how the learned skills can be transferred to other employees.

The bidder must outline the main project risks and how they will be managed and mitigated.

The service provider must have a proven track record of delivering this service to other organisations, evidenced by written confirmation and comments from those organisations.

All personnel on the project must demonstrate a high level of expertise; short resumes showing expertise, experience and relevant cybersecurity qualifications must be submitted.

The facilitator's CV must show at least 3 years' experience conducting training or workshops, and relevant certification such as PenTest+, Security+, CISM, CEH, CISSP, OSCP, CISA or equivalent.

Three reference letters or attendance registers for training of the same nature, such as ICT-related training, must be provided.

Training material must be accurate, accessible, user-friendly and accredited by the relevant professional body, and must be customised to CCMA needs.

The content must be innovative and different from general courses available, and must include learner aids for practical implementation.

Formative and summative assessments must form part of the training, and the learner must receive sufficient theoretical and practical training to demonstrate competence.

A facilitator report covering course content and learner progress must be sent to the CCMA Skills Development Facilitator.

Quotations must be on the bidder's official letterhead and state a total fixed amount inclusive of all applicable taxes.

Quotations above R2 000 are evaluated on price and CCMA preference points under the 80/20 system; the 80 price points apply to quotations up to R1 million.

The 20 specific-goal points are allocated for ownership, supported by proof of ownership: CIPC founding documents, ID copies of owners, and a medical certificate confirming disability where PWD points are claimed. No proof means no preference points.

Bidders must be registered on CSD before submitting a quotation.

Pricing format

• Quotations must be on the bidder's official letterhead and state a total fixed amount inclusive of all applicable taxes.
• Quotations above R2 000 are evaluated on price and CCMA preference points under the 80/20 system.
• The 80 price points apply to quotations up to a rand value of R1 million.

Preference points

• Price: 80 points.
• Specific goals (ownership): 20 points.
• No bid security, performance guarantee, retention or payment terms are stated.

Mandatory eligibility

• Registered on the Central Supplier Database (CSD) before submitting a quotation.
• Valid original SARS Tax Clearance Certificate submitted with the response.
• Valid SETA/QCTO/CHE accreditation certificate to facilitate the training.
• Proof of authorised CompTIA partner/reseller status, or written confirmation that the CompTIA PenTest+ V3 Complete Bundle with Retake will be procured through an authorised CompTIA channel.
• Failure to meet any mandatory requirement disqualifies the bid.

Ownership and preference points

• Black-owned entities: up to 8 points.
• Women-owned entities: up to 6 points.
• Youth-owned entities: up to 4 points.
• Persons with disability-owned entities: up to 2 points.
• Ownership is determined by the percentage of the enterprise owned by, or shares held by, persons actively involved in day-to-day management.
• Proof required: CIPC founding documents and ID copies of owners; a medical certificate confirming disability for PWD claims.
• Ownership claims are verified against the CSD by National Treasury.
• No proof attached means the preference points are not awarded.

No CIDB grading or B-BBEE level requirement is stated.

The successful service provider must have a proven track record of delivering this service to other organisations, evidenced by written confirmation and comments from those organisations.

A high level of expertise is expected of all project personnel; short resumes showing expertise, experience and relevant cybersecurity qualifications must be submitted.

PPPFA principles apply to the evaluation.

Evaluation is on functionality (100 points), price (80 points) and specific goals (20 points).

CCMA is not bound to accept the lowest or any quotation, and may accept any quotation or part of a quotation.

Late quotations will not be accepted.

Quotations must remain valid for 90 days from the closing date.

A valid original SARS Tax Clearance Certificate must be submitted with the response.

Mandatory requirements — failure disqualifies the bid:

• Valid SETA/QCTO/CHE accreditation certificate to facilitate the training.
• Proof of authorised CompTIA partner/reseller status, or written confirmation that the CompTIA PenTest+ V3 Complete Bundle with Retake will be procured through an authorised CompTIA channel.

Stage 3 applies the 80/20 preference point system under the PPPFA and the Preferential Procurement Regulations 2022: 80 points for price and 20 points for specific goals on ownership, as detailed in SBD 6.1.