Information and communication Tenders Western Cape | September 2026

Submission method: hard copy only, delivered to the tender box at boland tvet college head office, ground floor reception, cnr of drukkers avenue and bird street, stellenbosch. Delivery hours: monday–thursday 09:00–16:00, friday 09:00–13:00 (excluding public holidays). Closing time: friday, 16 october 2026 at 11:00 AM. bids must be completed in black ink; incomplete documentation will not be accepted. Late, faxed, emailed, telegraphed, telephoned or telexed bids will not be accepted. Tender documents must be purchased for a non-refundable fee of r500.00. Request banking details from [email protected], Then email proof of payment to the same address to receive the electronic tender documents. Returnable forms: complete and sign all mandatory forms as specified in the tender document; the document does not list the specific sbd/mbd forms.

Submission method: bids must be deposited in the tender box at the finance department, 2nd floor, south cape college central office, 125 mitchell street, george. Couriered bids are accepted but must be deposited by hand into the tender box. Telephonic, telegraphic, telex, facsimile, copied or e-mailed bids will not be accepted. Bids must be submitted on the official forms provided (not re-typed). The bid must include the priced document (rates and final summary page) at closing; failure to do so renders the bid invalid. A two-envelope procedure will not be followed. Bids will be read out in public on the closing date. Returnable documents (all must be completed and signed unless marked 'if applicable'): - form of offer and acceptance (4 pages) - compulsory enterprise questionnaire (2 pages) – discloses any connection to the state and confirms NO conflict of interest - resolution of board of directors (1 page, if applicable) – authorises the signatory to bind the bidder - schedule of proposed sub-contractors (1 page, n/a) - declaration of interests (sbd 4, 3 pages) – discloses any employment by the state or relationships with state officials - declaration of bidder's past supply chain management practices (sbd 8, 2 pages) – declares NO abuse of SCM systems, NO fraud/corruption convictions, NO terminated contracts - certificate of independent bid determination (sbd 9, 3 pages) – certifies the bid was prepared independently, with NO collusion - capacity of bidder (2 pages) – provides details of staff, plant, and current/previous projects - preference certificate (4 pages) – claims b-bbee preference points - priced bills of quantities (15 pages) - valid tax clearance / compliance pin certificate from SARS - b-bbee status level verification certificate or sworn affidavit (for emes/qses) - confirmation of CIDB contractor registration - VAT registration certificate with SARS - certified copy of the tenderer's and each director's municipal account/lease agreement/proof of address for the month preceding the tender closure date - certificates ck1 & ck2 (if applicable) – for close corporations - certificates cm1, cm2, cm27, cm31 & cm46 (if applicable) – for companies - record of addenda to tender documents (1 page) - details of tenderer (1 page) - details of directors (1 page) - the national industrial participation programme (2 pages) disqualification risks: - late bids, or bids delivered to the wrong address. - Failure to submit the priced document at closing. - Failure to submit a valid tax clearance certificate or csd number. - Failure to complete the compulsory enterprise questionnaire or declaration of interests. - Being listed on the register of tender defaulters or the database of restricted suppliers. - Submitting more than one offer. - Failure to provide any required particulars may render the bid invalid.

9.1. Prospective bidders may submit their questions to [email protected] Or contact the person assigned to deal with enquiries on the advertisement for this bid. 9.2. Parliament may request bidders to provide additional pricing information to be utilised for comparative purposes during evaluations. 9.3. Parliament reserves the right to invite shortlisted bidders to make presentations to its evaluation team. 9.4. Parliament may request a site visit prior to awarding the bid. 9.5. The successful bidder/s must enter into a formal service level agreement with parliament upon appointment and must go through a security clearance process. 9.6. The successful bidder must sign confidentiality or non-disclosure agreement. 9.7. Parliament reserves the right to re-appoint or extend the service of the service provider where there is a natural continuation of assignments. 9.8. Parliament reserves the right not to award this bid in total or part thereof. 9.9. Parliament reserves the right to award this bid to one or more bidders. 9.10. Price adjustments will only be considered if there are statutory requirements and/or unforeseen circumstances (e.g. Natural disasters, etc.). 9.11. Copyright on all materials designed and developed remains property of parliament. 9.12. Upon arrival in the dr site, the assigned team must adhere to all health & safety protocols. 9.13. Parliament will bear the costs of software licensing directly with the software vendors. 9.14. Parliament will manage all operating systems and software patching and maintenance. 23 initial__________ 10. Proposed bill of materials: nb: the quantities and products listed below are an indication/basis of the requirements. Bidders may add or remove and replace items in the list below. 10.1 Servers qty product # product description 4 P73282-B21 hpe proliant compute dl380 gen12 sff NC configure-to-order server 4 P73282-B21 b19 hpe dl380 gen12 sff NC CTO svr 8 P74570-B21 intel xeon 6527p 3.0GHz 24-core 255w processor for hpe 8 P74570-B21 0d1 factory integrated 64 P69728-B21 hpe 64gb (1x64gb) dual rank x4 DDR5-6400 CAS-52-52-52 ec8 registered smart memory kit 64 P69728-B21 0d1 factory integrated 4 P75740-B21 hpe proliant compute dl3xx gen12 8sff x1 u.3 Tri-mode drive cage kit 4 P75740-B21 0d1 factory integrated 4 s4s01a hpe sn1620e 32gb 2p fc securehba 4 s4s01a 0d1 factory integrated 4 P01366-B21 hpe 96w smart storage lithium-ion battery with 145mm cable kit 4 P01366-B21 0d1 factory integrated 4 P48918-B21 hpe proliant dl360 gen11 storage controller enablement cable kit 4 P48918-B21 0d1 factory integrated 4 P47781-B21 hpe MR416i-o gen11 x16 lanes 8gb cache ocp spdm storage controller 4 P47781-B21 0d1 factory integrated 4 P10097-B21 broadcom bcm57416 ethernet 10gb 2-port base-t ocp3 adapter for hpe 4 P10097-B21 0d1 factory integrated 8 P44712-B21 hpe 1800W-2200W flex slot titanium hot plug power supply kit 8 P44712-B21 0d1 factory integrated 8 P78145-B21 hpe c13 - c14 250v 10amp 2m fio power cord 4 bd505a hpe ilo advanced 1-server license with 3yr support on ilo licensed features 4 bd505a 0d1 factory integrated 4 s1a05a hpe compute cloud management server fio enablement 4 P72203-B21 hpe proliant compute DL3XX/ML350 gen12 cpu1 to rear ocp slotb x8 cable kit 4 P72203-B21 0d1 factory integrated 4 P76452-B21 hpe proliant compute dl380 gen12 8SFF/2SFF umb oroc cable kit 4 P76452-B21 0d1 factory integrated 4 P48820-B21 hpe proliant DL380/DL560 gen11 2u high performance fan kit 4 P48820-B21 0d1 factory integrated 4 P50400-B21 hpe gen11 2u bezel kit 4 P50400-B21 0d1 factory integrated 4 P52341-B21 hpe proliant dl3xx gen11 easy install rail 3 kit 4 P52341-B21 0d1 factory integrated 4 P73325-B21 hpe proliant compute localization fio kit 4 P74755-B21 hpe proliant compute dl380 gen12 NS204i-u rear boot device enablement kit 24 initial__________ 4 P74755-B21 0d1 factory integrated 8 P74792-B21 hpe proliant compute dl380 gen12 performance heat sink kit 8 P74792-B21 0d1 factory integrated 4 P78279-B21 hpe NS204i-u v2 480gb nvme hot plug boot optimized storage device 4 P78279-B21 0d1 factory integrated 4 P79552-B21 hpe proliant compute 30c system inlet ambient operating temperature configuration tracking 4 r7a12aae hpe compute ops management standard 5-year upfront proliant saas 1 ha114a1 hpe installation and startup service 4 ha114a1 5a6 hpe proliant dl/ml startup svc 1 hu4a6a5 hpe 5y tech care essential service 4 hu4a6a5 r2m hpe ilo advanced non blade support 4 hu4a6a50c4v hpe dl380 gen12 support 25 initial__________ annexure e: contractual obligations conditions and procedures to be complied with as part of the contract with parliament. 1. Statutory requirements all persons employed by the contractor working within the premises of parliament shall comply with the regulations of the occupational health and safety act, act NO. as amended. The contractor shall designate, in writing, one of his full time employees in terms of the provisions of general safety regulations or section 8 of the occupational health and safety act who shall be in charge of work on site. The above designation shall be made before work commences on site. The appointed person, for inspection purposes, shall hold one copy on site and a duplicate copy shall be handed to ndpw / wsp employee in charge of that particular project. The contractor shall instruct his authorised site representative to report to the ndpw / wsp employee who is in charge of the project. 2. General regulations the contractor shall submit a list of all portable electrical tools and equipment to security before permission is granted to enter or leave the premises. Vehicles will be subjected to a search before entry and when leaving the premises. Contractors are not permitted to stay on the premises after their shift has been completed. The safety, health and environmental manager (hereinafter the safety manager) must authorise any work, which could affect or interfere with normal activities of parliament. All excavation work must be railed off or barricaded, debris or material, which cannot be removed immediately, must be placed in such manner as to allow adequate and safe passage. The safety manager will authorise areas where rubble and other material may be stored. The contractor will stay confined to the area of his work. 26 initial__________

9.1. Prospective bidders may submit their questions to [email protected] Or contact the person assigned to deal with enquiries on the advertisement for this bid. 9.2. Parliament may request bidders to provide additional pricing information to be utilised for comparative purposes during evaluations. 9.3. Parliament reserves the right to invite shortlisted bidders to make presentations to its evaluation team. 9.4. Parliament may request a site visit prior to awarding the bid. 9.5. The successful bidder (and its employees) must enter into a formal service level agreement with parliament upon appointment and must go through a security clearance process. 9.6. The successful bidder must sign confidentiality or non-disclosure agreement. 9.7. Parliament reserves the right not to award this bid in total or part thereof. 9.8. Parliament reserves the right to award this bid to one or more bidders. 9.9. Price adjustments will only be considered if there are statutory requirements and/or unforeseen circumstances (e.g. Natural disasters, etc.). 9.10. Copyright on all materials designed and developed remains property of parliament. 9.11. Upon arrival in the dr site, the assigned team must adhere to all health & safety protocols. 9.12. Parliament will bear the costs of software licensing directly with the software vendors. 9.13. Parliament will manage all operating systems and software patching and maintenance. 24 initial__________ 10. Proposed bill of materials: nb: the quantities and products listed below are an indication/basis of the requirements. Bidders may adjust and replace items in the list below. 10.1 Servers qty product product description 3 P73282-B21 hpe proliant compute dl380 gen12 sff NC configure-to-order server 3 P73282-B21 b19 hpe dl380 gen12 sff NC CTO svr 6 P74570-B21 intel xeon 6527p 3.0GHz 24-core 255w processor for hpe 6 P74570-B21 0d1 factory integrated 48 P69728-B21 hpe 64gb (1x64gb) dual rank x4 DDR5-6400 CAS-52-52-52 ec8 registered smart memory kit 48 P69728-B21 0d1 factory integrated 3 P75740-B21 hpe proliant compute dl3xx gen12 8sff x1 u.3 Tri-mode drive cage kit 3 P75740-B21 0d1 factory integrated 3 s4s01a hpe sn1620e 32gb 2p fc securehba 3 s4s01a 0d1 factory integrated 3 P01366-B21 hpe 96w smart storage lithium-ion battery with 145mm cable kit 3 P01366-B21 0d1 factory integrated 3 P48918-B21 hpe proliant dl360 gen11 storage controller enablement cable kit 3 P48918-B21 0d1 factory integrated 3 P47781-B21 hpe MR416i-o gen11 x16 lanes 8gb cache ocp spdm storage controller 3 P47781-B21 0d1 factory integrated 3 P10115-B21 broadcom bcm57414 ethernet 10/25Gb 2-port sfp28 ocp3 adapter for hpe 3 P10115-B21 0d1 factory integrated 6 P38997-B21 hpe 1600w flex slot platinum hot plug low halogen power supply kit 6 P38997-B21 0d1 factory integrated 6 P78145-B21 hpe c13 - c14 250v 10amp 2m fio power cord 3 bd505a hpe ilo advanced 1-server license with 3yr support on ilo licensed features 3 bd505a 0d1 factory integrated 3 s1a05a hpe compute cloud management server fio enablement 3 P72203-B21 hpe proliant compute DL3XX/ML350 gen12 cpu1 to rear ocp slotb x8 cable kit 3 P72203-B21 0d1 factory integrated 3 P76452-B21 hpe proliant compute dl380 gen12 8SFF/2SFF umb oroc cable kit 3 P76452-B21 0d1 factory integrated 3 P48820-B21 hpe proliant DL380/DL560 gen11 2u high performance fan kit 3 P48820-B21 0d1 factory integrated 3 P50400-B21 hpe gen11 2u bezel kit 3 P50400-B21 0d1 factory integrated 3 P35876-B21 hpe ce mark removal fio enablement kit 3 P52341-B21 hpe proliant dl3xx gen11 easy install rail 3 kit 3 P52341-B21 0d1 factory integrated 3 P73325-B21 hpe proliant compute localization fio kit 25 initial__________ 3 P74755-B21 hpe proliant compute dl380 gen12 NS204i-u rear boot device enablement kit 3 P74755-B21 0d1 factory integrated 6 P74792-B21 hpe proliant compute dl380 gen12 performance heat sink kit 6 P74792-B21 0d1 factory integrated 3 P78279-B21 hpe NS204i-u v2 480gb nvme hot plug boot optimized storage device 3 P78279-B21 0d1 factory integrated 3 P79552-B21 hpe proliant compute 30c system inlet ambient operating temperature configuration tracking 3 r7a12aae hpe compute ops management standard 5-year upfront proliant saas 1 ha114a1 hpe installation and startup service 3 ha114a1 5a6 hpe proliant dl/ml startup svc 1 hu4a6a5 hpe 5y tech care essential service 3 hu4a6a5 r2m hpe ilo advanced non blade support 3 hu4a6a50c4v hpe dl380 gen12 support 10.2 Storage qty product product description 1 p9k10a hpe 42u 600mmx1200mm g2 kitted advanced shock rack with side panels and baying 1 p9k10a 001 hpe factory express base racking service 2 s5a94a hpe storage 64gb 24/8 8-port 32gb short wave sfp28 switch b-series sn3700b 2 s5a94a 0d1 factory integrated 1 q1h95a hpe storage 1u rack accessories kit 1 q1h95a 0d1 factory integrated 1 s0b84a hpe alletra storage MP b10100 base configuration 1 s0b84a 0d1 factory integrated 1 s3q02a hpe alletra storage arcusos per tb 5-year ltu 1 s3q02a 0d1 factory integrated 1 581817-B21 hpe configurator defined build instruction option 1 r7c75a hpe alletra storage MP 10000 2u chassis 1 r7c75a 0d1 factory integrated 2 s0r21a hpe alletra storage MP b10130 controller node 2 s0r21a 0d1 factory integrated 2 s2s64a hpe alletra storage MP 32gb 4-port fibre channel ocp lpm37004 host bus adapter 2 s2s64a 0d1 factory integrated 4 s3n85a hpe 32gb sfp28 short wave 1-pack LP pull tab optical transceiver 4 s3n85a 0d1 factory integrated 2 r7c76a hpe alletra storage MP c14 1600w ac power supply 2 r7c76a 0d1 factory integrated 18 r9h67a hpe alletra storage MP 3.84TB Nvme sff self-encrypting ssd 18 r9h67a 0d1 factory integrated 1 r9r52a hpe c13 - c14 250v 10amp black 1.4m Ww power cord 1 r9r52a 0d1 factory integrated 1 r9s00a hpe c13 - c14 250v 10amp gray 1.4m Ww power cord 1 r9s00a 0d1 factory integrated 1 s0u79a hpe alletra storage MP cdm bluetooth connect kit 26 initial__________ 1 s0u79a b01 hpe alletra storage MP cdm bluetooth connect kit 1 s0a98a hpe storage data encryption ltu 1 s0a98a 0d1 factory integrated enlogic by nvent g3 basic 1-phase 7.3kVA/32A/200-240V outlets (16) c13 (4) combo C13/C19 pdu for 4 P59520-B21 hpe 4 P59520-B21 0d1 factory integrated 1 p1f64a hpe inside unpack/clean up w/lift xl svc 16 qk735a hpe premier flex lc/lc multi-mode om4 2 fiber 15m cable 1 ha113a1 hpe installation service 1 ha113a1 5by hpe rack and rack options install svc 1 h1sr4as hpe service credit 1 h0jd4a5 hpe 5y service credits 10 per yr svc h0jd4a5 2 wfm hpe 5y service credits qty 50 svc 69 s3q02aae hpe alletra storage MP b10000 per tb 5-year software and support saas 1 h38nhas hpe alletra storage MP b10000 svc 1 hu4a6a5 hpe 5y tech care essential service 2 hu4a6a50c49 hpe sn3700b 24p sw sfp fc swch support 1 hu4a6a5008l hpe alletra storage MP 2u chassis supp 2 hu4a6a5008n hpe alletra stgmp 16c swtchles node supp 18 hu4a6a5008s hpe alletra stg MP 3.84TB Nvme ssd supp 1 hu4a6a5008w hpe alletra stg MP base config supp 2 hu4a6a500gq hpe alletra stg MP 4p fc ocp hba support 1 ha124a1 hpe technical installation startup svc 1 ha124a1 vzw hpe alletra storage arcus os startup svc 1 ha124a1 vzq hpe alletra stg MP b10000 2n startup svc 10.3 Top of rack qty product product description hpe aruba networking cx 8360-32Y4C v2 32p 25g sfp/+/28 4 sec 4p 100g qsfp+/28 bf 3 fans 2 ac 2 jl701c bdl hpe aruba networking 8360-32Y4C v2 32p 25g sfp28 4sec 4p 100g qsfp28 bf 3 fans 2ac bundle 2 jl701c b2c pdu 8 j8177e hpe aruba networking 1g sfp rj45 100m cat5e transceiver 4 j9150d hpe aruba networking 10g sfp+ lc sr 300m om3 mmf transceiver 2 j9281d hpe aruba networking 10g sfp+ to sfp+ 1m direct attach copper cable 6 jl489a hpe aruba networking 25g sfp28 to sfp28 5m direct attach copper cable 2 r0z25a hpe aruba networking 100g qsfp28 to qsfp28 1m direct attach copper cable 4 qk735a hpe premier flex lc/lc multi-mode om4 2 fiber 15m cable 1 ha113a1 hpe installation service 2 ha113a1 5mw hpe aruba networking 6xxxn8xxx install swt svc 2 j9583b hpe aruba networking x414 1u universal 4-post rack mount kit 1 hu4a6a5 hpe 5y tech care essential service 2 hu4a6a500nu hpe anw 8360 32y4c dcn support 8 861413-B21 hpe synergy frame link module cat6a 3m cable 27 initial__________ annexure e: contractual obligations conditions and procedures to be complied with as part of the contract with parliament. 1. Statutory requirements all persons employed by the contractor working within the premises of parliament shall comply with the regulations of the occupational health and safety act, act NO. as amended. The contractor shall designate, in writing, one of his full time employees in terms of the provisions of general safety regulations or section 8 of the occupational health and safety act who shall be in charge of work on site. The above designation shall be made before work commences on site. The appointed person, for inspection purposes, shall hold one copy on site and a duplicate copy shall be handed to ndpw / wsp employee in charge of that particular project. The contractor shall instruct his authorised site representative to report to the ndpw / wsp employee who is in charge of the project. 2. General regulations the contractor shall submit a list of all portable electrical tools and equipment to security before permission is granted to enter or leave the premises. Vehicles will be subjected to a search before entry and when leaving the premises. Contractors are not permitted to stay on the premises after their shift has been completed. The safety, health and environmental manager (hereinafter the safety manager) must authorise any work, which could affect or interfere with normal activities of parliament. All excavation work must be railed off or barricaded, debris or material, which cannot be removed immediately, must be placed in such manner as to allow adequate and safe passage. The safety manager will authorise areas where rubble and other material may be stored. The contractor will stay confined to the area of his work. 28 initial__________

Comply with the following non-negotiable requirements, the bidders must submit bids with assurance that the requirements below can and will be met. Failure to comply with the criteria below will mean the bid will be deemed non responsive. Note: non-negotiable items in section d of the evaluation criteria. Condition description state security agency clearance at the time of submitting the bid, the bidder must have applied to the ssa an application for security clearance to perform onsite work at the precinct. Submit evidence as part of the bid. Service readiness the bidder must provide written confirmation that enterprise- grade connectivity is available and can be provisioned at the stipulated location wcpp RFP – managed internet, firewall, ids/ips, public dns and related services the successful bidder shall be responsible for conducting all site verification activities, including infrastructure availability and service feasibility assessments, prior to submitting the bid. NO claims relating to unavailable infrastructure, insufficient coverage, or site-related feasibility constraints will be accepted after the bid submission. Implementation dates solution to be deployed considering implementation dates specified below, with contingency for landlord and other 3rd party constraints. Start implementation by 30 april 2027 and go live by NO later than 15 june 2027 and final dns switch over by 25 june 2027. Functional requirements integration with wcpp sentinel siem. Bidder firewall team response handling with the wcpp soc team fully described and aligned on a 24 x 7 x 365 basis. 12 month log file retention and timeous forensic access when requested by wcpp addressed. Icasa compliant licensed spectrum wireless failover confirmed. 5. Current environment environment component current description 7 wale street, cape town location longitude latitude wcpp RFP – managed internet, firewall, ids/ips, public dns and related services 18.418750000000045 -33.92422 User base approximately 150 users devices fewer than 300 end-user devices including pcs, laptops, printers, tablets and cell phones. Remote sites NO remote sites network ethernet lan/wlan across four floors remote access hybrid environment. Remote access is critical 6. Corporate internet services 6.1.1 Primary and secondary connectivity 6.1.1.1 Primary 250 mbps fibre connection to the provider’s closest pop in cape town. 6.1.1.2 Secondary wireless: 250 mbps licensed band wireless backup link compliant with icasa regulations. 6.1.1.3 Implement failover: bgp and hsrp, or equivalent, to facilitate failover between primary and secondary links in the event of router or line failure. 6.1.1.4 Provide quality of service on both links to ensure application priority according to wcpp’s business requirements. 6.1.1.5 Provide fully outsourced customer edge equipment and router management to ensure reliability, security, reachability and availability. 6.1.1.6 Provide at least 99.9% Uptime for connectivity. 6.1.2 Internet breakout 6.1.2.1 250 mbps bandwidth. 6.1.2.2 Synchronous service with 1:1 contention required. 6.1.2.3 Uncapped internet breakout. 6.1.2.4 NO fair use policy. 6.1.2.5 NO broadband allowed for the corporate internet breakout. 6.1.2.6 At least 99.9 % Uptime. 6.1.3 Solution architecture compliance bidders must clearly state how the proposed architecture satisfies the specified bandwidth, contention, uptime, failover, qos and no-fair-use requirements. 7. Managed next generation firewall (ids/ips) 7.1 Minimum security service scope • provide managed firewall and ids/ips service. • Provide services compliant with the nist functions: identify, protect, detect, respond and recover. Wcpp RFP – managed internet, firewall, ids/ips, public dns and related services • detect and block data exfiltration attempts. • Implement rules as per wcpp security policy and in compliance with industry best practices and mitigation against known cyber threats. • Provide performance and high availability. • Provide evidence of operational monitoring. • Provide monthly security management reports detailing the source of threats, bad actors, mitigations and responses to incidents. • Provide expert-level support by certified security professionals responsible for management of firewall infrastructure to ensure reliability, security, reachability and availability. • Integrate with the existing wcpp microsoft sentinel siem. • Enable wcpp’s soc team to monitor independently. • Retain administrative and security logs for at least 12 months. • Integrate and comply with pam to monitor administrator activities. • Include pam reporting on a monthly basis. • Provide full firewall vulnerability management as a managed service. • Provide bug management, release management and configuration management. • Apply itil-compliant change management. • Provide backup and recovery, including monthly evidence of configuration and ruleset backups. • Propose a draft incident response policy in case of an incident and/or breach. • Provide at least 99.9% Uptime. 7.2 Firewall rule management the successful bidder must manage firewall rules in accordance with wcpp-approved change management, security policy and authorised requests. The bidder must provide a controlled, auditable and documented process for firewall rule creation, amendment, review and retirement. • Bidder must distinguish between operational service requests and security incidents. • All changes must be traceable to an approved request or authorised incident response action. • Firewall rules must be reviewed four times per year in accordance with agreed review dates and documented in the monthly report. • Evidence of ruleset backup must be provided monthly. 7.3 Monitoring and incident response the bidder must provide monitoring and response capabilities and must integrate with wcpp’s existing microsoft sentinel siem. • Wcpp’s soc team will facilitate independent monitoring. • Incidents will be classified, reported and responded to through the agreed SLA priority matrix. • Root cause analysis must be provided within three days of an incident or event. Wcpp RFP – managed internet, firewall, ids/ips, public dns and related services 7.4 Firewall vulnerability management requirement minimum standard critical vulnerabilities remediate within 7 days high vulnerabilities remediate within 14 days medium vulnerabilities remediate within 30 days patch reporting monthly security advisories and zero day as released, take action 8. Public dns services provide a web-based secure control panel for configuration. Requirement mandatory primary dns yes secondary dns outside western cape region dns redundancy yes dnssec required ddos protection required secure management portal /control panel required with mfa and management by wcpp admin staff. Availability 99.9% Real-time monitoring required bidders must explain how dns continuity will be maintained if the cape town environment or provincial internet service is unavailable. 9. Service management requirements 9.1 Account management • the bidder must provide a service escalation model and contact details to be used during service implementation and service operations. • Provide escalation protocols for the wcpp soc team to respond to incidents and remediation. • The bidder must distinguish between service requests and security incidents. Wcpp RFP – managed internet, firewall, ids/ips, public dns and related services 9.2 Monthly report pack the bidder must provide a monthly report pack section minimum information required executive summary overall service status, key issues, risks and decisions required. Incidents incident volumes, priority 1 and 2 details, root cause analysis status and breached tickets. Service requests requests received, completed, open and carried over by category. Breached tickets security incidents security events, incidents, mitigations, bad actors and responses. Breached tickets changes service improvements, ownership and target dates. Ids/ips summary of ips and ids activity and trends. Firewall rules rule changes, quarterly rule review status and exceptions. Backup evidence configuration and ruleset backup evidence. Vulnerability/risk posture, remediations , risk assessment and statuses lifecycle os lifecycle. 9.3 Monthly service review meetings • present the monthly report pack • the successful bidder must participate in virtual monthly meetings with wcpp to discuss service performance, service risks, continuous improvement and corrective actions. 10. Project management, implementation and transition • a dedicated project manager must be specifically identified. • A detailed project plan with indicative timelines must be submitted. • The bidder must demonstrate a mature project methodology. • The project plan must include implementation phases, milestones, dependencies, risks and acceptance criteria. • The bidder must provide a transition approach that minimises service disruption to wcpp. Running parallel and go live decisions. Wcpp RFP – managed internet, firewall, ids/ips, public dns and related services 10.1 Minimum project phases phase minimum expected deliverables phase 1: initiation and discovery kick-off meeting; confirmation of scope; validation of current environment; risk register; implementation governance structure. Phase 2: design and planning high-level and low-level design; implementation schedule; change plan; rollback approach; test plan. Phase 3: implementation and migration provisioning of connectivity, firewall, ids/ips, dns and monitoring integration; configuration backups; service desk readiness. Phase 4: testing, handover and failover testing; security monitoring validation; reporting pack; stabilisation operational handover; acceptance sign-off. 11. Incident response priority matrix bidders must provide an incident response priority matrix that consider outages and security incidents. Priority description response time resolution time p1 critical security breach or service outage 15 minutes 4 hours p2 high major degradation 30 minutes 8 hours p3 medium partial impact 2 hours 24 hours p4 low service request 8 hours 5 business days 11.1 SLA measurement clarifications • bidders must define how uptime is measured for each service component. • Bidders must define maintenance windows and explain how planned maintenance is excluded or included in availability calculations. • Bidders must specify escalation arrangements for high priority incidents, security incidents and connectivity outages. Wcpp RFP – managed internet, firewall, ids/ips, public dns and related services 12. Security, compliance and critical infrastructure requirements 12.1 Critical infrastructure protection act IT is expected of the bidder to have or to have obtained, taking application timeframes into account, state security agency clearance to be able to work at a site declared as critical infrastructure in terms of the critical infrastructure protection act, act . The bidder must provide evidence of existing clearance or at the time of submitting the bid, the bidder must have submitted to the ssa an application for security clearance to perform onsite work at the precinct. 12.2 Security governance • bidders must describe how services will comply with wcpp security policy requirements. • Bidders must describe how known cyber threats will be mitigated through firewall, ids/ips, monitoring and reporting capabilities. • Bidders must describe how administrator activities will be monitored through pam. • Bidders must describe how logs will be retained for at least 12 months. • Bidders must describe how their support personnel are certified and qualified to provide expert-level security support. • Bidder must describe how firewall team will respond and integrate with the wcpp soc team 13. Bidder response requirements bidders must respond clearly and comprehensively to every requirement. Responses must include page references where indicated in the compliance schedules. Generic marketing material will not be sufficient unless IT clearly demonstrates compliance with a specific requirement. IT is recommended that bidders consult the evaluation criteria (section 16) to ensure their bids are compliant and assist them with self-scoring of the bid. Response area required bidder submission executive summary overview of the bidder’s proposed solution and service model. Technical architecture description of proposed internet, connectivity, firewall, ids/ips, dns, monitoring and failover architecture. Compliant response completed compliance tables sections 14 and 18, with page references. Security services description of nist-aligned firewall and monitoring services and interfacing with the wcpp soc team sentinel integration explanation of how the service will integrate with wcpp microsoft sentinel siem. Service management proposed account manager, escalation model, reporting pack and meeting cadence. Wcpp RFP – managed internet, firewall, ids/ips, public dns and related services project management project manager cv summary, project plan, methodology, milestones and risk approach. References written signed reference letters on official letterhead for similar services. SLA and msa SLA and alignment to the proposed wcpp msa and SLA critical infrastructure evidence of ssa clearance or submission for ssa clearance to work at the precinct (critical infrastructure precinct). 14. Bid specification compliance schedules the bidder must complete the tables below by indicating the page reference in the proposal where the bidder confirms that IT will meet the specified deliverable. 14.1 Connectivity / WAN iaas compliance item description bidder page REF 14.1.1 Primary fibre: 250 mbps fibre connection to the provider’s closest pop. 14.1.2 Secondary wireless: 250 mbps wireless backup link compliant with icasa regulations. 14.1.3 Implement bgp and hsrp protocols, or equivalent, to facilitate failover between primary and secondary links in case of router or line failure, inbound and outbound. 14.1.4 Quality of service on both links to ensure application priority according to wcpp’s business requirements. 14.1.5 At least 99.9% Uptime. 14.1.6 Fully outsourced customer edge equipment and router management; management of router infrastructure to ensure reliability, security, reachability and availability. 14.1.7 NO fair usage policy. 14.2 Internet services compliance item description bidder page REF 14.2.1 Uncapped internet breakout. 14.2.2 250 mbps bandwidth. Wcpp RFP – managed internet, firewall, ids/ips, public dns and related services 14.2.3 Synchronous contention required 1:1. 14.2.4 At least 99.9% Uptime. 14.2.5 NO fair use policy. 14.2.6 NO broadband. 14.2.7 Wireless failover 14.3 Managed firewall, ids/ips iaas compliance item description bidder page REF 14.3.1 Implement rules as per wcpp security policy and compliance with industry best practices and mitigation against known cyber threats. 14.3.2 Performance and availability management. 14.3.3 Real-time threat response with wcpp soc team 14.3.4 On-demand security and compliance reporting. 14.3.5 Expert support and management of firewall infrastructure to ensure reliability, security, reachability and availability. 14.3.6 At least 99.9% Uptime. 14.3.7 Change management. 14.3.8 Backup and recovery. 14.3.9 Services compliant with nist functions. 14.3.10 Evidence of real-time operational monitoring. 14.3.11 Quarterly security management reports detailing sources of threats, bad actors, mitigations and responses. 14.3.12 Root cause analysis report relating to all incidents within three days of the event. 14.3.13 Integration with existing wcpp microsoft sentinel siem. 14.3.14 Wcpp soc team must be able to monitor independently. 14.3.15 Administrative and security logs retained for at least 12 months. 14.3.16 Pam to monitor administrator activities. Wcpp RFP – managed internet, firewall, ids/ips, public dns and related services 14.3.17 Firewall vulnerability management as a managed service. 14.3.18 Patch, bug, release and configuration management. 14.3.19 Itil-compliant change management policy. 14.3.20 Review of firewall rules four times per year according to agreed specific dates. 14.3.21 Monthly evidence of configuration and ruleset backups. 14.3.23 Draft incident response policy. 14.4 Public dns saas compliance item description bidder page REF 14.4.1 Primary dns server. 14.4.2 Secondary dns server hosted outside the core cape town environment to ensure continuity of name resolution in case of local disaster or provincial internet outage. 14.4.3 Dnsec required 14.4.4 Ddos 14.4.5 At least 99.9% Uptime. 14.4.6 Web-based secure control panel for configuration. 14.4.7 Mfa 15. Bidder response checklist NO. checklist item compliant? Page REF yes / NO 15.1 Proposal includes executive summary. 15.2 Proposal includes completed compliance schedules. 15.3 Proposal includes technical architecture. 15.4 Proposal confirms 36-month managed service offering and go live date. Wcpp RFP – managed internet, firewall, ids/ips, public dns and related services 15.5 Proposal addresses bandwidth and contention 15.6 Proposal addresses primary fibre and secondary wireless connectivity. 15.7 Proposal addresses bgp / hsrp or equivalent failover. 15.8 Proposal addresses qos. 15.9 Proposal confirms NO fair usage policy where specified. 15.10 Proposal addresses managed firewall and ids/ips requirements. 15.11 Proposal addresses nist identify, protect, detect, respond and recover functions. 15.12 Proposal addresses microsoft sentinel siem integration. 15.13 Proposal addresses pam 15.14 Proposal addresses 12-month log retention. 15.15 Proposal addresses vulnerability, patch, bug, release and configuration management. 15.16 Proposal addresses itil-compliant change management. 15.17 Proposal includes rule review approach four times per year. 15.18 Proposal includes backup and recovery evidence approach. 15.19 Proposal includes public dns requirements. 15.20 Proposal includes dedicated project manager and project plan. 15.21 Proposal includes key account manager and summarised cv. 15.22 Proposal includes monthly report pack approach. 15.23 Proposal includes completed SLA matrix. 15.24 Proposal includes signed reference letters on official client letterhead. 15.25 Proposal addresses critical infrastructure protection act / ssa clearance requirement. Wcpp RFP – managed internet, firewall, ids/ips, public dns and related services

Returnable documents:

Returnable documents:

Quotes must be submitted electronically to [email protected] By 2026-09-22t11:00:00.000Z. All submissions must use official forms: sbd 1 (invitation to bid), sbd 3.1/3.2/3.3 (pricing schedule), sbd 4 (declaration of interest), sbd 6.1 (Preference points claim form), sbd 6.2 (Local production and content declaration), sbd 7.1/7.2 (contract form), sbd 8 (supply chain management declaration), and sbd 9 (independent bid determination). Late quotes will be rejected.

Bids must be submitted on the official forms provided (not re-typed) and delivered to the correct address by the stipulated time. Late bids will not be accepted. Bids may be deposited in the bid box at south cape tvet college central office building, ground floor, 125 mitchell street, george, or emailed to [email protected]. Required returnable forms include sbd 1 (bid form), sbd 4 (declaration of interest), sbd 6.1 (Preference points claim), sbd 8 (declaration of bidder's past SCM practices), sbd 9 (certificate of independent bid determination), and the price declaration form. Also required: completed checklist of documents, company profile, and two reference letters. Failure to provide or comply with any required particulars may render the bid invalid.

Two-envelope submission: envelope 1 (technical bid) and envelope 2 (financial bid), each sealed and clearly labelled with the bidder's name, bid reference number, and contact details. Both envelopes must be submitted by the closing date and time into the bid box marked 'department of local government, ground floor, 80 st georges mall waldorf building, cape town, 8000'. Late submissions will not be considered and will be returned unopened. Returnable documents (phase 1): - wcbd 1 (bid form) - wcbd 3 (pricing schedule) - wcbd 4 (declaration of interest) - wcbd 6.1(a) (Preference certificate) - b-bbee status level verification certificate or sworn affidavit (for emes) - tax clearance certificate - proposing entity and authority of signatory - detailed dmr solution bid and presentation - proof of csd registration - icasa type approval certificate, icasa dcb compliance proof, radio dealer license - signed compliance acknowledgment form (annexure d) - popia compliance declaration - SANS certification - indemnity declaration - offered training plan phase 2 documents: annexure a (technical specifications), annexure b (functionality table) including company profile, client reference letters, after-sales support and warranty plan, and sample device documentation. Phase 3: annexure c (pricing summary & price schedule) in the financial bid envelope. All documents must be fully completed, dated, and signed in ink. The bid must be bound without tearing pages; NO erasures or masking fluid corrections are permitted. Failure to submit any mandatory document or attend the compulsory presentation session will result in disqualification.

Returnable documents:

Submission channel: sealed envelope endorsed with the tender number, description and closing date, deposited in the tender box at municipal offices, 1 dirkie uys street, bredasdorp, or posted to reach the municipal manager, po box 51, bredasdorp, 7280, by 12:00 on 04 september 2026. Late bids are not considered. Bids must be on official municipal forms, not re-typed, and every page initialled. NO faxes or emails accepted. Envelopes without the tender number and title are not opened. Bids must be complete, securely bound, and all supporting documents attached. Corrections only by striking through in black ink and initialling; correction fluid or tape prohibited. Returnable forms: cambd 1 (invitation to bid), cambd 2 (tax compliance status pin), schedule 1a (authority of signatory), schedule 1b (enterprise questionnaire), schedule 1c (documents of incorporation), schedule 1d (payment of municipal accounts), schedule 1e (b-bbee certificate), schedule 1f (work satisfactorily carried out), cambd 4 (declaration of interest), cambd 6.1 (Preference points claim), cambd 8 (past SCM practices), cambd 9 (independent bid determination), form of offer and acceptance, and contract data. Missing or unsigned returnable documents invalidate the bid. Bidders must be registered on the central supplier database (csd). Bids valid for 90 days after closing. Suspicious collusive behaviour is reported to the competition commission.

• Provision of a backup and archiving storage appliance • compliance with dsti/kfw/samrc project requirements • experience in information & communication technology

• Submit tender in a sealed envelope clearly marked with tender number 29S/2026/27, description, tender box number, and closing date. • Deposit in tender box 197 at tender & quotation boxes office, 2nd floor (concourse level), civic centre, 12 hertzog boulevard, cape town by 10:00 on 25 august 2026. • If box is full or submission too large, enquire at public counter for alternative instructions. • Complete and sign all tender documents including form of offer and acceptance and all required returnable schedules. • Include completed returnable documents: schedule f.5 (Declaration of interest – state employees), schedule f.7 (Declaration of tenderer’s past supply chain management practices), schedule f.10 (Proposed deviations and qualifications). • Provide evidence of tax compliance: valid tax compliance status pin from SARS. each party in a consortium/joint venture must submit separate pin. • Tender offers submitted by fax or email will be rejected. • Tender remains valid for 120 days after closing date, extendable under certain conditions. • Late tenders will not be considered.

The document references 'returnable documents' but does not list them in the extracted text. Bidders should request the full tender document to obtain the complete list of returnable schedules, forms, and certificates required for submission.

• Submit your tender in the official tender box (tender box NO. 1) located at the entrance of theewaterskloof municipality, 6 plein street, caledon, 7230. • The closing date is 14 august 2026 at 12:00. Late, telegraphic, telephonic, telex, facsimile, or electronic/e-mailed tenders will not be accepted. • Tenders must be submitted on the official tender documentation issued, completed in full, and must not be re-typed. • The tender box is open 24/7; the deposit slot opening is 5 x 30 cm. • You must submit an original tender document plus 0 (zero) copies. • The tender must be completed by hand in non-erasable black ink and signed by a person duly authorised. • All returnable documents and schedules must be completed and submitted. • Proof of payment of the non-refundable tender participation fee of r550.00 (VAT inclusive) must accompany your submission. • Failure to comply with submission instructions (e.g., Incorrect sealing, addressing, or missing signatures) may result in the tender being rejected. --- • Provide a dedicated, uncontended 1:1 fibre internet service with symmetrical speeds, guaranteed bandwidth, and an SLA. • response to inspection requests must commence within 24 hours. • Contractor must have means to respond to calls within 24 hours based on severity. • Municipality may expand the network by adding sites. • Failure to sign this section will be interpreted as non-compliance.

- Submit via email to [email protected] And [email protected]. - Ensure complete documents are received by the deadline; the onus is on the bidder. - Any alterations to the tender document (other than filling in bidder details and price) will disqualify the bid. - Late submissions or incomplete documentation will be disqualified. - Required forms: sbd 4 (bidder's disclosure) and sbd 6.1 (Preference points claim form). - Bidder declarations: NO state employment conflicts, NO relationships with iziko staff, NO collusion with competitors, NO involvement in drafting specifications. - Bids must be independent; joint ventures/consortia are exempt from collusion rules. - False declarations may result in disqualification, contract cancellation, cost recovery, 10-year public sector restriction, or criminal prosecution. - Iziko may reject bids based on poor past performance or litigation history.

- Must demonstrate verified experience (1-3 references) in all 15+ critical sap solution areas, including finance, HR, utilities, and asset management. - Bid as a consortium/jv must be explicitly declared, with roles and responsibilities for each partner. - Team members in critical roles (e.g., Programme manager, architect lead) require 8+ years of experience and relevant sap certifications. - Propose a phased implementation plan: release 1 (technical upgrade to sap hana) followed by deployment of sap cloud products and S/4HANA capabilities. - Include post go-live stabilisation, user support, and issue resolution as part of the scope. - Provide a detailed methodology addressing project management, change management, testing, training, data migration, and risk mitigation. - All south africa-based roles must be explicitly marked, with local references prioritised where applicable.

Submission method: email to [email protected] And [email protected]. Technical enquiries: andre makka ([email protected]). Disqualification risks: - incomplete or incorrectly filled bid documents - non-compliance with specifications - late submission (after 19 june 2026, 11h00) - supplier not registered on central supplier database (csd) - non-compliant tax status - alterations to tender documents beyond filling in bidder details and price bidder responsibilities: - ensure complete email documents are received by iziko by the deadline - submit all supporting documentation; non-responsive submissions will be disqualified - return signed sbd 4 and sbd 6.1 Forms with the bid