Broad-Based Black Economic Empowerment Act (B-BBEE Act)
Act 53 of 2003
Provides the empowerment-compliance context often used in public-sector supplier evaluation.
Relevant because this is a South African public-sector procurement opportunity.
Documents available on tender detail page
Tender Type
Request for Quotation
Delivery Location
32 Jones Road, Airways Park, Johannesburg (Head Office) - Kempton Park - Isando - 1627
Organization Type
GOVERNMENT
Published
07 Sept 2026
OCDS Reference
ocds-9t57fa-169292
South african airways is requesting quotations for network penetration testing (internal and external) and an ongoing active watch on hacking exploits relevant to its environment and industry. Bidders must complete the vendor application form and submit IT with all supporting documents by email to [email protected]. The most consequential requirement is that bidders must be registered on the central supplier database and provide a valid tax clearance certificate, b-bbee certificate, and bank confirmation letter.
Bidders must submit the completed vendor application form with all supporting documents by email to [email protected].
Bidders must provide a CSD Registration Report.
Bidders must provide a latest valid original tax clearance certificate (or SARS pin on official SARS documentation).
Bidders must provide a latest valid B-BBEE certificate or affidavit.
Bidders must provide a cancelled cheque or stamped bank confirmation letter not older than one year.
Bidders must provide certified company registration documents and certified copies of identity documents of shareholders.
Payment terms are GSM Approval Schedule Terms (15 days from invoice), with signoff by requester and GSM/Commodity/Operational Manager.
Continue with tenders sharing this issuer, category, or province.
Return to this tender’s issuing organisation, province, or category.
Continue with tenders sharing this issuer, category, or province.
Date & Time
Monday, 14 September 2026 - 16:00
Venue
null
Categories
Request for Quotation
32 Jones Road, Airways Park, Johannesburg (Head Office) - Kempton Park - Isando - 1627
Tenders in this industry often require registration with these bodies.
Recommended Certifications
Having these can improve your winning chances: IITPSA Membership, ISO 27001 (Information Security Management), ISO 20000 (IT Service Management), CISSP
AI Document Analysis Stages
Evaluation Criteria
Source: Annexure 3 - SAA General conditions of contract.pdf (TENDER)07 Sept
2026
Tender Published
Tender was published
14 Sept
2026
Closing Date
Tender closing date
These references help suppliers understand the public-procurement framework around this opportunity. They are generated from the tender category, issuing organisation type and procurement context.
These rules commonly apply to South African public-sector procurement.
Act 53 of 2003
Provides the empowerment-compliance context often used in public-sector supplier evaluation.
Relevant because this is a South African public-sector procurement opportunity.
Act 108 of 1996 (s217)
This is general procurement context, not legal advice. Always verify requirements in the official tender documents and issuing authority notices.
RFQ GSM063-2026 - Request for Quotation for network penetration service (Internal & External),and ongoing active watch on hacking exploits that are applicable for South African Airways.pdf
A quotation for a fully managed network penetration testing service (internal and external) combined with an ongoing active watch exploit monitoring capability for South African Airways (SAA), covering at least 2,200 user endpoints. The successful bidder will provide continuous vulnerability assessment, exploit simulation, threat intelligence monitoring, and reporting, with services aligned to ISO 27001, NIST, and CIS Controls.
Annexure 3 - SAA General conditions of contract.pdf
No summary available
Annexure 1 - Vendor application Local.pdf
South African Airways is requesting quotations for network penetration testing (internal and external) combined with an ongoing active watch service for hacking exploits relevant to its environment and industry. The procurement is managed via a vendor registration process using a standard application form.
Annexure 2 - SBD 4.pdf
Request for quotation for network penetration services (internal and external) and ongoing active monitoring of hacking exploits applicable to South African Airways (Pty) Limited's environment and industry. Submission deadline is Monday, September 14, 2026 at 16:00 GMT+0000.
To download these documents and access AI-powered analysis, visit the main tender page.
Win SAA tenders with AI Discovery, aviation intelligence, compliance gap analysis, and structured application support for aeronautical contracts.
Matched by category & region
Free guidance to prepare before you bid
Not sure if your business is ready for this tender? Check CSD, CIDB, and B-BBEE requirements, run a readiness assessment, and move from opportunity to submission.
Open Supplier Readiness HubMedian Estimate
R 2 352 363
Range
Based on 25 comparable awarded tenders. Companies with similar profiles typically bid near the median.
* Estimates are based on historical data and do not guarantee actual award values.
We refine every tender document through these stages so you can brief your team and prepare your bid with confidence. Anything marked as "in progress" will be upgraded automatically — no action required from you.
No eligibility criteria specified
Technical Specifications
Source: Annexure 3 - SAA General conditions of contract.pdf (TENDER)provisions in the SCC shall prevail.
Table of clauses
Compliance Requirements
Source: Annexure 3 - SAA General conditions of contract.pdf (TENDER)No specific requirements found
Contractual Terms
Source: Annexure 3 - SAA General conditions of contract.pdf (TENDER)General Conditions of Contract
The following terms shall be interpreted as indicated:
1.1 “Closing time” means the date and hour specified in the bidding documents for the receipt of bids.
1.2 “Contract” means the written agreement entered into between the purchaser and the supplier, as recorded
in the contract form signed by the parties, including all attachments and appendices thereto and all
documents incorporated by reference therein.
1.3 “Contract price” means the price payable to the supplier under the contract for the full and proper
performance of his contractual obligations.
1.4 “Corrupt practice” means the offering, giving, receiving, or soliciting of any thing of value to influence the
action of a public official in the procurement process or in contract execution.
1.5 "Countervailing duties" are imposed in cases where an enterprise abroad is subsidized by its government
and encouraged to market its products internationally.
1.6 “Country of origin” means the place where the goods were mined, grown or produced or from which the
services are supplied. Goods are produced when, through manufacturing, processing or substantial and
major assembly of components, a commercially recognized new product results that is substantially
different in basic characteristics or in purpose or utility from its components.
1.7 “Day” means calendar day.
1.8 “Delivery” means delivery in compliance of the conditions of the contract or order.
1.9 “Delivery ex stock” means immediate delivery directly from stock actually on hand.
1.10 “Delivery into consignees store or to his site” means delivered and unloaded in the specified store or depot
or on the specified site in compliance with the conditions of the contract or order, the supplier bearing all
risks and charges involved until the supplies are so delivered and a valid receipt is obtained.
1.11 "Dumping" occurs when a private enterprise abroad market its goods on own initiative in the RSA at lower
prices than that of the country of origin and which have the potential to harm the local industries in the RSA.
1.12 Force majeure” means an event beyond the control of the supplier and not involving the supplier’s fault or
negligence and not foreseeable. Such events may include, but is not restricted to, acts of the purchaser in
its sovereign capacity, wars or revolutions, fires, floods, epidemics, quarantine restrictions and freight
embargoes.
1.13 “Fraudulent practice” means a misrepresentation of facts in order to influence a procurement process or
the execution of a contract to the detriment of any bidder, and includes collusive practice among bidders
(prior to or after bid submission) designed to establish bid prices at artificial non-competitive levels and to
deprive the bidder of the benefits of free and open competition.
1.14 “GCC” means the General Conditions of Contract.
1.15 “Goods” means all of the equipment, machinery, and/or other materials that the supplier is required to supply
to the purchaser under the contract.
1.16 “Imported content” means that portion of the bidding price represented by the cost of components, parts or
materials which have been or are still to be imported (whether by the supplier or his subcontractors) and
which costs are inclusive of the costs abroad, plus freight and other direct importation costs such as landing
costs, dock dues, import duty, sales duty or other similar tax or duty at the South African place of entry as
well as transportation and handling charges to the factory in the Republic where the supplies covered by
the bid will be manufactured.
1.17 “Local content” means that portion of the bidding price which is not included in the imported content provided
that local manufacture does take place.
1.18 “Manufacture” means the production of products in a factory using labour, materials, components and
machinery and includes other related value-adding activities.
1.19 “Order” means an official written order issued for the supply of goods or works or the rendering of a service.
1.20 “Project site,” where applicable, means the place indicated in bidding documents.
1.21 “Purchaser” means the organization purchasing the goods.
1.22 “Republic” means the Republic of South Africa.
1.23 “SCC” means the Special Conditions of Contract.
1.24 “Services” means those functional services ancillary to the supply of the goods, such as transportation and
any other incidental services, such as installation, commissioning, provision of technical assistance,
training, catering, gardening, security, maintenance and other such obligations of the supplier covered
under the contract.
1.25 “Written” or “in writing” means handwritten in ink or any form of electronic or mechanical writing.
2.1 These general conditions are applicable to all bids, contracts and orders including bids for functional and
professional services, sales, hiring, letting and the granting or acquiring of rights, but excluding immovable
property, unless otherwise indicated in the bidding documents.
2.2 Where applicable, special conditions of contract are also laid down to cover specific supplies, services or
works.
2.3 Where such special conditions of contract are in conflict with these general conditions, the special conditions
shall apply.
3.1 Unless otherwise indicated in the bidding documents, the purchaser shall not be liable for any expense
incurred in the preparation and submission of a bid. Where applicable a non-refundable fee for documents
may be charged.
3.2 With certain exceptions, invitations to bid are only published in the Government Tender Bulletin. The
Government Tender Bulletin may be obtained directly from the Government Printer, Private Bag X85,
Pretoria 0001, or accessed electronically from www.treasury.gov.za
4.1 The goods supplied shall conform to the standards mentioned in the bidding documents and specifications.
5.1 The supplier shall not, without the purchaser’s prior written consent, disclose the contract, or any provision
thereof, or any specification, plan, drawing, pattern, sample, or information furnished by or on behalf of the
purchaser in connection therewith, to any person other than a person employed by the supplier in the
performance of the contract. Disclosure to any such employed person shall be made in confidence and
shall extend only so far as may be necessary for purposes of such performance.
5.2 The supplier shall not, without the purchaser’s prior written consent, make use of any document or
information mentioned in GCC clause 5.1 except for purposes of performing the contract.
5.3 Any document, other than the contract itself mentioned in GCC clause 5.1 shall remain the property of the
purchaser and shall be returned (all copies) to the purchaser on completion of the supplier’s performance
under the contract if so required by the purchaser.
5.4 The supplier shall permit the purchaser to inspect the supplier’s records relating to the performance of the
supplier and to have them audited by auditors appointed by the purchaser, if so required by the purchaser.
6.1 The supplier shall indemnify the purchaser against all third-party claims of infringement of patent,
trademark, or industrial design rights arising from use of the goods or any part thereof by the purchaser.
7.1 Within thirty (30) days of receipt of the notification of contract award, the successful bidder shall furnish to
the purchaser the performance security of the amount specified in SCC.
7.2 The proceeds of the performance security shall be payable to the purchaser as compensation for any loss
resulting from the supplier’s failure to complete his obligations under the contract.
7.3 The performance security shall be denominated in the currency of the contract, or in a freely convertible
currency acceptable to the purchaser and shall be in one of the following forms:
a) a bank guarantee or an irrevocable letter of credit issued by a reputable bank located in the purchaser’s
country or abroad, acceptable to the purchaser, in the form provided in the bidding documents or
another form acceptable to the purchaser; or
b) a cashier’s or certified cheque
7.4 The performance security will be discharged by the purchaser and returned to the supplier not later than
thirty (30) days following the date of completion of the supplier’s performance obligations under the contract,
including any warranty obligations, unless otherwise specified in SCC.
8.1 All pre-bidding testing will be for the account of the bidder.
8.2 If it is a bid condition that supplies to be produced or services to be rendered should at any stage during
production or execution or on completion be subject to inspection, the premises of the bidder or contractor
shall be open, at all reasonable hours, for inspection by a representative of the Department or an
organization acting on behalf of the Department.
8.3 If there are no inspection requirements indicated in the bidding documents and no mention is made in the
contract, but during the contract period it is decided that inspections shall be carried out, the purchaser shall
itself make the necessary arrangements, including payment arrangements with the testing authority
concerned.
8.4 If the inspections, tests and analyses referred to in clauses 8.2 and 8.3 show the supplies to be in
accordance with the contract requirements, the cost of the inspections, tests and analyses shall be defrayed
by the purchaser.
8.5 Where the supplies or services referred to in clauses 8.2 and 8.3 do not comply with the contract
requirements, irrespective of whether such supplies or services are accepted or not, the cost in connection
with these inspections, tests or analyses shall be defrayed by the supplier.
8.6 Supplies and services which are referred to in clauses 8.2 and 8.3 and which do not comply with the contract
requirements may be rejected.
8.7 Any contract supplies may on or after delivery be inspected, tested or analyzed and may be rejected if found
not to comply with the requirements of the contract. Such rejected supplies shall be held at the cost and
risk of the supplier who shall, when called upon, remove them immediately at his own cost and forthwith
substitute them with supplies which do comply with the requirements of the contract.
8.8 Failing such removal the rejected supplies shall be returned at the suppliers cost and risk. Should the
supplier fail to provide the substitute supplies forthwith, the purchaser may, without giving the supplier
further opportunity to substitute the rejected supplies, purchase such supplies as may be necessary at the
expense of the supplier.
8.9 The provisions of clauses 8.4 to 8.7 shall not prejudice the right of the purchaser to cancel the contract on
account of a breach of the conditions thereof, or to act in terms of Clause 23 of GCC.
9.1 The supplier shall provide such packing of the goods as is required to prevent their damage or deterioration
during transit to their final destination, as indicated in the contract. The packing shall be sufficient to
withstand, without limitation, rough handling during transit and exposure to extreme temperatures, salt and
precipitation during transit, and open storage. Packing, case size and weights shall take into consideration,
where appropriate, the remoteness of the goods’ final destination and the absence of heavy handling
facilities at all points in transit.
9.2 The packing, marking, and documentation within and outside the packages shall comply strictly with such
special requirements as shall be expressly provided for in the contract, including additional requirements, if
any, specified in SCC, and in any subsequent instructions ordered by the purchaser.
10.1 Delivery of the goods shall be made by the supplier in accordance with the terms specified in the contract.
The details of shipping and/or other documents to be furnished by the supplier are specified in SCC.
10.2 Documents to be submitted by the supplier are specified in SCC.
11.1 The goods supplied under the contract shall be fully insured in a freely convertible currency against loss or
damage incidental to manufacture or acquisition, transportation, storage and delivery in the manner
specified in the SCC.
12.1 Should a price other than an all-inclusive delivered price be required, this shall be specified in the SCC.
13.1 The supplier may be required to provide any or all of the following services, including additional services, if
any, specified in SCC:
a) performance or supervision of on-site assembly and/or commissioning of the supplied goods;
b) furnishing of tools required for assembly and/or maintenance of the supplied goods;
c) furnishing of a detailed operations and maintenance manual for each appropriate unit of the supplied
goods;
d) performance or supervision or maintenance and/or repair of the supplied goods, for a period of time
agreed by the parties, provided that this service shall not relieve the supplier of any warranty obligations
under this contract; and
e) training of the purchaser’s personnel, at the supplier’s plant and/or on-site, in assembly, start-up,
operation, maintenance, and/or repair of the supplied goods.
13.2 Prices charged by the supplier for incidental services, if not included in the contract price for the goods,
shall be agreed upon in advance by the parties and shall not exceed the prevailing rates charged to other
parties by the supplier for similar services.
14.1 As specified in SCC, the supplier may be required to provide any or all of the following materials,
notifications, and information pertaining to spare parts manufactured or distributed by the supplier:
a) such spare parts as the purchaser may elect to purchase from the supplier, provided that this election
shall not relieve the supplier of any warranty obligations under the contract; and
b) in the event of termination of production of the spare parts:
(i) Advance notification to the purchaser of the pending termination, in sufficient time to permit the
purchaser to procure needed requirements; and
(ii) following such termination, furnishing at no cost to the purchaser, the blueprints, drawings, and
specifications of the spare parts, if requested.
15.1 The supplier warrants that the goods supplied under the contract are new, unused, of the most recent or
current models, and that they incorporate all recent improvements in design and materials unless provided
otherwise in the contract. The supplier further warrants that all goods supplied under this contract shall have
no defect, arising from design, materials, or workmanship (except when the design and/or material is
required by the purchaser’s specifications) or from any act or omission of the supplier, that may develop
under normal use of the supplied goods in the conditions prevailing in the country of final destination.
15.2 This warranty shall remain valid for twelve (12) months after the goods, or any portion thereof as the case
may be, have been delivered to and accepted at the final destination indicated in the contract, or for eighteen
(18) months after the date of shipment from the port or place of loading in the source country, whichever
period concludes earlier, unless specified otherwise in SCC.
15.3 The purchaser shall promptly notify the supplier in writing of any claims arising under this warranty.
15.4 Upon receipt of such notice, the supplier shall, within the period specified in SCC and with all reasonable
speed, repair or replace the defective goods or parts thereof, without costs to the purchaser.
15.5 If the supplier, having been notified, fails to remedy the defect(s) within the period specified in SCC, the
purchaser may proceed to take such remedial action as may be necessary, at the supplier’s risk and
expense and without prejudice to any other rights which the purchaser may have against the supplier under
the contract.
16.1 The method and conditions of payment to be made to the supplier under this contract shall be specified in
Scc.
16.2 The supplier shall furnish the purchaser with an invoice accompanied by a copy of the delivery note and
upon fulfillment of other obligations stipulated in the contract.
16.3 Payments shall be made promptly by the purchaser, but in no case later than thirty (30) days after
submission of an invoice or claim by the supplier.
16.4 Payment will be made in Rand unless otherwise stipulated in SCC.
17.1 Prices charged by the supplier for goods delivered and services performed under the contract shall not vary
from the prices quoted by the supplier in his bid, with the exception of any price adjustments authorized in
SCC or in the purchaser’s request for bid validity extension, as the case may be.
18.1 No variation in or modification of the terms of the contract shall be made except by written amendment
signed by the parties concerned.
19.1 The supplier shall not assign, in whole or in part, its obligations to perform under the contract, except with
the purchaser’s prior written consent.
20.1 The supplier shall notify the purchaser in writing of all subcontracts awarded under this contracts if not
already specified in the bid. Such notification, in the original bid or later, shall not relieve the supplier from
any liability or obligation under the contract.
21.1 Delivery of the goods and performance of services shall be made by the supplier in accordance with the
time schedule prescribed by the purchaser in the contract.
21.2 If at any time during performance of the contract, the supplier or its subcontractor(s) should encounter
conditions impeding timely delivery of the goods and performance of services, the supplier shall promptly
notify the purchaser in writing of the fact of the delay, its likely duration and its cause(s). As soon as
practicable after receipt of the supplier’s notice, the purchaser shall evaluate the situation and may at his
discretion extend the supplier’s time for performance, with or without the imposition of penalties, in which
case the extension shall be ratified by the parties by amendment of contract.
21.3 No provision in a contract shall be deemed to prohibit the obtaining of supplies or services from a national
department, provincial department, or a local authority.
21.4 The right is reserved to procure outside of the contract small quantities or to have minor essential services
executed if an emergency arises, the supplier’s point of supply is not situated at or near the place where
the supplies are required, or the supplier’s services are not readily available.
21.5 Except as provided under GCC Clause 25, a delay by the supplier in the performance of its delivery
obligations shall render the supplier liable to the imposition of penalties, pursuant to GCC Clause 22, unless
an extension of time is agreed upon pursuant to GCC Clause 21.2 without the application of penalties.
21.6 Upon any delay beyond the delivery period in the case of a supplies contract, the purchaser shall, without
cancelling the contract, be entitled to purchase supplies of a similar quality and up to the same quantity in
substitution of the goods not supplied in conformity with the contract and to return any goods delivered later
at the supplier’s expense and risk, or to cancel the contract and buy such goods as may be required to
complete the contract and without prejudice to his other rights, be entitled to claim damages from the
supplier.
22.1 Subject to GCC Clause 25, if the supplier fails to deliver any or all of the goods or to perform the services
within the period(s) specified in the contract, the purchaser shall, without prejudice to its other remedies
under the contract, deduct from the contract price, as a penalty, a sum calculated on the delivered price of
the delayed goods or unperformed services using the current prime interest rate calculated for each day of
the delay until actual delivery or performance. The purchaser may also consider termination of the contract
pursuant to GCC Clause 23.
23.1 The purchaser, without prejudice to any other remedy for breach of contract, by written notice of default
sent to the supplier, may terminate this contract in whole or in part:
a) if the supplier fails to deliver any or all of the goods within the period(s) specified in the contract, or
within any extension thereof granted by the purchaser pursuant to GCC Clause 21.2;
b) if the Supplier fails to perform any other obligation(s) under the contract; or
c) if the supplier, in the judgment of the purchaser, has engaged in corrupt or fraudulent practices in
competing for or in executing the contract.
23.2 In the event the purchaser terminates the contract in whole or in part, the purchaser may procure, upon
such terms and in such manner as it deems appropriate, goods, works or services similar to those
undelivered, and the supplier shall be liable to the purchaser for any excess costs for such similar goods,
works or services. However, the supplier shall continue performance of the contract to the extent not
terminated.
23.3 Where the purchaser terminates the contract in whole or in part, the purchaser may decide to impose a
restriction penalty on the supplier by prohibiting such supplier from doing business with the public sector for
a period not exceeding 10 years.
23.4 If a purchaser intends imposing a restriction on a supplier or any person associated with the supplier, the
supplier will be allowed a time period of not more than fourteen (14) days to provide reasons why the
envisaged restriction should not be imposed. Should the supplier fail to respond within the stipulated
fourteen (14) days the purchaser may regard the intended penalty as not objected against and may impose
it on the supplier.
23.5 Any restriction imposed on any person by the Accounting Officer / Authority will, at the discretion of the
Accounting Officer / Authority, also be applicable to any other enterprise or any partner, manager, director
or other person who wholly or partly exercises or exercised or may exercise control over the enterprise of
the first-mentioned person, and with which enterprise or person the first-mentioned person, is or was in the
opinion of the Accounting Officer / Authority actively associated.
23.6 If a restriction is imposed, the purchaser must, within five (5) working days of such imposition, furnish the
National Treasury, with the following information:
(i) the name and address of the supplier and / or person restricted by the purchaser;
(ii) the date of commencement of the restriction
(iii) the period of restriction; and
(iv) the reasons for the restriction.
These details will be loaded in the National Treasury’s central database of suppliers or persons prohibited
from doing business with the public sector.
23.7 If a court of law convicts a person of an offence as contemplated in sections 12 or 13 of the Prevention and
Combating of Corrupt Activities Act, No. , the court may also rule that such person’s name be
endorsed on the Register for Tender Defaulters. When a person’s name has been endorsed on the Register,
the person will be prohibited from doing business with the public sector for a period not less than five years
and not more than 10 years. The National Treasury is empowered to determine the period of restriction and
each case will be dealt with on its own merits. According to section 32 of the Act the Register must be open
to the public. The Register can be perused on the National Treasury website.
24.1 When, after the date of bid, provisional payments are required, or antidumping or countervailing duties are
imposed, or the amount of a provisional payment or anti-dumping or countervailing right is increased in
respect of any dumped or subsidized import, the State is not liable for any amount so required or imposed,
or for the amount of any such increase. When, after the said date, such a provisional payment is no longer
required or any such anti-dumping or countervailing right is abolished, or where the amount of such
provisional payment or any such right is reduced, any such favourable difference shall on demand be paid
forthwith by the contractor to the State or the State may deduct such amounts from moneys (if any) which
may otherwise be due to the contractor in regard to supplies or services which he delivered or rendered, or
is to deliver or render in terms of the contract or any other contract or any other amount which may be due
to him.
25.1 Notwithstanding the provisions of GCC Clauses 22 and 23, the supplier shall not be liable for forfeiture of
its performance security, damages, or termination for default if and to the extent that his delay in
performance or other failure to perform his obligations under the contract is the result of an event of force
majeure.
25.2 If a force majeure situation arises, the supplier shall promptly notify the purchaser in writing of such condition
and the cause thereof. Unless otherwise directed by the purchaser in writing, the supplier shall continue to
perform its obligations under the contract as far as is reasonably practical, and shall seek all reasonable
alternative means for performance not prevented by the force majeure event.
26.1 The purchaser may at any time terminate the contract by giving written notice to the supplier if the supplier
becomes bankrupt or otherwise insolvent. In this event, termination will be without compensation to the
supplier, provided that such termination will not prejudice or affect any right of action or remedy which has
accrued or will accrue thereafter to the purchaser.
27.1 If any dispute or difference of any kind whatsoever arises between the purchaser and the supplier in
connection with or arising out of the contract, the parties shall make every effort to resolve amicably such
dispute or difference by mutual consultation.
27.2 If, after thirty (30) days, the parties have failed to resolve their dispute or difference by such mutual
consultation, then either the purchaser or the supplier may give notice to the other party of his intention to
commence with mediation. No mediation in respect of this matter may be commenced unless such notice
is given to the other party.
27.3 Should it not be possible to settle a dispute by means of mediation, it may be settled in a South African
court of law.
27.4 Mediation proceedings shall be conducted in accordance with the rules of procedure specified in the SCC.
27.5 Notwithstanding any reference to mediation and/or court proceedings herein,
a) the parties shall continue to perform their respective obligations under the contract unless they
otherwise agree; and
b) the purchaser shall pay the supplier any monies due the supplier.
28.1 Except in cases of criminal negligence or willful misconduct, and in the case of infringement pursuant to
Clause 6;
a) the supplier shall not be liable to the purchaser, whether in contract, tort, or otherwise, for any indirect
or consequential loss or damage, loss of use, loss of production, or loss of profits or interest costs,
provided that this exclusion shall not apply to any obligation of the supplier to pay penalties and/or
damages to the purchaser; and
b) the aggregate liability of the supplier to the purchaser, whether under the contract, in tort or otherwise,
shall not exceed the total contract price, provided that this limitation shall not apply to the cost of
repairing or replacing defective equipment.
29.1 The contract shall be written in English. All correspondence and other documents pertaining to the contract
that is exchanged by the parties shall also be written in English.
30.1 The contract shall be interpreted in accordance with South African laws, unless otherwise specified in SCC.
31.1 Every written acceptance of a bid shall be posted to the supplier concerned by registered or certified mail
and any other notice to him shall be posted by ordinary mail to the address furnished in his bid or to the
address notified later by him in writing and such posting shall be deemed to be proper service of such notice
31.2 The time mentioned in the contract documents for performing any act after such aforesaid notice has been
given, shall be reckoned from the date of posting of such notice.
32.1 A foreign supplier shall be entirely responsible for all taxes, stamp duties, license fees, and other such levies
imposed outside the purchaser’s country.
32.2 A local supplier shall be entirely responsible for all taxes, duties, license fees, etc., incurred until delivery of
the contracted goods to the purchaser.
32.3 No contract shall be concluded with any bidder whose tax matters are not in order. Prior to the award of a
bid the Department must be in possession of a tax clearance certificate, submitted by the bidder. This
certificate must be an original issued by the South African Revenue Services.
33.1 The NIP Programme administered by the Department of Trade and Industry shall be applicable to all
contracts that are subject to the NIP obligation.
34.1 In terms of section 4 (1) (b) (iii) of the Competition Act No. , as amended, an agreement between,
or concerted practice by, firms, or a decision by an association of firms, is prohibited if it is between parties
in a horizontal relationship and if a bidder (s) is / are or a contractor(s) was / were involved in collusive
bidding (or bid rigging).
34.2 If a bidder(s) or contractor(s), based on reasonable grounds or evidence obtained by the purchaser, has /
have engaged in the restrictive practice referred to above, the purchaser may refer the matter to the
Competition Commission for investigation and possible imposition of administrative penalties as
contemplated in the Competition Act No. .
34.3 If a bidder(s) or contractor(s), has / have been found guilty by the Competition Commission of the restrictive
practice referred to above, the purchaser may, in addition and without prejudice to any other remedy
provided for, invalidate the bid(s) for such item(s) offered, and / or terminate the contract in whole or part,
and / or restrict the bidder(s) or contractor(s) from conducting business with the public sector for a period
not exceeding ten (10) years and / or claim damages from the bidder(s) or contractor(s) concerned.
Js General Conditions of Contract (revised July 2010)
1.1 “Closing time” means the date and hour specified in the bidding documents for the receipt of bids.
1.2 “Contract” means the written agreement entered into between the purchaser and the supplier, as recorded
in the contract form signed by the parties, including all attachments and appendices thereto and all
documents incorporated by reference therein.
1.3 “Contract price” means the price payable to the supplier under the contract for the full and proper
performance of his contractual obligations.
1.4 “Corrupt practice” means the offering, giving, receiving, or soliciting of any thing of value to influence the
action of a public official in the procurement process or in contract execution.
1.5 "Countervailing duties" are imposed in cases where an enterprise abroad is subsidized by its government
and encouraged to market its products internationally.
1.6 “Country of origin” means the place where the goods were mined, grown or produced or from which the
services are supplied. Goods are produced when, through manufacturing, processing or substantial and
major assembly of components, a commercially recognized new product results that is substantially
different in basic characteristics or in purpose or utility from its components.
1.7 “Day” means calendar day.
1.8 “Delivery” means delivery in compliance of the conditions of the contract or order.
1.9 “Delivery ex stock” means immediate delivery directly from stock actually on hand.
1.10 “Delivery into consignees store or to his site” means delivered and unloaded in the specified store or depot
or on the specified site in compliance with the conditions of the contract or order, the supplier bearing all
risks and charges involved until the supplies are so delivered and a valid receipt is obtained.
1.11 "Dumping" occurs when a private enterprise abroad market its goods on own initiative in the RSA at lower
prices than that of the country of origin and which have the potential to harm the local industries in the RSA.
1.12 Force majeure” means an event beyond the control of the supplier and not involving the supplier’s fault or
negligence and not foreseeable. Such events may include, but is not restricted to, acts of the purchaser in
its sovereign capacity, wars or revolutions, fires, floods, epidemics, quarantine restrictions and freight
embargoes.
1.13 “Fraudulent practice” means a misrepresentation of facts in order to influence a procurement process or
the execution of a contract to the detriment of any bidder, and includes collusive practice among bidders
(prior to or after bid submission) designed to establish bid prices at artificial non-competitive levels and to
deprive the bidder of the benefits of free and open competition.
1.14 “GCC” means the General Conditions of Contract.
1.15 “Goods” means all of the equipment, machinery, and/or other materials that the supplier is required to supply
to the purchaser under the contract.
1.16 “Imported content” means that portion of the bidding price represented by the cost of components, parts or
materials which have been or are still to be imported (whether by the supplier or his subcontractors) and
which costs are inclusive of the costs abroad, plus freight and other direct importation costs such as landing
costs, dock dues, import duty, sales duty or other similar tax or duty at the South African place of entry as
well as transportation and handling charges to the factory in the Republic where the supplies covered by
the bid will be manufactured.
1.17 “Local content” means that portion of the bidding price which is not included in the imported content provided
that local manufacture does take place.
1.18 “Manufacture” means the production of products in a factory using labour, materials, components and
machinery and includes other related value-adding activities.
1.19 “Order” means an official written order issued for the supply of goods or works or the rendering of a service.
1.20 “Project site,” where applicable, means the place indicated in bidding documents.
1.21 “Purchaser” means the organization purchasing the goods.
1.22 “Republic” means the Republic of South Africa.
1.23 “SCC” means the Special Conditions of Contract.
1.24 “Services” means those functional services ancillary to the supply of the goods, such as transportation and
any other incidental services, such as installation, commissioning, provision of technical assistance,
training, catering, gardening, security, maintenance and other such obligations of the supplier covered
under the contract.
1.25 “Written” or “in writing” means handwritten in ink or any form of electronic or mechanical writing.
6.1 The supplier shall indemnify the purchaser against all third-party claims of infringement of patent,
trademark, or industrial design rights arising from use of the goods or any part thereof by the purchaser.
7.1 Within thirty (30) days of receipt of the notification of contract award, the successful bidder shall furnish to
the purchaser the performance security of the amount specified in SCC.
7.2 The proceeds of the performance security shall be payable to the purchaser as compensation for any loss
resulting from the supplier’s failure to complete his obligations under the contract.
7.3 The performance security shall be denominated in the currency of the contract, or in a freely convertible
currency acceptable to the purchaser and shall be in one of the following forms:
a) a bank guarantee or an irrevocable letter of credit issued by a reputable bank located in the purchaser’s
country or abroad, acceptable to the purchaser, in the form provided in the bidding documents or
another form acceptable to the purchaser; or
b) a cashier’s or certified cheque
7.4 The performance security will be discharged by the purchaser and returned to the supplier not later than
thirty (30) days following the date of completion of the supplier’s performance obligations under the contract,
including any warranty obligations, unless otherwise specified in SCC.
13.1 The supplier may be required to provide any or all of the following services, including additional services, if
any, specified in SCC:
a) performance or supervision of on-site assembly and/or commissioning of the supplied goods;
b) furnishing of tools required for assembly and/or maintenance of the supplied goods;
c) furnishing of a detailed operations and maintenance manual for each appropriate unit of the supplied
goods;
d) performance or supervision or maintenance and/or repair of the supplied goods, for a period of time
agreed by the parties, provided that this service shall not relieve the supplier of any warranty obligations
under this contract; and
e) training of the purchaser’s personnel, at the supplier’s plant and/or on-site, in assembly, start-up,
operation, maintenance, and/or repair of the supplied goods.
13.2 Prices charged by the supplier for incidental services, if not included in the contract price for the goods,
shall be agreed upon in advance by the parties and shall not exceed the prevailing rates charged to other
parties by the supplier for similar services.
14.1 As specified in SCC, the supplier may be required to provide any or all of the following materials,
notifications, and information pertaining to spare parts manufactured or distributed by the supplier:
a) such spare parts as the purchaser may elect to purchase from the supplier, provided that this election
shall not relieve the supplier of any warranty obligations under the contract; and
b) in the event of termination of production of the spare parts:
(i) Advance notification to the purchaser of the pending termination, in sufficient time to permit the
purchaser to procure needed requirements; and
(ii) following such termination, furnishing at no cost to the purchaser, the blueprints, drawings, and
specifications of the spare parts, if requested.
15.1 The supplier warrants that the goods supplied under the contract are new, unused, of the most recent or
current models, and that they incorporate all recent improvements in design and materials unless provided
otherwise in the contract. The supplier further warrants that all goods supplied under this contract shall have
no defect, arising from design, materials, or workmanship (except when the design and/or material is
required by the purchaser’s specifications) or from any act or omission of the supplier, that may develop
under normal use of the supplied goods in the conditions prevailing in the country of final destination.
15.2 This warranty shall remain valid for twelve (12) months after the goods, or any portion thereof as the case
may be, have been delivered to and accepted at the final destination indicated in the contract, or for eighteen
(18) months after the date of shipment from the port or place of loading in the source country, whichever
period concludes earlier, unless specified otherwise in SCC.
15.3 The purchaser shall promptly notify the supplier in writing of any claims arising under this warranty.
15.4 Upon receipt of such notice, the supplier shall, within the period specified in SCC and with all reasonable
speed, repair or replace the defective goods or parts thereof, without costs to the purchaser.
15.5 If the supplier, having been notified, fails to remedy the defect(s) within the period specified in SCC, the
purchaser may proceed to take such remedial action as may be necessary, at the supplier’s risk and
expense and without prejudice to any other rights which the purchaser may have against the supplier under
the contract.
20.1 The supplier shall notify the purchaser in writing of all subcontracts awarded under this contracts if not
already specified in the bid. Such notification, in the original bid or later, shall not relieve the supplier from
any liability or obligation under the contract.
21.1 Delivery of the goods and performance of services shall be made by the supplier in accordance with the
time schedule prescribed by the purchaser in the contract.
21.2 If at any time during performance of the contract, the supplier or its subcontractor(s) should encounter
conditions impeding timely delivery of the goods and performance of services, the supplier shall promptly
notify the purchaser in writing of the fact of the delay, its likely duration and its cause(s). As soon as
practicable after receipt of the supplier’s notice, the purchaser shall evaluate the situation and may at his
discretion extend the supplier’s time for performance, with or without the imposition of penalties, in which
case the extension shall be ratified by the parties by amendment of contract.
21.3 No provision in a contract shall be deemed to prohibit the obtaining of supplies or services from a national
department, provincial department, or a local authority.
21.4 The right is reserved to procure outside of the contract small quantities or to have minor essential services
executed if an emergency arises, the supplier’s point of supply is not situated at or near the place where
the supplies are required, or the supplier’s services are not readily available.
21.5 Except as provided under GCC Clause 25, a delay by the supplier in the performance of its delivery
obligations shall render the supplier liable to the imposition of penalties, pursuant to GCC Clause 22, unless
an extension of time is agreed upon pursuant to GCC Clause 21.2 without the application of penalties.
21.6 Upon any delay beyond the delivery period in the case of a supplies contract, the purchaser shall, without
cancelling the contract, be entitled to purchase supplies of a similar quality and up to the same quantity in
substitution of the goods not supplied in conformity with the contract and to return any goods delivered later
at the supplier’s expense and risk, or to cancel the contract and buy such goods as may be required to
complete the contract and without prejudice to his other rights, be entitled to claim damages from the
supplier.
22.1 Subject to GCC Clause 25, if the supplier fails to deliver any or all of the goods or to perform the services
within the period(s) specified in the contract, the purchaser shall, without prejudice to its other remedies
under the contract, deduct from the contract price, as a penalty, a sum calculated on the delivered price of
the delayed goods or unperformed services using the current prime interest rate calculated for each day of
the delay until actual delivery or performance. The purchaser may also consider termination of the contract
pursuant to GCC Clause 23.
23.1 The purchaser, without prejudice to any other remedy for breach of contract, by written notice of default
sent to the supplier, may terminate this contract in whole or in part:
a) if the supplier fails to deliver any or all of the goods within the period(s) specified in the contract, or
within any extension thereof granted by the purchaser pursuant to GCC Clause 21.2;
b) if the Supplier fails to perform any other obligation(s) under the contract; or
c) if the supplier, in the judgment of the purchaser, has engaged in corrupt or fraudulent practices in
competing for or in executing the contract.
23.2 In the event the purchaser terminates the contract in whole or in part, the purchaser may procure, upon
such terms and in such manner as it deems appropriate, goods, works or services similar to those
undelivered, and the supplier shall be liable to the purchaser for any excess costs for such similar goods,
works or services. However, the supplier shall continue performance of the contract to the extent not
terminated.
23.3 Where the purchaser terminates the contract in whole or in part, the purchaser may decide to impose a
restriction penalty on the supplier by prohibiting such supplier from doing business with the public sector for
a period not exceeding 10 years.
23.4 If a purchaser intends imposing a restriction on a supplier or any person associated with the supplier, the
supplier will be allowed a time period of not more than fourteen (14) days to provide reasons why the
envisaged restriction should not be imposed. Should the supplier fail to respond within the stipulated
fourteen (14) days the purchaser may regard the intended penalty as not objected against and may impose
it on the supplier.
23.5 Any restriction imposed on any person by the Accounting Officer / Authority will, at the discretion of the
25.1 Notwithstanding the provisions of GCC Clauses 22 and 23, the supplier shall not be liable for forfeiture of
its performance security, damages, or termination for default if and to the extent that his delay in
performance or other failure to perform his obligations under the contract is the result of an event of force
majeure.
25.2 If a force majeure situation arises, the supplier shall promptly notify the purchaser in writing of such condition
and the cause thereof. Unless otherwise directed by the purchaser in writing, the supplier shall continue to
perform its obligations under the contract as far as is reasonably practical, and shall seek all reasonable
alternative means for performance not prevented by the force majeure event.
26.1 The purchaser may at any time terminate the contract by giving written notice to the supplier if the supplier
becomes bankrupt or otherwise insolvent. In this event, termination will be without compensation to the
supplier, provided that such termination will not prejudice or affect any right of action or remedy which has
accrued or will accrue thereafter to the purchaser.
27.1 If any dispute or difference of any kind whatsoever arises between the purchaser and the supplier in
connection with or arising out of the contract, the parties shall make every effort to resolve amicably such
dispute or difference by mutual consultation.
27.2 If, after thirty (30) days, the parties have failed to resolve their dispute or difference by such mutual
consultation, then either the purchaser or the supplier may give notice to the other party of his intention to
commence with mediation. No mediation in respect of this matter may be commenced unless such notice
is given to the other party.
27.3 Should it not be possible to settle a dispute by means of mediation, it may be settled in a South African
court of law.
27.4 Mediation proceedings shall be conducted in accordance with the rules of procedure specified in the SCC.
27.5 Notwithstanding any reference to mediation and/or court proceedings herein,
a) the parties shall continue to perform their respective obligations under the contract unless they
otherwise agree; and
b) the purchaser shall pay the supplier any monies due the supplier.
28.1 Except in cases of criminal negligence or willful misconduct, and in the case of infringement pursuant to
Clause 6;
a) the supplier shall not be liable to the purchaser, whether in contract, tort, or otherwise, for any indirect
or consequential loss or damage, loss of use, loss of production, or loss of profits or interest costs,
provided that this exclusion shall not apply to any obligation of the supplier to pay penalties and/or
damages to the purchaser; and
b) the aggregate liability of the supplier to the purchaser, whether under the contract, in tort or otherwise,
shall not exceed the total contract price, provided that this limitation shall not apply to the cost of
repairing or replacing defective equipment.
Description
Source: RFQ GSM063-2026 - Request for Quotation for network penetration service (Internal & External),and ongoing active watch on hacking exploits that are applicable for South African Airways.pdf (RFQ)Request for Quotation for network penetration service (Internal & External), and ongoing active watch on hacking exploits that are applicable for South African Airways’s (SAA) environment and industry.
Important Dates
Source: RFQ GSM063-2026 - Request for Quotation for network penetration service (Internal & External),and ongoing active watch on hacking exploits that are applicable for South African Airways.pdf (RFQ){"closingDate":"07 September 2026","closingTime":"16:00pm"}
Contact Information
Source: RFQ GSM063-2026 - Request for Quotation for network penetration service (Internal & External),and ongoing active watch on hacking exploits that are applicable for South African Airways.pdf (RFQ){"name":"................................................................................","email":"[email protected]","phone":null,"department":"Global Supply Management","address":"............................................................................................................................"}
Submission Guidelines
Source: RFQ GSM063-2026 - Request for Quotation for network penetration service (Internal & External),and ongoing active watch on hacking exploits that are applicable for South African Airways.pdf (RFQ)Submit quotations via email to [email protected] before the closing date and time (14 September at 16:00). The maximum email size is 2MB; SAA is not responsible for corrupt or unopenable links. Quotations must be submitted before the specified closing date and time; late submissions will not be accepted. If not quoting, indicate so and return the email to the relevant procurement official.
Returnable Documents
Source: RFQ GSM063-2026 - Request for Quotation for network penetration service (Internal & External),and ongoing active watch on hacking exploits that are applicable for South African Airways.pdf (RFQ)Required Documentation to be attached: 1. SAA Vendor Document. Refer to Annexure 1; 2. SBD 4 Document. Refer to Annexure 2; 3. General Conditions of Contract. Refer to Annexure 3.
Evaluation Criteria
Source: RFQ GSM063-2026 - Request for Quotation for network penetration service (Internal & External),and ongoing active watch on hacking exploits that are applicable for South African Airways.pdf (RFQ)Evaluation is in two stages: Phase 1 (Mandatory Returnable Documents) and Phase 2 (Functionality). Functionality is scored on: (1) Proposed delivery team — minimum 5 security professionals with OSCP certification; additional certifications (CREST, PCI, CEH, GPEN, CPT, Cyber Essentials) earn extra points (10 points for all 5 CVs with OSCP only; 20 points if additional certifications provided). (2) Relevant project experience — completion letters or contract extracts with start/end dates and project owner contact details: 3 projects = 15 points, 2 = 10, 1 = 5, 0 = 0. Bidders failing to meet the 75% minimum functionality score will not be considered further. Price and B-BBEE are evaluated after functionality.
Technical Specifications
Source: RFQ GSM063-2026 - Request for Quotation for network penetration service (Internal & External),and ongoing active watch on hacking exploits that are applicable for South African Airways.pdf (RFQ)1.1. Service providers are requested to provide prices with their quotation to SAA for all
the services to be provided as per the specifications. Service providers are expected
to submit a cost that is fair and reasonable.
1.2. SAA has the right to negotiate with a prospective Service Provider regarding any
proposed contract terms and conditions, including price(s).
The scope of work includes the provision, execution, configuration, and ongoing management
of enterprise-grade penetration testing (internal & external) services and active exploit
monitoring capabilities for South African Airways (SAA).
The successful service provider will be responsible for delivering a fully managed network
penetration testing and monitoring solution that proactively identifies vulnerabilities, simulates
real-world attack scenarios, and provides actionable intelligence to strengthen SAA’s overall
security posture.
The service provider will be required to deploy a continuous penetration testing programme
that incorporates adaptive, behaviour-driven assessments across critical systems, applications,
networks, and endpoints. Testing must be automated, recurring, and tailored to SAA’s evolving
threat landscape, risk profile, and operational environment.
The scope further includes the implementation of an Active Watch Exploit Monitoring
capability that enables:
reporting on system resilience.
Managed penetration intelligence and active watch services are required.
The solution must provide access to a continuously updated exploit and vulnerability database
aligned with internationally recognised cybersecurity standards and best practices, including
ISO 27001, NIST, and CIS Controls.
The service provider must ensure coverage for a minimum of 2,200 user endpoints and
associated infrastructure within SAA’s current environment. The licensing and service model
must support scalability to accommodate additional systems and users during the contract
period, without requiring a full platform reimplementation.
In addition, the service provider must enable advanced analytics, including vulnerability scoring,
exploit trend analysis, maturity assessments, and risk posture measurement. The solution must
provide dashboards and reports that allow SAA to track penetration test results, exploit
detection metrics, remediation progress, and overall cybersecurity resilience on a monthly and
quarterly basis.
A minimum of 6 years of professional experience, combined with active watch in penetration
testing and within financial and aviation services.
of 11
Deployment Expertise: Proven track record with active watch deployment, ensuring continuous
monitoring and rapid response capabilities.
Combined Expectation: Candidates must demonstrate both the depth of penetration testing
expertise and the operational readiness associated with active watch deployment.
Administrative Substantive Technical Evaluation of Business
Responsiveness Responsiveness Functionality Price and Award and
Evaluation Specific conclusion of
Goals contract
Step 1 Step 2 Step 3 Step 4 Step 5
Evaluation of Evaluation of The minimum Price Post-tender
returnable Mandatory threshold for [Proposed negotiations (if
documents per (Substantive) technical price Structure] applicable) are
tender Returnable functionality is (80) held at this
requirements Documents i.e 75%. stage before the
Bidders must & LOA is issued to
meet this the preferred
minimum Specific Goals supplier.
requirement to (20)
proceed to the
next stage of
evaluation.
Note: The evaluation of the various stages will generally occur sequentially. However, to
speed up the process, South African Airways may choose to conduct different steps of the
evaluation in parallel. In such cases, evaluating bidders at any stage should not be taken as
an indication that they have passed previous stages.
3.1 Evaluation process
3.1.1 Compliance with minimum requirements
All quotations duly lodged will be examined to determine compliance with bidding
requirements and conditions. Quotations with apparent deviations from the
requirements/conditions will be eliminated from further adjudication.
3.1.2 Evaluation of quotation
The contract shall be awarded at SAA's sole and absolute discretion. SAA hereby
states that it is not compelled to award this quotation to any bidder. SAA has the
right to withdraw this quotation at any time from the date of issuance. SAA is not
obligated to accept the lowest quotation, offer, or proposal.
SAA shall not be required to accept the lowest quotation, offer, or proposal.
All quotations will be evaluated according to the criteria, weightings, and
threshold scores as indicated in 3.2 below:
3.2 Administrative and substantive evaluation
The criteria and weights referred to in paragraph 3.1 above are as follows:
of 11
3.2.1 Administrative requirements
This evaluation stage will confirm whether all Returnable Documents [where
applicable] were completed and returned by the closing date and time. At this
evaluation stage, SAA will also verify if the Bid document has been duly signed
by the authorised respondent, and the validity of all returnable documents will be
verified.
3.2.2 Substantive requirements
This evaluation stage will confirm if the following requirements have been
met:
Mandatory Returnable Documents – Phase 1
Bidders must fully comply (100% compliance) with the statements of compliance
below by either selecting “Yes” or “No” with supporting evidence to qualify their
statements of compliance. Failure to do so will result in bid disqualification.
Bidders should also note that if they select “No,” South African Airways will
interpret the bidder as non-compliant, leading to bid disqualification.
None Weighted, mandatory requirements must be met for the bid Comply (Make
to qualify for further evaluation. Proof of the information below sure that you
needs to be provided. A bidder who fails to meet this requirement attach proof)
will be disqualified. YES NO
The bidder must comply with internationally recognised cybersecurity
and penetration testing standards, demonstrating adherence to
information security, data protection, and privacy requirements
relevant to SAA.
Provide an Acceptable methodology in alignment with ISO/IEC
27001 or NIST Cybersecurity Framework, or any of the below
certification:
All bidders who do not submit all the required returnable documents (Critical Criteria)
will be disqualified from further evaluation.
3.3 Technical Functional Questionnaire/Evaluation (Minimum Threshold = 80%) –
Phase 02
of 11
Evaluation Criteria Weight %
Implementation Lead Time – The bidder must provide a detailed
implementation timeline in a table format indicating the time required to onboard
SAA, configure the platform, and commence execution and active monitoring
and/or simulations of attacks following contract award.
15%
The bidder must demonstrate experience in the deployment, execution, and
ongoing management of:
hacking and simulations, within enterprise environments, with a minimum
of six (6) years relevant experience in Airline/Aviation or Financial service
or online shopping/ ecommerce
10%
Evidence requirement: Copies of Purchase Orders (POs) or contracts or
reference letters on the client’s letterhead submitted with the proposal must
show a combined period of service totaling at least 6 years
The bidder must demonstrate experience in the deployment, execution,
and ongoing management of:
Active watch solutions (e.g., ethical hacking and simulations, continuous
monitoring, SOC/watch services, active threat detection/response), within
enterprise environments, with a minimum of four (4) years relevant experience.
Evidence requirement: Copies of Purchase Orders (POs) or contracts or 5
reference letters on the client’s letter head submitted with the proposal must
show a combined period of service totalling at least 4 years
Scope coverage: internal + external penetration testing + active watch in
enterprise:
including ongoing management in enterprise settings = 10
active watch capability (or vice versa) = 5
of 11
satisfactory service delivery in Network Penetration Services and Active
Watch Projects – The bidder must demonstrate satisfactory service delivery in
network penetration testing, active watch, or simulation of exploits programmed
within the last six (6) years from a client in the Airline/Aviation or Financial
service or online shopping/ ecommerce.
15%
The information provided must be supported by 3 testimonial letters on the
client’s letterhead with contactable details (e.g. telephone, cell phone, email etc.)
of previous/current clients testifying satisfactory service delivery on the matters
cited.
Skills and Qualifications of Delivery Team:
The bidder must provide CVs of key personnel responsible for the delivery and
management of penetration testing and active monitoring services under this
proposal.
The proposed delivery team must include:
A minimum of five (5) suitably qualified security professionals, each holding
OSCP certification, plus one or more of the following or equivalent:
In addition, the bidder must demonstrate:
Proven experience in penetration testing, threat monitoring, and incident
response, and
Professional references validating prior engagements relevant to the scope of
services.
provided = 10
provided = 20
The bidder must demonstrate the ability to deliver a fully managed
penetration testing intelligence and active watch service, including but not
limited to: 15%
of 11
The bidder must provide documented evidence of prior managed service
engagements, signed off by clients, demonstrating successful delivery of
managed penetration testing and active watch services.
Minimum Requirements:
The bidder must show capability to fully manage penetration testing and active
watch services covering:
⎯ administration,
⎯ monitoring setup,
⎯ testing execution,
⎯ reporting, and
⎯ continuous support
The bidder must submit documented evidence of three clients within the
minimum of past 6 years the following evidence for each project claimed:
1 Client‐signed project completion letters with Description of managed
services provided. or
2 Contract extracts which include the start and end date of the project and
contact details of the project owner.
and end date of the project and contact details of the project owner
submitted = 15
and end date of the project and contact details of the project owner
submitted =10
and end date of the project and contact details of the project owner
submitted =5
and end date of the project and contact details of the project owner
submitted = 0
Only airline or financial institutions or eCommerce projects and experience will
be considered.
Reporting, Analytics, and Risk Measurement Capability
The bidder must demonstrate the ability to deliver measurable outcomes through
dashboards, vulnerability and threat analytics, risk scoring, security posture
measurement, and executive-level reporting.
10%
⎯ Sample reports or dashboards must be provided as evidence.
of 11
Total 100%
Threshold 75%
Bidders must note that the minimum qualifying score for Functionality is 75%. All tenders
that do not comply with all the Mandatory Requirements for Functionality and that fail to
achieve the minimum qualifying score of 75% on services shall not be considered for
further evaluation against Price and B-BBEE.
Phase 3 – Pricing and Specific Goals assessment
All bid submissions that meet the Administrative, Substantive (Mandatory), and technical
requirements (minimum threshold of 75%) and have confirmed their commitment to
SAA’s commission structure will be further evaluated under Specific Goals (20 points) to
determine if they meet the preferential procurement objectives outlined for this tender.
These specific goals have been set as follows:
Selected Specific Goal Number of points allocated
(20)
B-BBEE Level 1 and 2 10
(Non-Compliant and/or B-BBEE Level 3-8 contributors = 0)
Bidders that are 30% or more, black women owned 10
Total Points for Specific Goals 20
Bidders should be aware that preference points will be awarded to those who provide
evidence according to the table below:
Specific Goals Acceptable Evidence
B-BBEE Certificate / Sworn- Affidavit / B-BBEE CIPC
Certificate (in case of JV, a consolidated scorecard will
Pricing Schedule
Source: RFQ GSM063-2026 - Request for Quotation for network penetration service (Internal & External),and ongoing active watch on hacking exploits that are applicable for South African Airways.pdf (RFQ)dashboards, vulnerability and threat analytics, risk scoring, security posture
measurement, and executive-level reporting.
10%
⎯ Sample reports or dashboards must be provided as evidence.
of 11
Total 100%
Threshold 75%
Bidders must note that the minimum qualifying score for Functionality is 75%. All tenders
that do not comply with all the Mandatory Requirements for Functionality and that fail to
achieve the minimum qualifying score of 75% on services shall not be considered for
further evaluation against Price and B-BBEE.
Phase 3 – Pricing and Specific Goals assessment
All bid submissions that meet the Administrative, Substantive (Mandatory), and technical
requirements (minimum threshold of 75%) and have confirmed their commitment to
SAA’s commission structure will be further evaluated under Specific Goals (20 points) to
determine if they meet the preferential procurement objectives outlined for this tender.
4.1 All prices provided must be exclusive of Value Added Tax (VAT).
4.2 All goods/services purchased will be subject to the SAA Conditions of Contract and Order,
which are available upon request.
4.3 All prices submitted must be firm. “Firm” prices are deemed fixed and are only subject to
the following statutory changes: VAT.
4.4 Service, pricing, and availability will be taken into consideration.
4.5 Pricing should be given based on an individual component that would make up the
solution, based on technical and functional requirements.
Compliance Requirements
Source: RFQ GSM063-2026 - Request for Quotation for network penetration service (Internal & External),and ongoing active watch on hacking exploits that are applicable for South African Airways.pdf (RFQ)Minimum functionality/qualifying score: 75%
minimum qualifying score of 75%
valid Tax Clearance Certificate as soon as the certificate's validity expires
valid Tax Clearance Certificate, an Original Tax Clearance Certificate must be submitted
statements of compliance. Failure to do so will result in bid disqualification.
interpret the bidder as non-compliant, leading to bid disqualification.
➢ The Vendor is responsible for ensuring that SAA has a valid Original Tax Clearance
a valid Tax Clearance Certificate, an Original Tax Clearance Certificate must be submitted
B-BBEE Details: be accepted) as per DTIC (Department of Trade,
Industry and Competition) guideline
Bidders that are 30% Black
B-BBEE Certificate / Sworn-Affidavit / CIPC Certificate
Women Owned
Conditions:
4.1 All prices provided must be exclusive of Value Added Tax (VAT).
4.2 All goods/services purchased will be subject to the SAA Conditions of Contract and Order,
which are available upon request.
4.3 All prices submitted must be firm. “Firm” prices are deemed fixed and are only subject to
the following statutory changes: VAT.
4.4 Service, pricing, and availability will be taken into consideration.
4.5 Pricing should be given based on an individual component that would make up the
solution, based on technical and functional requirements.
The following must accompany your quote
of 11
SAA Vendor application and supporting documents. Refer to Annexure 1.
SBD 4 Document. Refer to Annexure 2.
General Conditions of Contract. Refer to Annexure 3
If not quoting, indicate so and return email to the relevant procurement
Official
of 11
B-BBEE Requirements
Source: RFQ GSM063-2026 - Request for Quotation for network penetration service (Internal & External),and ongoing active watch on hacking exploits that are applicable for South African Airways.pdf (RFQ)Phase 3 – Pricing and Specific Goals assessment: All bid submissions that meet the Administrative, Substantive (Mandatory), and technical requirements (minimum threshold of 75%) and have confirmed their commitment to SAA’s commission structure will be further evaluated under Specific Goals (20 points) to determine if they meet the preferential procurement objectives outlined for this tender. These specific goals have been set as follows: Selected Specific Goal Number of points allocated (20): B-BBEE Level 1 and 2 10 (Non-Compliant and/or B-BBEE Level 3-8 contributors = 0); Bidders that are 30% or more, black women owned 10; Total Points for Specific Goals 20. Bidders should be aware that preference points will be awarded to those who provide evidence according to the table below: Specific Goals Acceptable Evidence: B-BBEE Certificate / Sworn- Affidavit / B-BBEE CIPC Certificate (in case of JV, a consolidated scorecard will be accepted) as per DTIC (Department of Trade, Industry and Competition) guideline; Bidders that are 30% Black Women Owned: B-BBEE Certificate / Sworn-Affidavit / CIPC Certificate.
Health & Safety
Source: RFQ GSM063-2026 - Request for Quotation for network penetration service (Internal & External),and ongoing active watch on hacking exploits that are applicable for South African Airways.pdf (RFQ)➢ I further certify that all the required information has been furnished, and the relevant forms
have been completed and are herewith submitted as part of the bid.
Signature of vendor: ____________________________
Capacity: _______________________________
RFQ number GSM063/26
SAA Business Unit: Global Supply Management
of 11
1.1. Service providers are requested to provide prices with their quotation to SAA for all
the services to be provided as per the specifications. Service providers are expected
to submit a cost that is fair and reasonable.
1.2. SAA has the right to negotiate with a prospective Service Provider regarding any
proposed contract terms and conditions, including price(s).
Special Conditions
Source: RFQ GSM063-2026 - Request for Quotation for network penetration service (Internal & External),and ongoing active watch on hacking exploits that are applicable for South African Airways.pdf (RFQ)All goods or services purchased will be subject to the SAA General Conditions of Contract. The Vendor is responsible for ensuring that SAA has a valid Original Tax Clearance Certificate. The onus, therefore, rests on the vendor to ensure SAA receives a valid Tax Clearance Certificate as soon as the certificate's validity expires. Where SAA does not have a valid Tax Clearance Certificate, an Original Tax Clearance Certificate must be submitted with this RFQ. Failure to do so may invalidate the quote submitted in terms of the RFQ. All purchases will be made through an official purchase order. Therefore, no goods or services must be delivered before receiving an official order/contract.
Requirements
Source: RFQ GSM063-2026 - Request for Quotation for network penetration service (Internal & External),and ongoing active watch on hacking exploits that are applicable for South African Airways.pdf (RFQ)Vendors must submit quotations before the specified closing date and time. If the quotation is late, it will not be considered. South African Airways requests your quotation for the goods and/or services listed on the attached form. Please include all requested information and submit your quote by the specified deadline. Late or incomplete submissions will invalidate the quote, and the bidder will be automatically disqualified.
Section
Source: RFQ GSM063-2026 - Request for Quotation for network penetration service (Internal & External),and ongoing active watch on hacking exploits that are applicable for South African Airways.pdf (RFQ)All bidders who do not submit all required returnable documents (Critical Criteria) will be disqualified from further evaluation. All tenders that do not comply with all Mandatory Requirements for Functionality and fail to achieve the minimum qualifying score of 75% on services shall not be considered for further evaluation against Price and B-BBEE.
Contact Information
Source: Annexure 1 - Vendor application Local.pdf (unknown){"name":"Phone: Cellular","email":"[email protected]","phone":null,"department":null,"address":"TO [email protected]"}
Returnable Documents
Source: Annexure 1 - Vendor application Local.pdf (unknown)Completed vendor application form with supporting documents to be emailed to [email protected]. Required documentation includes cancelled cheque or stamped bank confirmation letter not older than one year, latest valid B-BBEE certificate or affidavit, latest valid tax clearance certificate or SARS pin on official SARS documentation, and CSD registration report.
Evaluation Criteria
Source: Annexure 1 - Vendor application Local.pdf (unknown)The evaluation criteria are not detailed in the provided document. The vendor application form collects B-BBEE details and enterprise development information, which may be used for evaluation, but no specific scoring or weighting is provided.
Technical Specifications
Source: Annexure 1 - Vendor application Local.pdf (unknown)The technical specifications for the network penetration service are not included in the provided document. The document only contains the vendor application form. The tender title indicates the service scope: network penetration testing (internal and external) and ongoing active watch on hacking exploits.
Pricing Schedule
Source: Annexure 1 - Vendor application Local.pdf (unknown)Payment terms: 15 days from invoice, subject to GSM approval schedule.
Financial Requirements
Source: Annexure 1 - Vendor application Local.pdf (unknown)Payment terms are indicated as 'GSM Approval Schedule Terms (15 days from invoice)' with signoff by requester and GSM/Commodity/Operational Manager. No specific financial guarantees or bond percentages are mentioned.
Compliance Requirements
Source: Annexure 1 - Vendor application Local.pdf (unknown)CSD Registration Report
B-BBEE Details: VENDOR APPLICATION FORM
Local & domestic stations. Please e-mail completed document with all the supporting
DOCUMENTS TO [email protected]
Vendor Account Number: Company Code(s):
Vendor information
Registered Name:
Trading Name:
Physical Address:
Postal Address:
Phone: E-mail: Fax:
City: Province: Postal Code:
Contact Person: Phone: Cellular:
Bank and tax detail
Name of Bank:
Branch Name / Number:
Bank Account Number:
VAT Registration Number:
Tax Clearance Certificate Number:
Tax Clearance Certificate Approved Date:
Tax Clearance Certificate Expiry Date:
B-bbee detail
B-BBEE Certificate Number:
B-BBEE Certificate Verification Date: B-BBEE Certificate Expiry Date:
Applicable Scorecard: Exempted Micro Qualifying Small General/Large
(Tick Applicable Box) Enterprice (EME): Enterprice(QSE): Supplier (GEN):
B-BBEE Status Level: Enterprise Development: Yes / No
B-BBEE Value Adding : Yes / No % Black Ownership:
% Black Women Ownership: % Black People with Disabilities:
Since when has the enterprise been in operation – Months / Years:
What is your company’s annual turnover (previous financial year):
Duly Authorised to sign for and behalf of the Enterprise / Organisation:
Name: Phone: Date:
Signature of applicant:
Designation / Capacity:
DOCUMENTATION REQUIRED Attached
Cancelled Cheque / Stamped Bank Confirmation Letter not older than one year
Latest Valid B-BBEE Certificate /affidavit
Latest Valid Clearance Certificate / SARS pin on official SARS documentation :
CSD Registration Report
AP Form – 07
Rev 10
2015/07/23
For Internal Use Only:
Checklist: Yes No
Certified Company Registration documents:
Certified Copies of identity documents of shareholders:
Certified Shareholders’ Certificates:
Cancelled Cheque / Sta
B-BBEE Requirements
Source: Annexure 1 - Vendor application Local.pdf (unknown)B-BBEE details required: certificate number, verification date, expiry date, applicable scorecard (EME, QSE, or General/Large), status level, enterprise development (yes/no), value adding (yes/no), percentage black ownership, black women ownership, black people with disabilities, years in operation, and annual turnover.
Section
Source: Annexure 1 - Vendor application Local.pdf (unknown)Contact details required: registered name, trading name, physical and postal addresses, phone, email, fax, city, province, postal code, contact person, phone, and cellular.
Submission Guidelines
Source: Annexure 2 - SBD 4.pdf (TENDER)Bidders must submit a completed quotation for network penetration service (internal and external) and ongoing active watch on hacking exploits applicable to South African Airways' environment and industry. The quotation must include all returnable documents, which include SBD 4 (Declaration of Interest) and any other forms specified in the tender pack. Bidders must maintain active CSD registration and must not consult with competitors regarding the bid. Quotations received after the closing time will be disqualified.
Evaluation Criteria
Source: Annexure 2 - SBD 4.pdf (TENDER)Cannot be employed by an organ of state; cannot have relationships with procuring institution employees; cannot have interests in related enterprises; must maintain active CSD registration; must not consult with competitors
Section
Source: Annexure 2 - SBD 4.pdfagreements or arrangements with any competitor regarding the quality,
Sets the constitutional standard for fair, equitable, transparent, competitive and cost-effective public procurement.
Relevant because this is a South African public-sector procurement opportunity.
Act 5 of 2000
Covers preferential procurement and preference-point systems used in public tenders.
Relevant because this is a South African public-sector procurement opportunity.
Act 12 of 2004
Supports anti-corruption controls and supplier integrity in procurement processes.
Relevant because this is a South African public-sector procurement opportunity.
Act 28 of 2024
Provides the national framework for public procurement across government.
Relevant because this is a South African public-sector procurement opportunity.
Act 2 of 2000
Supports access to tender records, award decisions and public-sector procurement information.
Relevant because this is a South African public-sector procurement opportunity.
Act 3 of 2000
Supports lawful, reasonable and procedurally fair administrative tender decisions.
Relevant because this is a South African public-sector procurement opportunity.
Address
32 Jones Road, Airways Park, Johannesburg (Head Office) - Kempton Park - Isando - 1627
Source confidence
High source confidence
Official source
eTenders.gov.za
Documents found
4
Last checked
11 Sept 2026
AI status
Enhanced
Data conflicts
None detected
This tender has strong source evidence, including source metadata and supporting tender information synced from the government tender portal.
Tenders SA is not the issuing authority. All tenders are automatically synced from the official government tender portal. Always confirm final submission details, closing dates, briefing sessions, eligibility requirements, and documents on the official government portal before applying.
Learn how to submit a winning bid with these related articles
Win consulting, legal, accounting, and engineering service contracts with government. Learn registration requirements and proposal strategies.
Win government insurance, banking, actuarial, and financial consulting contracts. FSCA licensing requirements and tender strategies for financial service providers.
Master the art of the consulting bid. How to structure your methodology, price your services competitively, and score maximum evaluation points.
A professional guide for law firms to join the provincial and municipal legal panels in Gauteng, covering compliance, specialization, and bidding.
💡 Want more tendering tips and strategies?
Explore Our BlogGet deep intelligence on Information service activities. Unlock full pricing strategies, bid frequency, and historical win rates.