Broad-Based Black Economic Empowerment Act (B-BBEE Act)
Act 53 of 2003
Provides the empowerment-compliance context often used in public-sector supplier evaluation.
Relevant because this is a South African public-sector procurement opportunity.
Documents available on tender detail page
Tender Type
Request for Bid(Open-Tender)
Delivery Location
7 Wale Street, - Cape Town - Cape Town - 8001
Organization Type
GOVERNMENT
Published
08 Sept 2026
OCDS Reference
ocds-9t57fa-169504
Continue with tenders sharing this issuer, category, or province.
Return to this tender’s issuing organisation, province, or category.
Continue with tenders sharing this issuer, category, or province.
Date & Time
Wednesday, 21 October 2026 - 11:00
Venue
Join: https://teams.microsoft.com/meet/35325153473357?p=LyBzS8VkACxSXYcYRe Meeting I53 251 534 733
Important: Attendance at this briefing session is mandatory. Bids from suppliers who do not attend may be disqualified.
Microsoft teams meeting join: https://teams.microsoft.com/meet/35325153473357?p=LyBzS8VkACxSXYcYRe Meeting ID: 353 251 534 733 57 passcode: fk724aw9
Categories
Request for Bid(Open-Tender)
7 Wale Street, - Cape Town - Cape Town - 8001
Tenders in this industry often require registration with these bodies.
Recommended Certifications
Having these can improve your winning chances: IITPSA Membership, ISO 27001 (Information Security Management), ISO 20000 (IT Service Management), CISSP
AI Document Analysis Stages
Important Dates
Source: 2026-08-20 WCPPT01-26 Internet and Firewall tender Bid Documents (1).pdf (TENDER)08 Sept
2026
Tender Published
Tender was published
21 Oct
2026
Closing Date
Tender closing date
These references help suppliers understand the public-procurement framework around this opportunity. They are generated from the tender category, issuing organisation type and procurement context.
These rules commonly apply to South African public-sector procurement.
Act 53 of 2003
Provides the empowerment-compliance context often used in public-sector supplier evaluation.
Relevant because this is a South African public-sector procurement opportunity.
Act 108 of 1996 (s217)
This is general procurement context, not legal advice. Always verify requirements in the official tender documents and issuing authority notices.
2026-08-20 WCPPT01-26 Internet and Firewall tender Bid Documents (1).pdf
To download these documents and access AI-powered analysis, visit the main tender page.
Matched by category & region
Free guidance to prepare before you bid
Not sure if your business is ready for this tender? Check CSD, CIDB, and B-BBEE requirements, run a readiness assessment, and move from opportunity to submission.
Open Supplier Readiness HubWe refine every tender document through these stages so you can brief your team and prepare your bid with confidence. Anything marked as "in progress" will be upgraded automatically — no action required from you.
{"closingDate":"21 October 2026","closingTime":"11:00","briefingSession":"{"date":"14 September 2026","time":"10h00","venue":"ion session as follows","is_compulsory":true}"}
Contact Information
Source: 2026-08-20 WCPPT01-26 Internet and Firewall tender Bid Documents (1).pdf (TENDER){"name":"MS Teams","email":"[email protected]","phone":null,"department":"Supply Chain Management","address":"be posted (provided that such posted bid documents reach SC&AM before the"}
Submission Guidelines
Source: 2026-08-20 WCPPT01-26 Internet and Firewall tender Bid Documents (1).pdf (TENDER)Comply with the following non-negotiable requirements, the bidders must submit bids with assurance that the
requirements below can and will be met. Failure to comply with the criteria below will mean the bid will be
deemed non responsive.
Note: Non-negotiable items in Section D of the evaluation criteria.
Condition Description
State Security Agency Clearance At the time of submitting the bid, the Bidder must have applied to
the SSA an application for security clearance to perform onsite
work at the precinct.
Submit evidence as part of the bid.
Service Readiness The Bidder must provide written confirmation that enterprise-
grade connectivity is available and can be provisioned at the
stipulated location
WCPP RFP – Managed Internet, Firewall, IDS/IPS, Public DNS and Related Services
The successful Bidder shall be responsible for conducting all site
verification activities, including infrastructure availability and
service feasibility assessments, prior to submitting the Bid.
No claims relating to unavailable infrastructure, insufficient
coverage, or site-related feasibility constraints will be accepted
after the bid submission.
Implementation dates Solution to be Deployed considering implementation dates
specified below, with contingency for Landlord and other 3rd Party
constraints.
Start Implementation by 30 April 2027 and Go live by no later than
15 June 2027 and Final DNS switch over by 25 June 2027.
Functional Requirements Integration with WCPP Sentinel SIEM.
Bidder Firewall Team response handling with the WCPP SOC Team
fully Described and aligned on a 24 x 7 x 365 basis.
12 Month Log File Retention and timeous Forensic Access when
requested by WCPP Addressed.
ICASA compliant licensed spectrum Wireless failover confirmed.
Environment Component Current Description
7 Wale Street, Cape Town
Location Longitude Latitude
WCPP RFP – Managed Internet, Firewall, IDS/IPS, Public DNS and Related Services
18.418750000000045 -33.92422
User base Approximately 150 users
Devices Fewer than 300 end-user devices including PCs,
laptops, printers, tablets and cell phones.
Remote sites No remote sites
Network Ethernet LAN/WLAN across four floors
Remote access Hybrid environment. Remote access is critical
6.1.1 Primary and Secondary Connectivity
6.1.1.1 Primary 250 Mbps Fibre connection to the provider’s closest POP in Cape Town.
6.1.1.2 Secondary Wireless: 250 Mbps licensed band wireless backup link compliant with ICASA regulations.
6.1.1.3 Implement failover: BGP and HSRP, or equivalent, to facilitate failover between primary and
secondary links in the event of router or line failure.
6.1.1.4 Provide Quality of Service on both links to ensure application priority according to WCPP’s business
requirements.
6.1.1.5 Provide fully outsourced customer edge equipment and router management to ensure reliability,
security, reachability and availability.
6.1.1.6 Provide at least 99.9% uptime for connectivity.
6.1.2 Internet Breakout
6.1.2.1 250 Mbps bandwidth.
6.1.2.2 Synchronous service with 1:1 contention required.
6.1.2.3 Uncapped Internet breakout.
6.1.2.4 No fair use policy.
6.1.2.5 No broadband allowed for the Corporate Internet breakout.
6.1.2.6 At least 99.9 % uptime.
6.1.3 Solution Architecture Compliance
Bidders must clearly state how the proposed architecture satisfies the specified bandwidth, contention,
uptime, failover, QoS and no-fair-use requirements.
7.1 Minimum Security Service Scope
WCPP RFP – Managed Internet, Firewall, IDS/IPS, Public DNS and Related Services
mitigation against known cyber threats.
and responses to incidents.
infrastructure to ensure reliability, security, reachability and availability.
7.2 Firewall Rule Management
The successful bidder must manage firewall rules in accordance with WCPP-approved change management,
security policy and authorised requests. The bidder must provide a controlled, auditable and documented
process for firewall rule creation, amendment, review and retirement.
documented in the monthly report.
7.3 Monitoring and Incident Response
The bidder must provide monitoring and response capabilities and must integrate with WCPP’s existing
Microsoft Sentinel SIEM.
WCPP RFP – Managed Internet, Firewall, IDS/IPS, Public DNS and Related Services
7.4 Firewall Vulnerability Management
Requirement Minimum Standard
Critical Vulnerabilities Remediate within 7 days
High Vulnerabilities Remediate within 14 days
Medium Vulnerabilities Remediate within 30 days
Patch Reporting Monthly
Security Advisories and Zero day As released, take action
Provide a web-based secure control panel for configuration.
Requirement Mandatory
Primary DNS Yes
Secondary DNS Outside Western Cape Region
DNS Redundancy Yes
DNSSEC Required
DDoS Protection Required
Secure Management Portal /Control Panel Required with MFA and management by WCPP admin staff.
Availability 99.9%
Real-Time Monitoring Required
Bidders must explain how DNS continuity will be maintained if the Cape Town environment or Provincial
Internet service is unavailable.
9.1 Account Management
implementation and service operations.
WCPP RFP – Managed Internet, Firewall, IDS/IPS, Public DNS and Related Services
9.2 Monthly Report Pack
The bidder must provide a monthly report pack
Section Minimum Information Required
Executive summary Overall service status, key issues, risks and decisions required.
Incidents Incident volumes, priority 1 and 2 details, root cause analysis
status and breached tickets.
Service requests Requests received, completed, open and carried over by
category. Breached tickets
Security incidents Security events, incidents, mitigations, bad actors and
responses. Breached tickets
Changes Service improvements, ownership and target dates.
IDS/IPS Summary of IPS and IDS activity and trends.
Firewall rules Rule changes, quarterly rule review status and exceptions.
Backup evidence Configuration and ruleset backup evidence.
Vulnerability/Risk Posture, Remediations , Risk Assessment and Statuses
Lifecycle OS lifecycle.
9.3 Monthly Service Review Meetings
performance, service risks, continuous improvement and corrective actions.
criteria.
parallel and go live decisions.
WCPP RFP – Managed Internet, Firewall, IDS/IPS, Public DNS and Related Services
10.1 Minimum Project Phases
Phase Minimum Expected Deliverables
Phase 1: Initiation and Discovery Kick-off meeting; confirmation of scope; validation of current
environment; risk register; implementation governance
structure.
Phase 2: Design and Planning High-level and low-level design; implementation schedule;
change plan; rollback approach; test plan.
Phase 3: Implementation and Migration Provisioning of connectivity, firewall, IDS/IPS, DNS and
monitoring integration; configuration backups; service desk
readiness.
Phase 4: Testing, Handover and Failover testing; security monitoring validation; reporting pack;
Stabilisation operational handover; acceptance sign-off.
Bidders must provide an incident response priority matrix that consider outages and security incidents.
Priority Description Response Time Resolution Time
P1 Critical Security breach or service outage 15 Minutes 4 Hours
P2 High Major degradation 30 Minutes 8 Hours
P3 Medium Partial impact 2 Hours 24 Hours
P4 Low Service request 8 Hours 5 Business Days
11.1 SLA Measurement Clarifications
availability calculations.
outages.
WCPP RFP – Managed Internet, Firewall, IDS/IPS, Public DNS and Related Services
12.1 Critical Infrastructure Protection Act
It is expected of the bidder to have or to have obtained, taking application timeframes into account, State
Security Agency clearance to be able to work at a site declared as critical infrastructure in terms of the Critical
Infrastructure Protection Act, Act .
The bidder must provide evidence of existing clearance or at the time of submitting the bid, the Bidder must
have submitted to the SSA an application for security clearance to perform onsite work at the precinct.
12.2 Security Governance
reporting capabilities.
security support.
Bidders must respond clearly and comprehensively to every requirement. Responses must include page
references where indicated in the compliance schedules. Generic marketing material will not be sufficient unless
it clearly demonstrates compliance with a specific requirement. It is recommended that bidders consult the
evaluation criteria (Section 16) to ensure their bids are compliant and assist them with self-scoring of the bid.
Response Area Required Bidder Submission
Executive summary Overview of the bidder’s proposed solution and service model.
Technical architecture Description of proposed Internet, connectivity, firewall, IDS/IPS, DNS,
monitoring and failover architecture.
Compliant response Completed compliance tables sections 14 and 18, with page
references.
Security services Description of NIST-aligned firewall and monitoring services and
interfacing with the WCPP SOC Team
Sentinel integration Explanation of how the service will integrate with WCPP Microsoft
Sentinel SIEM.
Service management Proposed account manager, escalation model, reporting pack and
meeting cadence.
WCPP RFP – Managed Internet, Firewall, IDS/IPS, Public DNS and Related Services
Project management Project manager CV summary, project plan, methodology, milestones
and risk approach.
References Written signed reference letters on official letterhead for similar
services.
SLA and MSA SLA and alignment to the proposed WCPP MSA and SLA
Critical infrastructure Evidence of SSA clearance or submission for SSA clearance to work at
the Precinct (Critical Infrastructure Precinct).
The bidder must complete the tables below by indicating the page reference in the proposal where the bidder
confirms that it will meet the specified deliverable.
14.1 Connectivity / WAN IAAS Compliance
Item Description Bidder Page Ref
14.1.1 Primary Fibre: 250 Mbps Fibre connection to the provider’s
closest POP.
14.1.2 Secondary Wireless: 250 Mbps wireless backup link compliant
with ICASA regulations.
14.1.3 Implement BGP and HSRP protocols, or equivalent, to facilitate
failover between primary and secondary links in case of router
or line failure, inbound and outbound.
14.1.4 Quality of Service on both links to ensure application priority
according to WCPP’s business requirements.
14.1.5 At least 99.9% uptime.
14.1.6 Fully outsourced customer edge equipment and router
management; management of router infrastructure to ensure
reliability, security, reachability and availability.
14.1.7 No fair usage policy.
14.2 Internet Services Compliance
Item Description Bidder Page Ref
14.2.1 Uncapped Internet breakout.
14.2.2 250 Mbps bandwidth.
WCPP RFP – Managed Internet, Firewall, IDS/IPS, Public DNS and Related Services
14.2.3 Synchronous contention required 1:1.
14.2.4 At least 99.9% uptime.
14.2.5 No fair use policy.
14.2.6 No broadband.
14.2.7 Wireless Failover
14.3 Managed Firewall, IDS/IPS IAAS Compliance
Item Description Bidder Page Ref
14.3.1 Implement rules as per WCPP security policy and compliance with
industry best practices and mitigation against known cyber threats.
14.3.2 Performance and availability management.
14.3.3 Real-time threat response with WCPP SOC Team
14.3.4 On-demand security and compliance reporting.
14.3.5 Expert support and management of firewall infrastructure to ensure
reliability, security, reachability and availability.
14.3.6 At least 99.9% uptime.
14.3.7 Change management.
14.3.8 Backup and recovery.
14.3.9 Services compliant with NIST functions.
14.3.10 Evidence of real-time operational monitoring.
14.3.11 Quarterly security management reports detailing sources of threats,
bad actors, mitigations and responses.
14.3.12 Root cause analysis report relating to all incidents within three days
of the event.
14.3.13 Integration with existing WCPP Microsoft Sentinel SIEM.
14.3.14 WCPP SOC team must be able to monitor independently.
14.3.15 Administrative and security logs retained for at least 12 months.
14.3.16 PAM to monitor administrator activities.
WCPP RFP – Managed Internet, Firewall, IDS/IPS, Public DNS and Related Services
14.3.17 Firewall vulnerability management as a managed service.
14.3.18 Patch, bug, release and configuration management.
14.3.19 ITIL-compliant change management policy.
14.3.20 Review of firewall rules four times per year according to agreed
specific dates.
14.3.21 Monthly evidence of configuration and ruleset backups.
14.3.23 Draft incident response policy.
14.4 Public DNS SAAS Compliance
Item Description Bidder Page Ref
14.4.1 Primary DNS server.
14.4.2 Secondary DNS server hosted outside the core Cape Town
environment to ensure continuity of name resolution in case of local
disaster or provincial Internet outage.
14.4.3 DNSEC required
14.4.4 DDoS
14.4.5 At least 99.9% uptime.
14.4.6 Web-based secure control panel for configuration.
14.4.7 Mfa
No. Checklist Item Compliant? Page Ref
Yes / No
15.1 Proposal includes executive summary.
15.2 Proposal includes completed compliance schedules.
15.3 Proposal includes technical architecture.
15.4 Proposal confirms 36-month managed service offering and
go live date.
WCPP RFP – Managed Internet, Firewall, IDS/IPS, Public DNS and Related Services
15.5 Proposal addresses Bandwidth and Contention
15.6 Proposal addresses primary fibre and secondary wireless
connectivity.
15.7 Proposal addresses BGP / HSRP or equivalent failover.
15.8 Proposal addresses QoS.
15.9 Proposal confirms no fair usage policy where specified.
15.10 Proposal addresses Managed Firewall and IDS/IPS
requirements.
15.11 Proposal addresses NIST Identify, Protect, Detect, Respond
and Recover functions.
15.12 Proposal addresses Microsoft Sentinel SIEM integration.
15.13 Proposal addresses PAM
15.14 Proposal addresses 12-month log retention.
15.15 Proposal addresses vulnerability, patch, bug, release and
configuration management.
15.16 Proposal addresses ITIL-compliant change management.
15.17 Proposal includes rule review approach four times per year.
15.18 Proposal includes backup and recovery evidence approach.
15.19 Proposal includes Public DNS requirements.
15.20 Proposal includes dedicated project manager and project
plan.
15.21 Proposal includes key account manager and summarised
Cv.
15.22 Proposal includes monthly report pack approach.
15.23 Proposal includes completed SLA matrix.
15.24 Proposal includes signed reference letters on official client
letterhead.
15.25 Proposal addresses Critical Infrastructure Protection Act /
SSA clearance requirement.
WCPP RFP – Managed Internet, Firewall, IDS/IPS, Public DNS and Related Services
Evaluation Criteria
Source: 2026-08-20 WCPPT01-26 Internet and Firewall tender Bid Documents (1).pdf (TENDER)7.1 Bidder(s) must comply with the following minimum bidding criteria:
a) Completion of WCPP 3.3 Pricing schedule and costing template (Annexure A);
b) Completion in full WCPP 4 Declaration of interest form. This form must be certified by a Commissioner
of Oaths. In the case of Joint Ventures and Consortia the respective parties must submit in full the WCPP
4 Declaration of interest form;
c) Where applicable (Joint Ventures and Consortia) submission of a duly signed Memorandum of
Understanding detailing the roles and responsibilities. In such cases all the parties must provide valid,
original tax clearance certificates (and or pins in respect thereof); and
d) In terms of regulation 8 of the Preferential Procurement Regulation (pending on threshold value) the
80/20 preference point system will be utilized (See Preference points claim form in terms of the
Preferential Procurement Regulations 2022- WCPP 6.1).
e) Preference form must form part of all bids/tenders invited. It contains general information and serves
as a claim form for Historically Disadvantaged Individual (HDI) preference points as well as a summary
for preference points claimed for attainment of other specified goals;
All prices must be quoted in ZAR and be VAT inclusive.
Appendix 1
Previous experience
(Bid Conditions: Paragraph 4)
Name of company Name of contact person Contact telephone number
Signed: ____________________
(for the bidder)
Date: ____________________
** Full score of 20 is required in section d
*** If the section d score is below 20 then cancel the bid
Criteria Evidence Required Full Bidder Page Ref
Points
Or Zero
Section a
A1 Less than 5 years 1
5 –10 years 3 Company
Experience 10 -15 years 5
More than 15 years 8
A2 Public Sector Three or more similar Public Sector
Experience Projects
A3 Current valid certification or audited
evidence of:
Security
Certification SOC 1 and SOC 2 compliance
Or ISO 27001 certified
A4 Current valid certification Quality
Certification ISO 9001 Certified
Subtotal Max 15
Section b
B1 Relevant network/security certification -
Technical Lead
any one (CCIE, CCNP, NSE, PCNSE or 1
Technical Specifications
Source: 2026-08-20 WCPPT01-26 Internet and Firewall tender Bid Documents (1).pdf (TENDER)A. Tender definitions
a) “Contract” means the agreement that results from acceptance of a proposal.
b) “Provincial Parliament” shall mean the Western Cape Provincial Parliament (WCPP).
c) “Secretary” shall mean the Secretary to the Provincial Parliament.
d) “Speaker” shall mean the Speaker of the Provincial Parliament.
e) Words importing the singular shall include the plural and vice versa and words importing the
masculine gender shall include females and words importing persons shall include partnerships
and bodies corporate.
f) Where in this document, reference is made to “the prior written approval of the Provincial
Parliament be obtained” or words having a similar meaning, reference to the Provincial Parliament
shall include reference to the Speaker or Secretary as the case may be.
B. Tender conditions
The tenders will be evaluated by the Bid Evaluation Committee and adjudicated by the Bid Adjudication
Committees of the Western Cape Provincial Parliament taking into account terms and conditions of the
tender and those set out in the Preference Certificate (In line with the PPPFA Regulations of 2022).
2.1 A compulsory information session as follows:
Date : 14 September 2026
Time : 10h00
Venue : MS TEAMS
Name of Contact Person: Messrs. N Diedericks or R Williams
Telephone No. : (021) 487-1736 and 487-1619
2.2 The Western Cape Provincial Parliament will make use of this opportunity to discuss the general
approach/benefits, which it wants to achieve through the contract for this service.
Prospective tenderers are therefore urged to ensure their attendance thereof.
Furthermore, the Western Cape Provincial Parliament will not accept any liability/responsibility to
provide any information discussed at this information session to a prospective tenderer who failed to
attend the said meeting.
Payment terms
The WCPP undertakes to pay valid tax invoices in full within thirty (30) days from statement date for services
rendered;
All supporting documents for services rendered should be submitted together with the tax invoices; and Valid
Tax Invoices for all services rendered are to be submitted to the Office of the Chief Financial Officer at the WCPP’s
Finance Section at the address on above.
Glossary
Term Definition
Availability The percentage of time that a service is operational and accessible to
users within the agreed service period.
Administrative Logs Records capturing activities performed by administrators on systems,
security devices, and management platforms.
BGP (Border Gateway Protocol) A routing protocol used to exchange routing information between
networks and support Internet and WAN failover.
Bandwidth The maximum data transfer capacity of a network connection, measured
in Megabits per second (Mbps).
Backup Link A secondary connectivity service that automatically or manually takes
over if the primary connection fails.
Bidder An organisation submitting a proposal in response to this Request for
Proposal (RFP).
Business Continuity The capability of an organisation to continue critical operations during and
after a disruption.
Change Management A controlled process for requesting, approving, implementing, testing and
reviewing changes to services and infrastructure.
Configuration Management The process of maintaining information about hardware, software,
settings and configurations to ensure accuracy and control.
Contention Ratio The ratio of users sharing available bandwidth. A 1:1 contention ratio
indicates fully dedicated bandwidth.
Critical Infrastructure Protection South African legislation regulating the protection and security of
Act designated critical infrastructure facilities.
Customer Edge Equipment (CE) Network devices such as routers installed at the customer site that
connect to the service provider network.
Data Exfiltration The unauthorised transfer or theft of data from an information system or
network.
DDoS (Distributed Denial of A cyberattack intended to disrupt services by overwhelming systems or
Service) networks with excessive traffic.
WCPP RFP – Managed Internet, Firewall, IDS/IPS, Public DNS and Related Services
DNS (Domain Name System) A service that translates domain names into IP addresses used by network
devices.
DNS Continuity The ability of DNS services to continue operating during failures, disasters
or connectivity interruptions.
DNS Redundancy The use of multiple DNS servers to ensure continuous name resolution
should one server fail.
DNSSEC (Domain Name System Security extensions that protect DNS records from tampering and
Security Extensions) spoofing.
Escalation Process A documented procedure for increasing the priority or management
attention of unresolved incidents or service issues.
Ethernet LAN A wired local area network based on Ethernet standards.
Failover Automatic or manual switching from a failed component or service to an
alternate operational component or service.
Fair Use Policy (FUP) Usage restrictions imposed by service providers on bandwidth
consumption. The RFP requires no Fair Use Policy.
Fibre Connectivity High-speed network connectivity provided over optical fibre
infrastructure.
Firewall A security device or service that monitors, filters and controls network
traffic according to defined security rules.
Firewall Rule A configuration setting that permits, denies or controls network traffic
based on predefined criteria.
Go-Live The date upon which the implemented solution becomes operational in
the production environment.
High Availability (HA) A design approach aimed at minimising downtime through resilient
architecture and redundancy.
HSRP (Hot Standby Router A Cisco protocol that provides router redundancy and gateway failover
Protocol) capabilities.
Hybrid Environment An environment where users access systems from both on-site and
remote locations.
ICASA The Independent Communications Authority of South Africa, responsible
for regulating telecommunications and wireless services.
WCPP RFP – Managed Internet, Firewall, IDS/IPS, Public DNS and Related Services
Incident An unplanned interruption, degradation or security event affecting service
delivery.
Incident Response The structured process used to identify, contain, investigate, eradicate
and recover from security incidents.
Internet Breakout The point where an organisation's network traffic exits to the public
Internet.
IPS (Intrusion Prevention A security capability that detects and actively blocks malicious network
System) activity.
IDS (Intrusion Detection System) A security capability that monitors and identifies suspicious or malicious
activity.
ITIL (Information Technology A globally recognised framework for IT service management best
Infrastructure Library) practices.
LAN (Local Area Network) A network connecting devices within a limited physical location such as a
building.
Log Retention The practice of storing log records for a specified period for compliance,
auditing and forensic purposes.
Managed Service A service where operational management responsibilities are assigned to
a third-party provider.
Master Service Agreement A contractual agreement governing the overall commercial and
(MSA) operational relationship between parties.
MFA (Multi-Factor An authentication method requiring two or more independent verification
Authentication) factors.
Monitoring Continuous observation and analysis of systems, infrastructure and
services to detect issues and maintain performance.
NIST Cybersecurity Framework A cybersecurity framework consisting of the functions Identify, Protect,
Detect, Respond and Recover.
NIST Functions The five cybersecurity lifecycle functions of Identify, Protect, Detect,
Respond and Recover.
POP (Point of Presence) A service provider location where customer connectivity is established
with the provider network.
PAM (Privileged Access Security controls used to manage and monitor privileged user and
Management) administrator activities.
WCPP RFP – Managed Internet, Firewall, IDS/IPS, Public DNS and Related Services
Patch Management The process of deploying software updates to resolve vulnerabilities and
improve security and performance.
Priority Matrix A classification mechanism used to assign response and resolution targets
based on incident severity.
Project Manager The individual responsible for planning, coordinating, managing and
reporting on project implementation activities.
QoS (Quality of Service) Network traffic management mechanisms that prioritise important
applications and services.
Recovery Actions taken to restore services and operations following a disruption or
incident.
Release Management The controlled planning, testing and deployment of software or
infrastructure updates into production environments.
Remediation Corrective actions implemented to address vulnerabilities, incidents or
identified risks.
Resiliency The ability of systems and services to withstand, recover from and
continue operating during disruptions.
Root Cause Analysis (RCA) A structured investigation conducted to determine the underlying cause
of an incident or problem.
Router A network device that directs traffic between networks.
Security Incident An event that compromises or threatens the confidentiality, integrity or
availability of information systems.
Security Operations Centre (SOC) A team or function responsible for monitoring, detecting, investigating
and responding to cybersecurity events.
Service Desk The primary point of contact for users requesting support or reporting
incidents.
Service Level Agreement (SLA) A documented agreement defining measurable service standards,
response times and performance commitments.
Service Request A user request for information, access, assistance or a standard service
action that is not an incident.
SIEM (Security Information and A security platform that collects, correlates and analyses security events
Event Management) from multiple sources.
WCPP RFP – Managed Internet, Firewall, IDS/IPS, Public DNS and Related Services
SOC 1 An independent assurance report evaluating controls relevant to financial
reporting.
SOC 2 An independent assurance report evaluating controls relating to security,
availability, processing integrity, confidentiality and privacy.
State Security Agency (SSA) Security vetting and clearance required for personnel accessing
Clearance designated critical infrastructure environments.
Threat Actor An individual, group or entity responsible for malicious or unauthorised
cyber activities.
Uptime The percentage of time a service remains operational and available during
a reporting period.
Vulnerability A weakness that may be exploited to compromise confidentiality, integrity
or availability.
Vulnerability Management The ongoing identification, assessment, prioritisation, remediation and
reporting of vulnerabilities.
WAN (Wide Area Network) A network connecting geographically separated facilities or service
provider infrastructure.
WLAN (Wireless Local Area A wireless network providing connectivity within a local area.
Network)
WCPP Western Cape Provincial Parliament.
The Western Cape Provincial Parliament (WCPP) is one of the nine provincial legislatures in South Africa. It is
based in Cape Town and is constitutionally mandated to pass legislation, provide a forum for public debate,
involve the public in the law-making process, and oversee the activities of the provincial executive.
The WCPP consists of 42 Members elected every five years on a proportional representation system. The
Premier and members of the provincial Cabinet are appointed from these Members. The primary functions of
Provincial Parliaments include law-making, holding the Executive to account and facilitating public involvement
in parliamentary processes and work.
The key focus of the administration of the WCPP is to support Parliamentary Members, the House and
Committees to fulfil their constitutional functions. The support functions consist of the Directorate: Public
Engagement (PE), Directorate: Parliamentary Support Services (PSS), Directorate: Institutional Enablement (IE),
Directorate: Strategy & Institutional Oversight (SIO) and Directorate: Financial Management (FM). The
administration employs just over 100 staff members to provide these support functions.
WCPP RFP – Managed Internet, Firewall, IDS/IPS, Public DNS and Related Services
The purpose of this RFP is to describe the terms of reference for WCPP’s infrastructure requirements with
respect to connectivity, Internet bandwidth, managed firewall, Public DNS and related service management
requirements.
Recover.
technical team and detailed project plan.
framework.
Methodology
Source: 2026-08-20 WCPPT01-26 Internet and Firewall tender Bid Documents (1).pdf2.1 A compulsory information session as follows:
Date : 14 September 2026
Time : 10h00
Venue : MS TEAMS
Name of Contact Person: Messrs. N Diedericks or R Williams
Telephone No. : (021) 487-1736 and 487-1619
2.2 The Western Cape Provincial Parliament will make use of this opportunity to discuss the general
approach/benefits, which it wants to achieve through the contract for this service.
the production environment.
High Availability (HA) A design approach aimed at minimising downtime through resilient
architecture and redundancy.
HSRP (Hot Standby Router A Cisco protocol that provides router redundancy and gateway failover
Protocol) capabilities.
criteria.
parallel and go live decisions.
WCPP RFP – Managed Internet, Firewall, IDS/IPS, Public DNS and Related Services
10.1 Minimum Project Phases
15.1 Proposal includes executive summary.
15.2 Proposal includes completed compliance schedules.
15.3 Proposal includes technical architecture.
15.4 Proposal confirms 36-month managed service offering and
go live date.
WCPP RFP – Managed Internet, Firewall, IDS/IPS, Public DNS and Related Services
15.5 Proposal addresses Bandwidth and Contention
15.6 Proposal addresses primary fibre and secondary wireless
connectivity.
15.7 Proposal addresses BGP / HSRP or equivalent failover.
15.8 Proposal addresses QoS.
15.9 Proposal confirms no fair usage policy where specified.
15.10 Proposal addresses Managed Firewall and IDS/IPS
requirements.
15.11 Proposal addresses NIST Identify, Protect, Detect, Respond
and Recover functions.
15.12 Proposal addresses Microsoft Sentinel SIEM integration.
15.13 Proposal addresses PAM
15.14 Proposal addresses 12-month log retention.
15.15 Proposal addresses vulnerability, patch, bug, release and
configuration management.
15.16 Proposal addresses ITIL-compliant change management.
15.17 Proposal includes rule review approach four times per year.
15.18 Proposal includes backup and recovery evidence approach.
15.19 Proposal includes Public DNS requirements.
15.20 Proposal includes dedicated project manager and project
plan.
15.21 Proposal includes key account manager and summarised
Cv.
15.22 Proposal includes monthly report pack approach.
15.23 Proposal includes completed SLA matrix.
15.24 Proposal includes signed reference letters on official client
letterhead.
15.25 Proposal addresses Critical Infrastructure Protection Act /
PRINCE2, PMBOK, PMP certification)
C2 Detailed project schedule submitted 1
C3 Project Plan Milestones defined 1
C4 Project Methodology 1
Subtotal Max 5
Experience & Qualifications
Source: 2026-08-20 WCPPT01-26 Internet and Firewall tender Bid Documents (1).pdfA1 Less than 5 years 1
5 –10 years 3 Company
Experience 10 -15 years 5
More than 15 years 8
A2 Public Sector Three or more similar Public Sector
any one (CCIE, CCNP, NSE, PCNSE or 1
Qualification
equivalent)
B2 Minimum 5 years experience managing Technical Lead
1 similar environments Experience
B3 DNS specialist identified 1 Support Team
Capability B4 Security/firewall specialist identified 1
WCPP RFP – Managed Internet, Firewall, IDS/IPS, Public DNS and Related Services
B5 Service management/account
management resource identified
Subtotal Max 5
Quality Management
Source: 2026-08-20 WCPPT01-26 Internet and Firewall tender Bid Documents (1).pdfavailable for public inspection at the closing date and time of closure.
7.1 Bidder(s) must comply with the following minimum bidding criteria:
a) Completion of WCPP 3.3 Pricing schedule and costing template (Annexure A);
b) Completion in full WCPP 4 Declaration of interest form. This form must be certified by a Commissioner
of Oaths. In the case of Joint Ventures and Consortia the respective parties must submit in full the WCPP
4 Declaration of interest form;
c) Where applicable (Joint Ventures and Consortia) submission of a duly signed Memorandum of
9.3 Monthly Service Review Meetings
performance, service risks, continuous improvement and corrective actions.
Phase 1: Initiation and Discovery Kick-off meeting; confirmation of scope; validation of current
environment; risk register; implementation governance
structure.
Phase 2: Design and Planning High-level and low-level design; implementation schedule;
change plan; rollback approach; test plan.
Phase 3: Implementation and Migration Provisioning of connectivity, firewall, IDS/IPS, DNS and
monitoring integration; configuration backups; service desk
readiness.
Phase 4: Testing, Handover and Failover testing; security monitoring validation; reporting pack;
Stabilisation operational handover; acceptance sign-off.
Certification SOC 1 and SOC 2 compliance
Or ISO 27001 certified
A4 Current valid certification Quality
Certification ISO 9001 Certified
Subtotal Max 15
Pricing Schedule
Source: 2026-08-20 WCPPT01-26 Internet and Firewall tender Bid Documents (1).pdf2 Invitation to bid (WCPP 1)
3 – 5 Bid Checklist
6 - 11 Bid conditions
12 - 32 Terms of reference
33 - 34 Application for Tax Clearance Certificate (WCPP 2)
35 Pricing schedule (WCPP 3.3)
36- 43 Declaration of Interest (WCPP 4)
44 - 50 Preference Points Claim Form in terms of the Preferential Procurement Regulations 2022 (WCPP 6.1)
51– 62 General conditions of contract (GCC)
Wcpp 1
Completed in full WCPP 3.3 Pricing Schedule and Costing template. WCPP 3.3
Please provide a tick () in this instance. In the event of Yes/no option
throughout this document please circle to select the appropriate option.
Completed and signed WCPP 1 The Bid WCPP 1
Valid and original SARS Tax Clearance Certificate (and or pin) in the name of
WCPP 2the bidders which will be verified for compliance.
Wcpp 3.3
Completed WCPP 3.3 Pricing Schedule and Costing template. and
Mandatory documents as required;
Detailed price schedule which will include VAT @ 15%;
Contactable references (at least 3);
electronic copy (flash drive)
4.1 Bidders must complete and submit the following Bid documents:
references where indicated in the compliance schedules. Generic marketing material will not be sufficient unless
it clearly demonstrates compliance with a specific requirement. It is recommended that bidders consult the
evaluation criteria (Section 16) to ensure their bids are compliant and assist them with self-scoring of the bid.
Compliance Requirements
Source: 2026-08-20 WCPPT01-26 Internet and Firewall tender Bid Documents (1).pdf (TENDER)equivalent) B2 Minimum 5 years experience managing Technical Lead 1 similar environments Experience B3 DNS specialist identified 1 Support Team Capability B4 Security/firewall specialist identified 1 WCPP RFP – Managed Internet, Firewall, IDS/IPS, Public DNS and Related Services B5 Service management/account management resource identified Subtotal Max 5 SECTION C C1 Qualified Project Manager identified Project aligned to any practice standard (copy of 2 Management PRINCE2, PMBOK, PMP certification) C2 Detailed project schedule submitted 1 C3 Project Plan Milestones defined 1 C4 Project Methodology 1 Subtotal Max 5 SECTION D D1 SPECIAL SSA Clearance or Submission to SSA for CONDITIONS clearance. D2 Non- Fibre infrastructure and service availability Negotiable confirmed at WCPP site. Criteria D3 ICASA compliant Wireless failover availability confirmed in the licensed band. D4 Commitment to the required implementation and go live dates D5 Bidder Firewall Team Response Handling Process and integration with the WCPP SOC Team fully Described and aligned on a 24 x 7 x 365 basis. D6 12 Month Log File Retention and timeous Forensic Access when requested by WCPP 2 Addressed. D7 WCPP SIEM: Technical integration with Sentinel. Subtotal Max 20 SECTION E WCPP RFP – Managed Internet, Firewall, IDS/IPS, Public DNS and Related Services
B-BBEE Details: INDEX TABLE
Proposal: wcppt 01/2026
Page NO. description
2 Invitation to bid (WCPP 1)
3 – 5 Bid Checklist
6 - 11 Bid conditions
12 - 32 Terms of reference
33 - 34 Application for Tax Clearance Certificate (WCPP 2)
35 Pricing schedule (WCPP 3.3)
36- 43 Declaration of Interest (WCPP 4)
44 - 50 Preference Points Claim Form in terms of the Preferential Procurement Regulations 2022 (WCPP 6.1)
51– 62 General conditions of contract (GCC)
Wcpp 1
Invitation to bid
You are hereby invited to bid for requirements of the Western Cape Provincial Parliament
Bid number: _________________ wcppt 01/2026
CLOSING DATE: _______________ 21 October 2026
Closing time: ________________ 11:00
VALIDITY PERIOD: ______________ 90 DAYS (from closing date)
DESCRIPTION: __________________ Internet and Firewall tender
The successful bidder will be required to sign a written service level agreement.
Kindly note that bids may either be posted (provided that such posted bid documents reach SC&AM before the
deadline) or deposited in the bid box as follows:
Postal Address
Manager: SC&AM
Western Cape Provincial Parliament
PO Box 648
Cape town
8000
Or
in the bid box situated outside the Visitors’ Centre, Ground Floor, 7 Wale Street, Provincial Legislature Building,
Cape town
Bid documents that are too bulky to be placed in the bid box may be delivered at SC&AM Section, 5th Floor,
Provincial Legislature Building, 7 Wale Street, Cape Town.
Bidders should ensure that bids are delivered timeously to the correct address. If a bid is late, it will not be
accepted for consideration.
Bidders must make use of the official attached bid documents/ forms and NO document/ form
SHALL BE RETYPED. Photocopies of the documents/forms may however be used. A bid submitted in any oth
Health & Safety
Source: 2026-08-20 WCPPT01-26 Internet and Firewall tender Bid Documents (1).pdfPOP (Point of Presence) A service provider location where customer connectivity is established
with the provider network.
PAM (Privileged Access Security controls used to manage and monitor privileged user and
Management) administrator activities.
WCPP RFP – Managed Internet, Firewall, IDS/IPS, Public DNS and Related Services
14.2.1 Uncapped Internet breakout.
14.2.2 250 Mbps bandwidth.
WCPP RFP – Managed Internet, Firewall, IDS/IPS, Public DNS and Related Services
14.2.3 Synchronous contention required 1:1.
14.2.4 At least 99.9% uptime.
14.2.5 No fair use policy.
14.2.6 No broadband.
14.2.7 Wireless Failover
14.3 Managed Firewall, IDS/IPS IAAS Compliance
Sets the constitutional standard for fair, equitable, transparent, competitive and cost-effective public procurement.
Relevant because this is a South African public-sector procurement opportunity.
Act 5 of 2000
Covers preferential procurement and preference-point systems used in public tenders.
Relevant because this is a South African public-sector procurement opportunity.
Act 12 of 2004
Supports anti-corruption controls and supplier integrity in procurement processes.
Relevant because this is a South African public-sector procurement opportunity.
Act 28 of 2024
Provides the national framework for public procurement across government.
Relevant because this is a South African public-sector procurement opportunity.
Act 2 of 2000
Supports access to tender records, award decisions and public-sector procurement information.
Relevant because this is a South African public-sector procurement opportunity.
Act 3 of 2000
Supports lawful, reasonable and procedurally fair administrative tender decisions.
Relevant because this is a South African public-sector procurement opportunity.
Address
7 Wale Street, - Cape Town - Cape Town - 8001
Source confidence
High source confidence
Official source
eTenders.gov.za
Documents found
1
Last checked
11 Sept 2026
AI status
Not enhanced
Data conflicts
None detected
This tender has strong source evidence, including source metadata and supporting tender information synced from the government tender portal.
Tenders SA is not the issuing authority. All tenders are automatically synced from the official government tender portal. Always confirm final submission details, closing dates, briefing sessions, eligibility requirements, and documents on the official government portal before applying.
Median Estimate
R 929 983
Range
Based on 14 comparable awarded tenders. Companies with similar profiles typically bid near the median.
* Estimates are based on historical data and do not guarantee actual award values.
Get deep intelligence on Information and communication. Unlock full pricing strategies, bid frequency, and historical win rates.
Learn how to submit a winning bid with these related articles
💡 Want more tendering tips and strategies?
Explore Our Blog