Tender Application Workspace for
Review the deadline, returnables and available preparation tools for this tender.
View public tender detailsProvince
Gauteng
Closing Date
16 October 2026 at 11:00
Estimated Value
Value not specified
Comprehensive information security and cybersecurity services are required by postbank soc for a period of three years, covering a 24/7 security operations centre, endpoint protection, zero-trust network security, identity and access management, privileged access management, data protection, incident response, threat intelligence, and governance. The most consequential requirement is the mandatory minimum of 70 out of 100 points on functionality evaluation, with strict slas including a 15-minute mean time to detect and 30-minute mean time to respond, and the provider must hold professional indemnity insurance of at least r20 million and be certified or partnered with at least three of iso 27001, pci dss qsa, cissp, ceh, or oscp.
Quick Summary
- Postbank SOC
- Gauteng
- Closes 16 October 2026 at 11:00 (1 day left)
AI-Analyzed Compliance Requirements
61 pointsPoint-by-point requirements consolidated and deduplicated from 1 analyzed document.
Submission Requirements
5- Submission channel: email to [email protected].
- Closing: 18 September 2026 at 11:00 am. Late bids not accepted.
- Bids must be on official forms provided (SBD 1, SBD 7) and not re-typed.
- Returnable documents: SBD 1 (Invitation to Bid), SBD 7 (Contract Form), proof of tax compliance (TCS PIN or CSD number), and mandatory documents: confirmation letter, team credentials (CISO, CISSP), proof of physical office in South Africa, technical response document, recovery…
- Disqualification risks: unsigned forms, missing mandatory documents, late submission, non-compliance with tax or CSD requirements.
Evaluation Criteria
7- Phase 1: Mandatory requirements (confirmation letter, team credentials, office, technical response, recovery assurance). Must pass.
- Phase 2: Functionality scored out of 100 points.
- Four sub-criteria each 25 points: Cyber Defense & Ransomware Strategy, Recovery & Cyber Resilience, SOC & Incident Response Operating Model, Financial Sector Delivery Depth.
- Minimum 70 points to proceed.
- Phase 3: Live demonstration for shortlisted bidders.
- Phase 4: Commercial evaluation using 80/20 or 90/10 preference point system (price and specific goals).
- Independent verification rights reserved.
Technical Requirements
8- Scope: Comprehensive managed cybersecurity services for Postbank for 3 years.
- Key service areas: 24/7 Security Operations Centre (SOC), Endpoint Detection and Response (EDR/XDR), Zero Trust Network Security, Identity and Access Management (IGA, MFA, SSO), Privileged Access Management (PAM), Data Protection (DLP, encryption, HSM), Incident Response and For…
- Deliverables: Deployment roadmap, monthly/quarterly reports, annual threat intelligence report, ransomware readiness report, cyber recovery validation, knowledge transfer, and exit migration package.
- SLAs: MTTD 15 min, MTTR 30 min, patch compliance 95% within 7 days (critical), SOC uptime 99.9%, ransomware recovery 100%, critical incident containment within 60 min, identity compromise containment within 15 min, critical asset log coverage >=95%, EDR/XDR coverage >=95%, overd…
- Insurance: Professional Indemnity minimum R20 million.
- Certifications: Provider must be certified/partnered with at least 3 of ISO 27001, PCI DSS QSA, CISSP, CEH, OSCP.
- Data sovereignty: All infrastructure and data within South Africa.
- Personnel vetting: ITC and criminal clearance required.
Methodology
2- Scope of work includes 15 service areas: SOC, Endpoint Security, Zero Trust Network, Identity and Authentication, PAM, Data Protection, Incident Response, Threat Intelligence, Governance, Awareness, Audit, Security Device Management, Email Security, Patch Management, Cloud Secur…
- Deliverables include deployment roadmap, documentation, reports, knowledge transfer, and exit plan.
Experience & Qualifications
3- Team credentials: minimum two certified resources - CISO and CISSP.
- References: Technical Response Document must demonstrate experience in managed cybersecurity services for a regulated financial institution (bank, payment institution, insurer) or equivalent in last 3 years.
- Evaluation criterion 'Financial Sector Delivery Depth' (25 points) assesses past experience with banking/financial clients.
Quality Management
4- Compliance with SARB, POPIA, PCI DSS, ISO 27001, NIST CSF.
- Must maintain ISMS, quarterly compliance assessments, support for PCI DSS certification, risk register, cyber resilience evidence packs.
- Quarterly risk and compliance reports.
- Control mapping required.
Financial Requirements
3- No upfront payment.
- Pricing must be submitted on the provided Pricing Schedule/Costing Model.
- Bid validity 180 days.
Compliance & Regulatory
6- CSD registration required.
- Tax compliance: Submit TCS PIN or CSD number. Must be valid.
- B-BBEE: PPPFA applies. Preference points system (80/20 or 90/10) for price and specific goals.
- Mandatory documents: proof of CSD, tax compliance, B-BBEE certificate.
- Provider must have certifications: ISO 27001, PCI DSS, etc. as per technical specs.
- Local content: Not specified.
B-BBEE
4- Postbank supports B-BBEE.
- The PPPFA and Preferential Procurement Regulations 2022 apply.
- Bidders must demonstrate commitment to B-BBEE in ownership, skills transfer, employment equity, and procurement practices.
- Preference points will be awarded based on price and specific goals.
Contractual Terms
6- Joint Controls and Transparency: Postbank gets direct access to logs, dashboards, vulnerability results.
- Bidder must not obstruct audits or forensic investigations.
- Quarterly governance reviews.
- Annual cyber resilience stress testing.
- Exit and Handover: transition plan within 6 months, handover program 6 months before expiry, complete documentation, training, tooling portability.
- Final objective: seamless handover without degradation.
Special Conditions
6- Postbank may request written clarification, cancel or reject any proposal, not award to lowest bidder, or award parts.
- Bidders accept evaluation criteria.
- Postbank may conduct benchmarks.
- Changing wording will be evaluated as original.
- Subject to Government Procurement General Conditions and Special Conditions.
- Postbank may verify information, not accept any quotation, cancel or re-issue.
Other Requirements
3- Mandatory requirements: 1) Confirmation letter on company letterhead confirming full compliance.
- 3) Physical office in South Africa (preferably Pretoria or Johannesburg) with proof.
- 5) Recovery Assurance Capability: compliance reports for PCI DSS (ROC), ISO27001, and POPIA.
Evaluation criteria
3- Evaluation Phases: Phase 1 - Mandatory Requirements (confirmation letter, team credentials, office location, references, recovery assurance).
- Minimum 70 points.
- Phase 3 - Live Demonstration.
Contact
1- Enquiries: Vusi Maditsi ([email protected]) and Thabo Mokhabi ([email protected]).
Source confidence
High source confidence
Official source
eTenders.gov.za
Documents found
1
Last checked
15 Oct 2026
AI status
Enhanced
Data conflicts
None detected
This tender has strong source evidence, including source metadata and supporting tender information synced from the government tender portal.
Tenders SA is not the issuing authority. All tenders are automatically synced from the official government tender portal. Always confirm final submission details, closing dates, briefing sessions, eligibility requirements, and documents on the official government portal before applying.
The appointment of a qualified and experienced service provider to deliver comprehensive Information Security and Cybersecurity services for a period of three (3) years.
Increase your winning chances
Most bidders are rejected due to compliance gaps. Use our Readiness Engine to verify your status for this specific Information and communication.
Check My ReadinessImportant Dates & Timeline
2 key dates
Tender Closing Date
16 October 2026 at 11:00
1
Days Left
Tender Published
21 August 2026
Tender was published
Tender Closing Date
16 October 2026 at 11:00
Final deadline for submission
Postbank SOC
Contact Information
www.postbank.co.za/Operating Provinces
Key Personnel
AI Document Analysis Stages
- Document read. The full tender notice and its supporting documents are read end-to-end. Key sections, requirements, dates, and contact details are identified and pulled into a working summary you can act on.
- Compliance review. The working summary is checked against South African procurement standards — PFMA, PPPFA, B-BBEE, CIDB, local content, and preferential procurement — so nothing critical is missed before you start your bid response.
- Bid-ready summary. The submission guidelines, evaluation criteria, technical, financial, and compliance sections are refined into professional, easy-to-scan prose. This is the final version you can rely on when preparing your bid or briefing your team.
We refine every tender document through these stages so you can brief your team and prepare your bid with confidence. Anything marked as "in progress" will be upgraded automatically — no action required from you.
- Document read
- Compliance review
- Bid-ready summary
RFP No. 04-06-26-27 - Cybersecurity Services.pdf
95% High ConfidenceAI Analysis Summary
Recommended Actions
RFP No. 04-06-26-27 - Cybersecurity Services.pdf
Share this tender
The appointment of a qualified and experienced service provider to deliver comprehensive Information Security and Cybersecurity services for a period of three (3) years.
Postbank SOC tender in Gauteng. Closing 10/16/2026. The appointment of a qualified and experienced service provider to deliver comprehensive Information Security and Cybersecurity services for a period ...
Smart Assistant
Check if your company qualifies for this tender before you apply.
How it Works
Organization
Postbank SOC
Contact Person
Wilfred Vusi Maditsi
Phone
076-706-9269
[email protected]
Website
www.postbank.co.za/
Address
173 Nelson Mandela Dr, Westdene, Bloemfontein, 9301, South Africa
16 October 2026 at 11:00
Location
Gauteng
Closing Date
16 October 2026 at 11:00
Organization
Postbank SOC
Urgent: Closing Soon
This tender closes in less than 3 days
Upcoming Deadlines
Some requirements have upcoming deadlines
Are you a news editor or niche publisher? Embed this tender data directly on your site for free.
Get Embed CodeAI-generated Document Analysis for Tender by Postbank SOC. 1 business days remain.