This tender has been awarded to BAMBOO STUDIO for R 895 402 20.
AwardedPR10116909
Award Information
Award Value
R 895 402 20
Winning Supplier
BAMBOO STUDIO
Type: GEN
Services: Professional
The road accident fund (raf) wishes to appoint an accredited reseller, implementer, support partner of thinkst canary to provide a decoy/honeypot system and support services for a period of two (2) years.
The road accident fund (raf) wishes to appoint an accredited reseller, implementer, support partner of thinkst canary to provide a decoy/honeypot system and support services for a period of two (2) years.
What the tender required and what the award supports
Source material and existing AI analysis appear first. Supplier conclusions remain qualified by the evidence Tenders-SA holds.
Summary
The road accident fund (raf) is seeking to appoint an accredited reseller, implementer, and support partner of thinkst canary to provide a decoy/honeypot system and support services for a period of two years. The successful bidder must comply with strict security and data protection requirements, including popia, and implement robust technical and organisational measures to safeguard raf's confidential information.
Document read. The full tender notice and its supporting documents are read end-to-end. Key sections, requirements, dates, and contact details are identified and pulled into a working summary you can act on.
Compliance review. The working summary is checked against South African procurement standards — PFMA, PPPFA, B-BBEE, CIDB, local content, and preferential procurement — so nothing critical is missed before you start your bid response.
DocumentSBD 6.1 IN TERMS OF PPR2022.docxReview complete
Evaluation Criteria
Source: SBD 6.1 IN TERMS OF PPR2022.docx (unknown)
Award analysis coverage
0 of 4 source documents fully reviewed. Unstated details are identified only after complete source review.
technical scope
18 sourced criteria
financial capacity
1 sourced criteria
pricing
Source analysis requires completion or review
compliance returnables
22 sourced criteria
evaluation
23 sourced criteria
experience
Source analysis requires completion or review
personnel
3 sourced criteria
equipment capacity
4 sourced criteria
delivery contract
21 sourced criteria
equity registrations
2 sourced criteria
What the buyer was looking for
1Mandatory requirement
Must comply with POPIA and implement robust technical and organisational security measures to protect RAF's confidential, private, personal, or sensitive information.
Why it matters: The source identifies this as a mandatory or eligibility condition for a compliant bid.
No source document identifier is stored for this item.
Source: AI key requirements · requirements
Known supplier evidence
The linked award records BAMBOO STUDIO as appointed for this tender. Recorded contract value: 895402.2 ZAR.
Qualified inference
Inference only
An award confirms appointment. It does not prove why a supplier was selected, that every qualification remains current, or that delivery was completed successfully.
Bid-ready summary. The submission guidelines, evaluation criteria, technical, financial, and compliance sections are refined into professional, easy-to-scan prose. This is the final version you can rely on when preparing your bid or briefing your team.
We refine every tender document through these stages so you can brief your team and prepare your bid with confidence. Anything marked as "in progress" will be upgraded automatically — no action required from you.
Document read
Compliance review
Bid-ready summary
Open to all accredited Thinkst Canary partners.
Preference points claimed must be substantiated with valid documentation.
Tenderers must certify the accuracy of claims and accept potential penalties for fraud.
Compliance Requirements
Source: SBD 6.1 IN TERMS OF PPR2022.docx (unknown)
Complete the Preferential Procurement Regulations 2022 preference points claim form (SBD 6.1).
Provide proof of compliance for specific goals (e.g., HDI, Women, Persons with Disability) to claim points.
Fraudulent claims may result in disqualification, cost recovery, contract cancellation, business restrictions for up to 10 years, or criminal prosecution.
The Road Accident Fund (RAF) invites bids from any natural or juristic person to appoint an accredited reseller, implementer, and support partner of Thinkst Canary.
The bid must comply with principles of transparency, accountability, impartiality, and ethics as per the Constitution of South Africa and relevant legislation.
Bidders must complete the required disclosure form (SBD 4) as part of their submission.
Submission Guidelines
Source: SCM-Bid Documents SBD 4 .doc (unknown)
Submit a completed and signed Bidder's Declaration of Interest (SBD 4) form.
Failure to submit the form, or providing false or incomplete information, will result in disqualification.
Ensure all required sections of the SBD 4 are fully completed, including declarations on state employment, relationships, and related enterprises.
Evaluation Criteria
Source: SCM-Bid Documents SBD 4 .doc (unknown)
Open to natural or juristic persons (companies, partnerships, etc.).
Bidders or their directors/shareholders/partners employed by the state must be disclosed; non-disclosure may lead to disqualification.
Bidders with relationships to RAF officials must be disclosed.
Bidders listed in the Register for Tender Defaulters or List of Restricted Suppliers will be automatically disqualified.
Bidders involved in collusive, fraudulent, or corrupt practices will be disqualified.
Mandatory completion of the Bidder's Disclosure form, including details of state employment, conflicts of interest, or related enterprises.
Compliance Requirements
Source: SCM-Bid Documents SBD 4 .doc (unknown)
Declare any employment by the state (for bidder, directors, trustees, shareholders, members, partners, or controlling persons).
Declare any relationship with employees of the Road Accident Fund (RAF) or procuring institution.
Declare any interest in related enterprises bidding for this contract.
Bidders listed in the Register for Tender Defaulters or List of Restricted Suppliers will be automatically disqualified.
Collusive bidding or disclosure of bid terms to competitors is prohibited and may result in penalties, including restriction from public sector business for up to 10 years.
DocumentRFQ Documnet PR10116909 for Decoy - Honeypot System and Support Services.docxReview complete
Description
Source: RFQ Documnet PR10116909 for Decoy - Honeypot System and Support Services.docx
The Road Accident Fund (RAF) seeks to appoint an accredited reseller, implementer, or support partner of Thinkst Canary to provide a Decoy/Honeypot System and Support Services for a two-year period. The solution must include licenses, management components, and Decoy/Honeypot assets with a centralised management platform.
Important Dates
Source: RFQ Documnet PR10116909 for Decoy - Honeypot System and Support Services.docx (unknown)
Closing date: 23 July 2026 at 15:00. RFQ validity period: 30 days from closing date. Expected service start: Two-year agreement from date of last signatory. Compulsory briefing/site visit: N/A.
Contact Information
Source: RFQ Documnet PR10116909 for Decoy - Honeypot System and Support Services.docx (unknown)
Enquiries: Email [email protected] or contact Ntsako Baloyi at 012 649 2023. Submission address: RAF Head Office, 420 Witch Hazel Avenue, Centurion, Eco Glades, Pretoria, 0046.
Submission Guidelines
Source: RFQ Documnet PR10116909 for Decoy - Honeypot System and Support Services.docx (unknown)
Submit all RFQ responses via email to [email protected]. Late submissions will not be accepted. Complete and sign all Annexures (Standard Bidding Documents and Mandatory Evaluation documents). Suppliers with disabilities must provide a valid medical certificate. Only CSD-registered suppliers will be considered. Collusive bidding or multiple submissions from related entities will result in disqualification. No gifts, hospitality, or benefits may be offered to RAF officials; report any solicitation to 0800 005919 or risk disqualification. Use RFQ number PR10116909 as reference in all correspondence.
Evaluation Criteria
Source: RFQ Documnet PR10116909 for Decoy - Honeypot System and Support Services.docx (unknown)
Phase 1: Mandatory Requirements (pass/fail). Must be an accredited reseller/implementer/support partner of Thinkst Canary (submit valid accreditation certificate or letter from OEM by closing date). Must be CSD-registered. Tax matters must be in order with SARS. No collusive bidding or multiple submissions from entities with shared directors/shareholders. Must not have offered gifts/hospitality to RAF officials or failed to report solicited bribes. Phase 2: 80/20 preference point system. Price: 80 points. Specific Goals: 20 points (HDI status - Black South Africans, females, persons with disabilities; per Preferential Procurement Policy Framework Act, 2022).
Technical Specifications
Source: RFQ Documnet PR10116909 for Decoy - Honeypot System and Support Services.docx (unknown)
Supply, implement, configure, and support a Thinkst Canary Decoy/Honeypot System with all required licenses and a centralised management platform. Provide real-time detection and alerting for: unauthorised access attempts, network reconnaissance, privilege escalation, lateral movement, insider threats, malware and ransomware. Generate high-fidelity alerts with minimal false positives. Provide centralised dashboards and reporting for security events, threat activity, system health, and operational status. Integrate with Microsoft Sentinel SIEM and Microsoft Entra-ID/Active Directory. Provide threat intelligence aligned to MITRE ATT&CK framework. Maintain detailed audit logs. Provide regular software updates, security patches, and threat intelligence updates. Include knowledge transfer, administrator training, implementation documentation, and operational support documentation. Support deployment of multiple Decoy/Honeypot types: endpoint, server, database, application, Active Directory, network service, credential. Provide technical support and maintenance, including incident response assistance, software upgrades, and vendor escalation support during the contract period.
Financial Requirements
Source: RFQ Documnet PR10116909 for Decoy - Honeypot System and Support Services.docx (unknown)
Prices must be VAT-inclusive (if VAT-registered) and quoted in ZAR. VAT vendors must include VAT; failure to do so means the quoted price is deemed all-inclusive. Non-VAT-registered suppliers charging VAT will be disqualified. Only prices in the provided cost breakdown table will be evaluated; missing prices lead to disqualification. No price changes allowed after Award Letter/PO issuance. Ad-hoc services must be quoted with rates inclusive of VAT (if applicable).
Compliance Requirements
Source: RFQ Documnet PR10116909 for Decoy - Honeypot System and Support Services.docx (unknown)
Must be an accredited reseller, implementer, or support partner of Thinkst Canary. Submit a valid Accreditation Certificate or Letter of Accreditation from the OEM by closing date. CSD registration is mandatory. Tax compliance with SARS is required. Complete SBD 4 (Bidders Disclosure) and SBD 6.1 (PPR 2022). Suppliers with disabilities must provide a valid medical certificate. Collusive bidding or multiple submissions from related entities are prohibited.
DocumentAnnexure A - Security Measures.pdfReview complete
Description
Source: Annexure A - Security Measures.pdf
The service provider must comply with the provisions of the Protection of Personal Information Act.
Submission Guidelines
Source: Annexure A - Security Measures.pdf (unknown)
No submission guidelines found in the provided document. The content in currentAnalysis relates to security measures, not submission instructions.
Evaluation Criteria
Source: Annexure A - Security Measures.pdf (unknown)
Mandatory requirements:
Must be an accredited reseller, implementer, and support partner of Thinkst Canary.
Must demonstrate compliance with POPIA and other data protection laws.
Must have secure facilities with physical and network security measures in place.
Must have documented policies for data handling, access control, and incident response.
Must agree to RAF's right to audit, monitor, and vet the Service Provider and its personnel.
Preferred requirements:
Experience in providing similar services to government or large organizations.
Proven track record in cybersecurity and data protection.
Certifications or accreditations in information security (e.g., ISO 27001).
Technical Specifications
Source: Annexure A - Security Measures.pdf (unknown)
The service provider must comply with the Protection of Personal Information Act (POPIA).
Implement technical and organisational security measures to protect RAF's confidential, private, personal, or sensitive information (files, data, documents).
Compliance Requirements
Source: Annexure A - Security Measures.pdf (unknown)
The service provider must have policies to comply with RAF requirements and the Protection of Personal Information Act.
Implement robust cybersecurity measures including firewalls, intrusion detection, and encryption.
Use encryption for data in transit and at rest, complying with industry standards.
Regularly update and patch systems, software, and applications.
Have a documented incident response plan and report any security incidents or data breaches to RAF promptly.
Ensure subcontractors adhere to the same data protection and cybersecurity standards.
RAF reserves the right to audit and monitor the service provider's compliance.
Maintain physical security measures including controlled access, surveillance, and 24/7 monitoring.
Have a fire suppression system (e.g., carbon dioxide extinguishers) on premises.
Implement access control on a need-to-know basis with strong authentication.
Handle personal and sensitive data in compliance with data protection laws.
Safeguard data against unauthorised access, disclosure, alteration, and destruction.
Impose confidentiality obligations on agents, subcontractors, or third parties.
Screen third-party service providers handling PII and require data protection agreements.
RAF reserves the right to conduct security screening or vetting of company directors and resources.
Ensure physical security of records, including controlled access points, surveillance cameras, and/or 24/7 monitoring.
Protect all document storage facilities against unauthorised access.
Immediately inform RAF of any real, attempted, or suspected breach of physical security and provide evidence (e.g., CCTV footage, police reports).
Implement network security measures such as firewalls, intrusion detection, and encryption.
Grant access on a need-to-know basis using strong authentication methods.
Regularly review and update access permissions.
Handle and process personal and sensitive data in compliance with applicable data protection laws.
Safeguard data against unauthorised access, disclosure, alteration, and destruction.
Inform RAF immediately of any data breaches or incidents impacting information security.
Implement measures to ensure confidentiality of personal, confidential, and sensitive data, including imposing confidentiality obligations on agents, subcontractors, or third parties.
Screen or vet third-party service providers handling PII for their data protection policies and require a data protection agreement.
RAF reserves the right to conduct security screening or vetting of company directors and resources.
Implement robust cybersecurity measures against threats like malware, phishing, and unauthorised access.
Use encryption for data in transit and at rest, complying with industry standards.
Regularly update and patch systems, software, and applications.
Have a documented incident response plan to address and mitigate data breaches promptly.
Report any security incidents or data breaches to RAF in a timely manner.
Ensure subcontractors adhere to the same data protection and cybersecurity standards.
The service provider is responsible for the actions and compliance of any subcontractors or third parties.
RAF reserves the right to audit and monitor the service provider's compliance with this policy.
The service provider must cooperate with any audits or assessments conducted by RAF.
The premises must have a secure perimeter with controlled access and/or surveillance systems, secure doors, locks, and alarms to prevent unauthorised access.
Implement physical security measures to ensure safety and security of documents.
Health & Safety
Source: Annexure A - Security Measures.pdf
The service provider's premises must have a fire suppression system or similar in place, such as fire extinguishers with carbon dioxide, to prevent damage or loss of documents and records in a fire.
The premises must have a secure perimeter with controlled access and/or surveillance systems, secure doors, locks, and alarms to prevent unauthorised access.
Implement physical security measures to ensure safety and security of documents.
Special Conditions
Source: Annexure A - Security Measures.pdf (unknown)
The service provider will be entrusted with RAF's confidential, private, personal, or sensitive information (files, data, documents) and must comply with the Protection of Personal Information Act.
Have protocols for proper handling and transport of files to and from the service provider's premises using a secure, lockable transportation system.
Keep files in lockable containers or packaging during handling and transportation to prevent loss, theft, or damage.
Maintain accurate records of each document stored, including location, access history, and retention schedule, organised for easy tracking.
Use secure protocols for document retrieval, including verifying requester identity and ensuring secure transport.
Maintain detailed records of all retrieval activities (date, time, requester identity, reason).
Store physical documents and records in lockable cabinets to prevent unauthorised access or tampering.
Ensure access to documents is controlled and monitored, with policies and procedures in place.
Control document access, permitting only authorised personnel to handle, view, or transport documents.
Have access monitoring and control procedures to ensure only authorised personnel are granted access to documents, records, and storage facility.
Implement network security measures.
The successful bid likely addressed this expectation, but the submitted evidence and evaluation reason are unavailable.
The linked award confirms appointment only, not the submitted qualification or reason for selection.
2Mandatory requirement
Must have secure facilities with physical security measures (controlled access, surveillance, 24/7 monitoring) and a fire suppression system.
Why it matters: The source identifies this as a mandatory or eligibility condition for a compliant bid.
No source document identifier is stored for this item.
Source: AI key requirements · requirements
Known supplier evidence
The linked award records BAMBOO STUDIO as appointed for this tender. Recorded contract value: 895402.2 ZAR.
Qualified inference
Inference only
The successful bid likely addressed this expectation, but the submitted evidence and evaluation reason are unavailable.
The linked award confirms appointment only, not the submitted qualification or reason for selection.
3Mandatory requirement
Must implement network security measures including firewalls, intrusion detection, and encryption for data in transit and at rest.
Why it matters: The source identifies this as a mandatory or eligibility condition for a compliant bid.
No source document identifier is stored for this item.
Source: AI key requirements · requirements
Known supplier evidence
The linked award records BAMBOO STUDIO as appointed for this tender. Recorded contract value: 895402.2 ZAR.
Qualified inference
Inference only
The successful bid likely addressed this expectation, but the submitted evidence and evaluation reason are unavailable.
The linked award confirms appointment only, not the submitted qualification or reason for selection.
4Mandatory requirement
Must have documented policies for data handling, access control, incident response, and must report any security incidents or data breaches to RAF promptly.
Why it matters: The source identifies this as a mandatory or eligibility condition for a compliant bid.
No source document identifier is stored for this item.
Source: AI key requirements · requirements
Known supplier evidence
The linked award records BAMBOO STUDIO as appointed for this tender. Recorded contract value: 895402.2 ZAR.
Qualified inference
Inference only
The successful bid likely addressed this expectation, but the submitted evidence and evaluation reason are unavailable.
The linked award confirms appointment only, not the submitted qualification or reason for selection.
5Mandatory requirement
The service provider must comply with the provisions of the Protection of Personal Information Act.
Why it matters: The source identifies this as a mandatory or eligibility condition for a compliant bid.
The linked award records BAMBOO STUDIO as appointed for this tender. Recorded contract value: 895402.2 ZAR.
Qualified inference
Inference only
The successful bid likely addressed this expectation, but the submitted evidence and evaluation reason are unavailable.
The linked award confirms appointment only, not the submitted qualification or reason for selection.
6Mandatory requirement
The service provider will be entrusted with RAF's confidential, private, personal, or sensitive information (files, data, documents) and must comply with the Protection of Personal Information Act.
Why it matters: The source identifies this as a mandatory or eligibility condition for a compliant bid.
The linked award records BAMBOO STUDIO as appointed for this tender. Recorded contract value: 895402.2 ZAR.
Qualified inference
Inference only
The successful bid likely addressed this expectation, but the submitted evidence and evaluation reason are unavailable.
The linked award confirms appointment only, not the submitted qualification or reason for selection.
15Inferred operational need
Implement technical and organisational security measures to protect RAF's confidential, private, personal, or sensitive information (files, data, documents).
Why it matters: This is a qualified operational interpretation of the stored scope, not a stated mandatory or scored criterion.
Inferred from stored analysis; verify against the source document. No source document identifier is stored for this item.
The linked award records BAMBOO STUDIO as appointed for this tender. Recorded contract value: 895402.2 ZAR.
Qualified inference
Inference only
The successful bid likely addressed this expectation, but the submitted evidence and evaluation reason are unavailable.
The linked award confirms appointment only, not the submitted qualification or reason for selection.
16Mandatory requirement
The Road Accident Fund (RAF) seeks to appoint an accredited reseller, implementer, or support partner of Thinkst Canary to provide a Decoy/Honeypot System and Support Services for a two-year period. The solution must include licenses, management components, and Decoy/Honeypot assets with a centralised management platform.
Why it matters: The source identifies this as a mandatory or eligibility condition for a compliant bid.
The linked award records BAMBOO STUDIO as appointed for this tender. Recorded contract value: 895402.2 ZAR.
Qualified inference
Inference only
The successful bid likely addressed this expectation, but the submitted evidence and evaluation reason are unavailable.
The linked award confirms appointment only, not the submitted qualification or reason for selection.
17Inferred operational need
The Road Accident Fund (RAF) invites bids from any natural or juristic person to appoint an accredited reseller, implementer, and support partner of Thinkst Canary.
Why it matters: This is a qualified operational interpretation of the stored scope, not a stated mandatory or scored criterion.
Inferred from stored analysis; verify against the source document.
The linked award records BAMBOO STUDIO as appointed for this tender. Recorded contract value: 895402.2 ZAR.
Qualified inference
Inference only
The successful bid likely addressed this expectation, but the submitted evidence and evaluation reason are unavailable.
The linked award confirms appointment only, not the submitted qualification or reason for selection.
18Mandatory requirement
The bid must comply with principles of transparency, accountability, impartiality, and ethics as per the Constitution of South Africa and relevant legislation.
Why it matters: The source identifies this as a mandatory or eligibility condition for a compliant bid.
The linked award records BAMBOO STUDIO as appointed for this tender. Recorded contract value: 895402.2 ZAR.
Qualified inference
Inference only
The successful bid likely addressed this expectation, but the submitted evidence and evaluation reason are unavailable.
The linked award confirms appointment only, not the submitted qualification or reason for selection.
19Delivery obligation
Prices must be VAT-inclusive (if VAT-registered) and quoted in ZAR. VAT vendors must include VAT; failure to do so means the quoted price is deemed all-inclusive. Non-VAT-registered suppliers charging VAT will be disqualified. Only prices in the provided cost breakdown table will be evaluated; missing prices lead to disqualification. No price changes allowed after Award Letter/PO issuance. Ad-hoc services must be quoted with rates inclusive of VAT (if applicable).
Why it matters: The source says this applies after appointment and concerns contract delivery.
No source document identifier is stored for this item.
The linked award records BAMBOO STUDIO as appointed for this tender. Recorded contract value: 895402.2 ZAR.
Qualified inference
Inference only
The successful bid likely addressed this expectation, but the submitted evidence and evaluation reason are unavailable.
The linked award confirms appointment only, not the submitted qualification or reason for selection.
20Mandatory requirement
Must ensure subcontractors adhere to the same data protection and cybersecurity standards, and accept responsibility for their compliance.
Why it matters: The source identifies this as a mandatory or eligibility condition for a compliant bid.
No source document identifier is stored for this item.
Source: AI key requirements · requirements
Known supplier evidence
The linked award records BAMBOO STUDIO as appointed for this tender. Recorded contract value: 895402.2 ZAR.
Qualified inference
Inference only
The successful bid likely addressed this expectation, but the submitted evidence and evaluation reason are unavailable.
The linked award confirms appointment only, not the submitted qualification or reason for selection.
21Inferred operational need
Implement physical security measures to ensure safety and security of documents.
Why it matters: This is a qualified operational interpretation of the stored scope, not a stated mandatory or scored criterion.
Inferred from stored analysis; verify against the source document. Inferred from stored analysis; verify against the source document. No source document identifier is stored for this item.
The linked award records BAMBOO STUDIO as appointed for this tender. Recorded contract value: 895402.2 ZAR.
Qualified inference
Inference only
The successful bid likely addressed this expectation, but the submitted evidence and evaluation reason are unavailable.
The linked award confirms appointment only, not the submitted qualification or reason for selection.
32Mandatory requirement
Must be an accredited reseller, implementer, or support partner of Thinkst Canary. Submit a valid Accreditation Certificate or Letter of Accreditation from the OEM by closing date. CSD registration is mandatory. Tax compliance with SARS is required. Complete SBD 4 (Bidders Disclosure) and SBD 6.1 (PPR 2022). Suppliers with disabilities must provide a valid medical certificate. Collusive bidding or multiple submissions from related entities are prohibited.
Why it matters: The source identifies this as a mandatory or eligibility condition for a compliant bid.
No source document identifier is stored for this item.
The linked award records BAMBOO STUDIO as appointed for this tender. Recorded contract value: 895402.2 ZAR.
Qualified inference
Inference only
The successful bid likely addressed this expectation, but the submitted evidence and evaluation reason are unavailable.
The linked award confirms appointment only, not the submitted qualification or reason for selection.
33Inferred operational need
Fraudulent claims may result in disqualification, cost recovery, contract cancellation, business restrictions for up to 10 years, or criminal prosecution.
Threshold: 10 years
Why it matters: This is a qualified operational interpretation of the stored scope, not a stated mandatory or scored criterion.
Inferred from stored analysis; verify against the source document. No source document identifier is stored for this item.
The linked award records BAMBOO STUDIO as appointed for this tender. Recorded contract value: 895402.2 ZAR.
Qualified inference
Inference only
The successful bid likely addressed this expectation, but the submitted evidence and evaluation reason are unavailable.
The linked award confirms appointment only, not the submitted qualification or reason for selection.
41Inferred operational need
Collusive bidding or disclosure of bid terms to competitors is prohibited and may result in penalties, including restriction from public sector business for up to 10 years.
Threshold: 10 years
Why it matters: This is a qualified operational interpretation of the stored scope, not a stated mandatory or scored criterion.
Inferred from stored analysis; verify against the source document. No source document identifier is stored for this item.
The linked award records BAMBOO STUDIO as appointed for this tender. Recorded contract value: 895402.2 ZAR.
Qualified inference
Inference only
The successful bid likely addressed this expectation, but the submitted evidence and evaluation reason are unavailable.
The linked award confirms appointment only, not the submitted qualification or reason for selection.
54Mandatory requirement
Submit all RFQ responses via email to [email protected]. Late submissions will not be accepted. Complete and sign all Annexures (Standard Bidding Documents and Mandatory Evaluation documents). Suppliers with disabilities must provide a valid medical certificate. Only CSD-registered suppliers will be considered. Collusive bidding or multiple submissions from related entities will result in disqualification. No gifts, hospitality, or benefits may be offered to RAF officials; report any solicitation to 0800 005919 or risk disqualification. Use RFQ number PR10116909 as reference in all correspondence.
Why it matters: The source identifies this as a mandatory or eligibility condition for a compliant bid.
No source document identifier is stored for this item.
The linked award records BAMBOO STUDIO as appointed for this tender. Recorded contract value: 895402.2 ZAR.
Qualified inference
Inference only
The successful bid likely addressed this expectation, but the submitted evidence and evaluation reason are unavailable.
The linked award confirms appointment only, not the submitted qualification or reason for selection.
62Scored criterionConflicting classification
Bidders listed in the Register for Tender Defaulters or List of Restricted Suppliers will be automatically disqualified.
Why it matters: The source places this item in the evaluation criteria; the recorded weight or threshold is shown when available.
No source document identifier is stored for this item. Conflicting source classifications: scored_criterion and inferred_operational_need. Inferred from stored analysis; verify against the source document. No source document identifier is stored for this item.
The linked award records BAMBOO STUDIO as appointed for this tender. Recorded contract value: 895402.2 ZAR.
Qualified inference
Inference only
The successful bid likely addressed this expectation, but the submitted evidence and evaluation reason are unavailable.
The linked award confirms appointment only, not the submitted qualification or reason for selection.
68Mandatory requirement
The service provider's premises must have a fire suppression system or similar in place, such as fire extinguishers with carbon dioxide, to prevent damage or loss of documents and records in a fire.
Why it matters: The source identifies this as a mandatory or eligibility condition for a compliant bid.
The linked award records BAMBOO STUDIO as appointed for this tender. Recorded contract value: 895402.2 ZAR.
Qualified inference
Inference only
The successful bid likely addressed this expectation, but the submitted evidence and evaluation reason are unavailable.
The linked award confirms appointment only, not the submitted qualification or reason for selection.
69Mandatory requirement
The premises must have a secure perimeter with controlled access and/or surveillance systems, secure doors, locks, and alarms to prevent unauthorised access.
Why it matters: The source identifies this as a mandatory or eligibility condition for a compliant bid.
No source document identifier is stored for this item.
The linked award records BAMBOO STUDIO as appointed for this tender. Recorded contract value: 895402.2 ZAR.
Qualified inference
Inference only
The successful bid likely addressed this expectation, but the submitted evidence and evaluation reason are unavailable.
The linked award confirms appointment only, not the submitted qualification or reason for selection.
72Inferred operational need
Protect all document storage facilities against unauthorised access.
Why it matters: This is a qualified operational interpretation of the stored scope, not a stated mandatory or scored criterion.
Inferred from stored analysis; verify against the source document. Inferred from stored analysis; verify against the source document. No source document identifier is stored for this item.
The linked award records BAMBOO STUDIO as appointed for this tender. Recorded contract value: 895402.2 ZAR.
Qualified inference
Inference only
The successful bid likely addressed this expectation, but the submitted evidence and evaluation reason are unavailable.
The linked award confirms appointment only, not the submitted qualification or reason for selection.
73Inferred operational need
Immediately inform RAF of any real, attempted, or suspected breach of physical security and provide evidence (e.g., CCTV footage, police reports).
Why it matters: This is a qualified operational interpretation of the stored scope, not a stated mandatory or scored criterion.
Inferred from stored analysis; verify against the source document. Inferred from stored analysis; verify against the source document. No source document identifier is stored for this item.
The linked award records BAMBOO STUDIO as appointed for this tender. Recorded contract value: 895402.2 ZAR.
Qualified inference
Inference only
The successful bid likely addressed this expectation, but the submitted evidence and evaluation reason are unavailable.
The linked award confirms appointment only, not the submitted qualification or reason for selection.
74Inferred operational need
Implement network security measures such as firewalls, intrusion detection, and encryption.
Why it matters: This is a qualified operational interpretation of the stored scope, not a stated mandatory or scored criterion.
Inferred from stored analysis; verify against the source document. Inferred from stored analysis; verify against the source document. No source document identifier is stored for this item.
The linked award records BAMBOO STUDIO as appointed for this tender. Recorded contract value: 895402.2 ZAR.
Qualified inference
Inference only
The successful bid likely addressed this expectation, but the submitted evidence and evaluation reason are unavailable.
The linked award confirms appointment only, not the submitted qualification or reason for selection.
75Inferred operational need
Grant access on a need-to-know basis using strong authentication methods.
Why it matters: This is a qualified operational interpretation of the stored scope, not a stated mandatory or scored criterion.
Inferred from stored analysis; verify against the source document. Inferred from stored analysis; verify against the source document. No source document identifier is stored for this item.
The linked award records BAMBOO STUDIO as appointed for this tender. Recorded contract value: 895402.2 ZAR.
Qualified inference
Inference only
The successful bid likely addressed this expectation, but the submitted evidence and evaluation reason are unavailable.
The linked award confirms appointment only, not the submitted qualification or reason for selection.
76Inferred operational need
Regularly review and update access permissions.
Why it matters: This is a qualified operational interpretation of the stored scope, not a stated mandatory or scored criterion.
Inferred from stored analysis; verify against the source document. Inferred from stored analysis; verify against the source document. No source document identifier is stored for this item.
The linked award records BAMBOO STUDIO as appointed for this tender. Recorded contract value: 895402.2 ZAR.
Qualified inference
Inference only
The successful bid likely addressed this expectation, but the submitted evidence and evaluation reason are unavailable.
The linked award confirms appointment only, not the submitted qualification or reason for selection.
77Inferred operational need
Handle and process personal and sensitive data in compliance with applicable data protection laws.
Why it matters: This is a qualified operational interpretation of the stored scope, not a stated mandatory or scored criterion.
Inferred from stored analysis; verify against the source document. Inferred from stored analysis; verify against the source document. No source document identifier is stored for this item.
The linked award records BAMBOO STUDIO as appointed for this tender. Recorded contract value: 895402.2 ZAR.
Qualified inference
Inference only
The successful bid likely addressed this expectation, but the submitted evidence and evaluation reason are unavailable.
The linked award confirms appointment only, not the submitted qualification or reason for selection.
78Inferred operational need
Safeguard data against unauthorised access, disclosure, alteration, and destruction.
Why it matters: This is a qualified operational interpretation of the stored scope, not a stated mandatory or scored criterion.
Inferred from stored analysis; verify against the source document. Inferred from stored analysis; verify against the source document. No source document identifier is stored for this item.
The linked award records BAMBOO STUDIO as appointed for this tender. Recorded contract value: 895402.2 ZAR.
Qualified inference
Inference only
The successful bid likely addressed this expectation, but the submitted evidence and evaluation reason are unavailable.
The linked award confirms appointment only, not the submitted qualification or reason for selection.
79Inferred operational need
Inform RAF immediately of any data breaches or incidents impacting information security.
Why it matters: This is a qualified operational interpretation of the stored scope, not a stated mandatory or scored criterion.
Inferred from stored analysis; verify against the source document. Inferred from stored analysis; verify against the source document. No source document identifier is stored for this item.
The linked award records BAMBOO STUDIO as appointed for this tender. Recorded contract value: 895402.2 ZAR.
Qualified inference
Inference only
The successful bid likely addressed this expectation, but the submitted evidence and evaluation reason are unavailable.
The linked award confirms appointment only, not the submitted qualification or reason for selection.
80Inferred operational need
Implement measures to ensure confidentiality of personal, confidential, and sensitive data, including imposing confidentiality obligations on agents, subcontractors, or third parties.
Why it matters: This is a qualified operational interpretation of the stored scope, not a stated mandatory or scored criterion.
Inferred from stored analysis; verify against the source document. Inferred from stored analysis; verify against the source document. No source document identifier is stored for this item.
The linked award records BAMBOO STUDIO as appointed for this tender. Recorded contract value: 895402.2 ZAR.
Qualified inference
Inference only
The successful bid likely addressed this expectation, but the submitted evidence and evaluation reason are unavailable.
The linked award confirms appointment only, not the submitted qualification or reason for selection.
81Inferred operational need
Screen or vet third-party service providers handling PII for their data protection policies and require a data protection agreement.
Why it matters: This is a qualified operational interpretation of the stored scope, not a stated mandatory or scored criterion.
Inferred from stored analysis; verify against the source document. Inferred from stored analysis; verify against the source document. No source document identifier is stored for this item.
The linked award records BAMBOO STUDIO as appointed for this tender. Recorded contract value: 895402.2 ZAR.
Qualified inference
Inference only
The successful bid likely addressed this expectation, but the submitted evidence and evaluation reason are unavailable.
The linked award confirms appointment only, not the submitted qualification or reason for selection.
82Inferred operational need
RAF reserves the right to conduct security screening or vetting of company directors and resources.
Why it matters: This is a qualified operational interpretation of the stored scope, not a stated mandatory or scored criterion.
Inferred from stored analysis; verify against the source document. Inferred from stored analysis; verify against the source document. No source document identifier is stored for this item.
The linked award records BAMBOO STUDIO as appointed for this tender. Recorded contract value: 895402.2 ZAR.
Qualified inference
Inference only
The successful bid likely addressed this expectation, but the submitted evidence and evaluation reason are unavailable.
The linked award confirms appointment only, not the submitted qualification or reason for selection.
83Inferred operational need
Implement robust cybersecurity measures against threats like malware, phishing, and unauthorised access.
Why it matters: This is a qualified operational interpretation of the stored scope, not a stated mandatory or scored criterion.
Inferred from stored analysis; verify against the source document. Inferred from stored analysis; verify against the source document. No source document identifier is stored for this item.
The linked award records BAMBOO STUDIO as appointed for this tender. Recorded contract value: 895402.2 ZAR.
Qualified inference
Inference only
The successful bid likely addressed this expectation, but the submitted evidence and evaluation reason are unavailable.
The linked award confirms appointment only, not the submitted qualification or reason for selection.
84Inferred operational need
Use encryption for data in transit and at rest, complying with industry standards.
Why it matters: This is a qualified operational interpretation of the stored scope, not a stated mandatory or scored criterion.
Inferred from stored analysis; verify against the source document. Inferred from stored analysis; verify against the source document. No source document identifier is stored for this item.
The linked award records BAMBOO STUDIO as appointed for this tender. Recorded contract value: 895402.2 ZAR.
Qualified inference
Inference only
The successful bid likely addressed this expectation, but the submitted evidence and evaluation reason are unavailable.
The linked award confirms appointment only, not the submitted qualification or reason for selection.
85Inferred operational need
Regularly update and patch systems, software, and applications.
Why it matters: This is a qualified operational interpretation of the stored scope, not a stated mandatory or scored criterion.
Inferred from stored analysis; verify against the source document. Inferred from stored analysis; verify against the source document. No source document identifier is stored for this item.
The linked award records BAMBOO STUDIO as appointed for this tender. Recorded contract value: 895402.2 ZAR.
Qualified inference
Inference only
The successful bid likely addressed this expectation, but the submitted evidence and evaluation reason are unavailable.
The linked award confirms appointment only, not the submitted qualification or reason for selection.
86Inferred operational need
Have a documented incident response plan to address and mitigate data breaches promptly.
Why it matters: This is a qualified operational interpretation of the stored scope, not a stated mandatory or scored criterion.
Inferred from stored analysis; verify against the source document. Inferred from stored analysis; verify against the source document. No source document identifier is stored for this item.
The linked award records BAMBOO STUDIO as appointed for this tender. Recorded contract value: 895402.2 ZAR.
Qualified inference
Inference only
The successful bid likely addressed this expectation, but the submitted evidence and evaluation reason are unavailable.
The linked award confirms appointment only, not the submitted qualification or reason for selection.
87Inferred operational need
Report any security incidents or data breaches to RAF in a timely manner.
Why it matters: This is a qualified operational interpretation of the stored scope, not a stated mandatory or scored criterion.
Inferred from stored analysis; verify against the source document. Inferred from stored analysis; verify against the source document. No source document identifier is stored for this item.
The linked award records BAMBOO STUDIO as appointed for this tender. Recorded contract value: 895402.2 ZAR.
Qualified inference
Inference only
The successful bid likely addressed this expectation, but the submitted evidence and evaluation reason are unavailable.
The linked award confirms appointment only, not the submitted qualification or reason for selection.
88Inferred operational need
Ensure subcontractors adhere to the same data protection and cybersecurity standards.
Why it matters: This is a qualified operational interpretation of the stored scope, not a stated mandatory or scored criterion.
Inferred from stored analysis; verify against the source document. Inferred from stored analysis; verify against the source document. No source document identifier is stored for this item.
The linked award records BAMBOO STUDIO as appointed for this tender. Recorded contract value: 895402.2 ZAR.
Qualified inference
Inference only
The successful bid likely addressed this expectation, but the submitted evidence and evaluation reason are unavailable.
The linked award confirms appointment only, not the submitted qualification or reason for selection.
89Inferred operational need
The service provider is responsible for the actions and compliance of any subcontractors or third parties.
Why it matters: This is a qualified operational interpretation of the stored scope, not a stated mandatory or scored criterion.
Inferred from stored analysis; verify against the source document. Inferred from stored analysis; verify against the source document. No source document identifier is stored for this item.
The linked award records BAMBOO STUDIO as appointed for this tender. Recorded contract value: 895402.2 ZAR.
Qualified inference
Inference only
The successful bid likely addressed this expectation, but the submitted evidence and evaluation reason are unavailable.
The linked award confirms appointment only, not the submitted qualification or reason for selection.
90Inferred operational need
RAF reserves the right to audit and monitor the service provider's compliance with this policy.
Why it matters: This is a qualified operational interpretation of the stored scope, not a stated mandatory or scored criterion.
Inferred from stored analysis; verify against the source document. Inferred from stored analysis; verify against the source document. No source document identifier is stored for this item.
The linked award records BAMBOO STUDIO as appointed for this tender. Recorded contract value: 895402.2 ZAR.
Qualified inference
Inference only
The successful bid likely addressed this expectation, but the submitted evidence and evaluation reason are unavailable.
The linked award confirms appointment only, not the submitted qualification or reason for selection.
92Delivery obligation
Supply, implement, configure, and support a Thinkst Canary Decoy/Honeypot System with all required licenses and a centralised management platform. Provide real-time detection and alerting for: unauthorised access attempts, network reconnaissance, privilege escalation, lateral movement, insider threats, malware and ransomware. Generate high-fidelity alerts with minimal false positives. Provide centralised dashboards and reporting for security events, threat activity, system health, and operational status. Integrate with Microsoft Sentinel SIEM and Microsoft Entra-ID/Active Directory. Provide threat intelligence aligned to MITRE ATT&CK framework. Maintain detailed audit logs. Provide regular software updates, security patches, and threat intelligence updates. Include knowledge transfer, administrator training, implementation documentation, and operational support documentation. Support deployment of multiple Decoy/Honeypot types: endpoint, server, database, application, Active Directory, network service, credential. Provide technical support and maintenance, including incident response assistance, software upgrades, and vendor escalation support during the contract period.
Why it matters: The source says this applies after appointment and concerns contract delivery.
No source document identifier is stored for this item.
The linked award records BAMBOO STUDIO as appointed for this tender. Recorded contract value: 895402.2 ZAR.
Qualified inference
Inference only
The successful bid likely addressed this expectation, but the submitted evidence and evaluation reason are unavailable.
The linked award confirms appointment only, not the submitted qualification or reason for selection.
93Mandatory requirementConflicting classification
Phase 1: Mandatory Requirements (pass/fail). Must be an accredited reseller/implementer/support partner of Thinkst Canary (submit valid accreditation certificate or letter from OEM by closing date). Must be CSD-registered. Tax matters must be in order with SARS. No collusive bidding or multiple submissions from entities with shared directors/shareholders. Must not have offered gifts/hospitality to RAF officials or failed to report solicited bribes. Phase 2: 80/20 preference point system. Price: 80 points. Specific Goals: 20 points (HDI status - Black South Africans, females, persons with disabilities; per Preferential Procurement Policy Framework Act, 2022).
Threshold: 80 points
Why it matters: The source identifies this as a mandatory or eligibility condition for a compliant bid.
No source document identifier is stored for this item.
The linked award records BAMBOO STUDIO as appointed for this tender. Recorded contract value: 895402.2 ZAR.
Qualified inference
Inference only
The successful bid likely addressed this expectation, but the submitted evidence and evaluation reason are unavailable.
The linked award confirms appointment only, not the submitted qualification or reason for selection.
The Road Accident Fund (RAF) wishes to appoint a suitable service provider to provide cleaning services for Kimberly CSC office for the period of 12 months.PR10113287