Appointment of a service provider for digital forensic investigation of malware incidents at fape and alleged data theft incidents at famm

{"name":"Procurement Specialist – Lesedi Mashiloane","email":"[email protected]","phone":null,"department":null,"address":"d Name of Bidder"}

Ps= 80(1−Pt−Pmin )

Pmin

Where

Ps = Points scored for price of tender under consideration

Pt = Price of tender under consideration

Pmin = Price of lowest acceptable tender

3.2. Formulae for disposal or leasing of state assets and income

Generating procurement

27 | P a g e

3.2.1. Points awarded for price

A maximum of 80 or 90 points is allocated for price on the following basis:

Pt−Pmax

Ps= 80(1+ )

Pmax

Where

Ps = Points scored for price of tender under consideration

Pt = Price of tender under consideration

Pmax = Price of highest acceptable tender

4. Points awarded for specific goals

4.1. In terms of Regulation 4(2); 5(2); 6(2) and 7(2) of the Preferential Procurement

Regulations, preference points must be awarded for specific goals stated in the tender.

For the purposes of this tender the tenderer will be allocated points based on the goals

stated in table 1 below as may be supported by proof/ documentation stated in the

conditions of this tender:

4.2. In cases where organs of state intend to use Regulation 3(2) of the Regulations, which

states that, if it is unclear whether the 80/20 or 90/10 preference point system applies,

an organ of state must, in the tender documents, stipulate in the case of—

(a) an invitation for tender for income-generating contracts, that either the 80/20

or 90/10 preference point system will apply and that the highest acceptable

tender will be used to determine the applicable preference point system; or

(b) any other invitation for tender, that either the 80/20 or 90/10 preference point

system will apply and that the lowest acceptable tender will be used to

determine the applicable preference point system,

then the organ of state must indicate the points allocated for specific goals for both the

90/10 and 80/20 preference point system.

Table 1: Specific goals for the tender and points claimed are indicated per the table

below.

(Note to organs of state: Where either the 90/10 or 80/20 preference point system is

applicable, corresponding points must also be indicated as such.

Note to tenderers: The tenderer must indicate how they claim points for each

preference point system.)

28 | P a g e

Number of points Number of points

claimed (80/20 allocated

system)

The specific goals allocated points in terms of (80/20 system)

this tender (To be completed

(To be completed by the tenderer)

by the organ of

state)

51% Black Owned suppliers (Section 2(1)(d)(i) of 20

the PPPFA)

Declaration with regard to company/firm

4.3. Name of company/firm...............................................................................

4.4. Company registration number: .....................................................................

4.5. Type of company/ firm

 Partnership/Joint Venture / Consortium

 One-person business/sole propriety

 Close corporation

 Public Company

 Personal Liability Company

 (Pty) Limited

 Non-Profit Company

 State Owned Company

[Tick applicable box]

4.6. I, the undersigned, who is duly authorised to do so on behalf of the company/firm,

certify that the points claimed, based on the specific goals as advised in the tender,

qualifies the company/ firm for the preference(s) shown and I acknowledge that:

i) The information furnished is true and correct;

ii) The preference points claimed are in accordance with the General Conditions as

indicated in paragraph 1 of this form;

iii) In the event of a contract being awarded as a result of points claimed as shown

in paragraphs 1.4 and 4.2, the contractor may be required to furnish documentary

proof to the satisfaction of the organ of state that the claims are correct;

iv) If the specific goals have been claimed or obtained on a fraudulent basis or any

of the conditions of contract have not been fulfilled, the organ of state may, in

addition to any other remedy it may have –

(a) disqualify the person from the tendering process;

(b) recover costs, losses or damages it has incurred or suffered as a

29 | P a g e

About ATNS

The Air Traffic and Navigation Services (ATNS) Company of South Africa provides air traffic

management, communication, surveillance, navigation, and related services, including

training. ATNS manages 10% of the world’s airspace and employs over 1,100 staff to ensure

safe, efficient, and orderly air traffic services across 21 aerodromes in South Africa,

including OR Tambo, Cape Town, and King Shaka International Airports. In the broader African

region, ATNS supports aeronautical satellite communication (VSAT networks) across 33

states, connecting the continent from Cape to Cairo and extending to the Middle East.

ATNS Vision:

To be the leading provider of air traffic management solutions and associated services across

Africa and select international markets.

ATNS Mission:

To provide safe, expeditious, and efficient air traffic management solutions, while ensuring

economic, social, and environmental sustainability.

ATNS values include:

Safety and Customer Centricity: Prioritising customer needs and ensuring that

safety is non-negotiable

Accountability: Holding ourselves and others accountable for our actions

Agility: Ensuring that we are flexible and adaptable to change

Diversity: Embracing inclusion, equality and social differences

Integrity: Following a moral and incorruptible corporate code

7 | P a g e

ATNS Business Environment

ATNS is a State-Owned Company (SOC), established in 1993 under the ATNS Company Act

(Act ) to provide air traffic services aligned with ICAO standards and South African

Civil Aviation Regulations. As a commercialised air navigation service provider (ANSP), ATNS

operates on a “user-pays” principle, relying on revenues and debt funding to cover operational

and capital expenses.

Regulated Business Activities

ATNS regulated activities contribute 90% of its revenue. Key offerings include:

Air navigation services: Planning, operating, and maintaining airspace infrastructure

such as communication, navigation, and surveillance (CNS) systems.

Air traffic service charges: Governed by the Economic Regulating Committee (RC),

ATNS sets service tariffs and maintains service standards under a five-year permission

structure.

Training: The ATNS Aviation Training Academy (ATA) provides internationally

accredited air traffic services and technical training, earning recognition as IATA’s Top

Regional Training Partner in 2012 and 2013.

Non-Regulated Business Activities:

ATNS non-regulated operations contribute 10% of revenue and focus on regional

expansion through a subsidiary, ATNS International. This platform enables ATNS to

explore joint ventures and partnerships, enhancing market opportunities and

regional influence.

For more details, visit: www.atns.com

8 | P a g e

2.1 Malware Incident (FAPE)

a. Monitoring systems detected suspicious activity within Operational Technology (OT)

environments supporting weather-related services to Air Traffic Services.

b. Preliminary investigations identified malware commonly associated with the early

stages of ransomware attacks.

c. Network monitoring further indicated possible data exfiltration to external IP addresses

located in China.

d. Internal technical teams have implemented containment measures and malware

removal; however, a comprehensive forensic investigation is required to determine

the root cause, extent of compromise, and any remaining risks.

2.2 Alleged Insider Threat/Data Theft Incident (FAMM)

a. Reports received through internal channels indicate that employees may have

unlawfully accessed and exfiltrated personal information without authorisation.

b. Initial investigations were unable to substantiate the allegations.

c. An independent forensic investigation is required to establish facts, identify any policy

or legislative violations, and provide defensible findings.

3. Objective

The objective of this RFQ is to appoint a suitably qualified and experienced Digital

Forensics Service Provider to conduct independent investigations, collect and

preserve evidence, perform forensic analysis, and provide legally defensible reports

and recommendations

3.1 Scope of work

The appointed service provider shall perform the following services:

3.2 FAPE and FAEL OT Malware Investigation

The service provider shall:

a. Conduct a forensic investigation of affected OT systems and associated IT

infrastructure.

b. Perform malware analysis and reverse engineering where required.

c. Determine the infection source and attack vector.

d. Assess whether data exfiltration occurred and identify compromised information.

e. Review network logs, endpoint artefacts, and security monitoring records.

f. Determine the timeline of events.

g. Identify systems affected directly or indirectly.

9 | P a g e

h. Assess potential impact on operational continuity and safety-critical services.

i. Provide remediation recommendations and lessons learned.

3.3 FAMM Insider Threat Investigation

The service provider shall:

a. Conduct a forensic assessment of alleged unauthorised access to personal data.

b. Review user activity logs and access records.

c. Analyse endpoints and systems linked to identified individuals.

d. Determine whether unauthorised access, copying, transmission, or exfiltration of

data occurred.

e. Identify affected data sets and affected individuals where applicable.

f. Establish timelines, methods, and extent of any compromise.

g. Evaluate compliance implications relating to data protection legislation and internal

policies.

3.4 Digital Evidence Management

The service provider shall:

a. Collect and preserve digital evidence.

b. Maintain chain-of-custody records throughout the investigation.

c. Ensure evidence handling complies with accepted forensic standards.

d. Preserve evidence in a manner suitable for legal, disciplinary, audit, or regulatory

proceedings.

3.5 Reporting

The service provider shall provide:

a. Interim Reporting

I. Initial findings report.

II. Progress updates where required.

b. Final Reporting

Comprehensive forensic reports covering:

a. Executive summary.

b. Scope and methodology.

c. Findings and evidence.

d. Root cause analysis.

e. Impact assessment.

f. Timeline of events.

g. Attribution analysis where possible.

h. Risk assessment.

10 | P a g e

i. Recommendations for remediation and future prevention.

j. Reports must be suitable for executive, legal, disciplinary, regulatory, and audit

purposes.

4. Validity Period

4.1 Proposals must remain valid for 60 days from submission.

4.2 Extensions may be requested, with bidders notified accordingly.

5. Correspondence

5.1 Clarifications Before Bid Closure

All queries should be directed to:

Officer: Demand Management

Bright Blessie: [email protected] (cc: [email protected])

a. Insert the reference number and description of tender on the subject line

5.2 Clarifications After Bid Closure

a. All queries should be directed to:

Specialist: Acquisition Management

Lesedi Mashiloane: [email protected] (cc: [email protected])

b. Insert the reference number and description of tender on the subject line

6 Bid Submission Structure

6.1 The bid must be submitted in two parcels through e-Submission (e-Tender)

system:

a. Parcel A – Administrative (Phase 1 Evaluation)

• Volume 1A: General instructions and administrative requirements

(Excluding SBD 3.3 & 6.1)

• Phase 1: Administrative Requirements

b. Parcel B – Price & Specific Goals (Phase 2 Evaluation)

• Phase 3: SBD 3.3 - Pricing schedule

• Phase 3: SBD 6.1 - Preference Points Claim Form

• Central Supplier Database (CSD) Report

• Companies and Intellectual Property Commission (CIPC) Documents

• Shareholder Certificates

11 | P a g e

• ID copies of shareholders

• Valid B‐BBEE Certificate or Sworn Affidavit (for EMEs/QSEs)

Section b: bid evaluation process

The bid evaluation process for this RFQ will be conducted in Two (2) distinct stages

as follows:

Stage 1: Administrative Requirements

Stage 2: Price and Specific Goals

7 Stage 1: Administrative Requirements

No. Requirement Description

7.1 South African Revenue Services The bidder must submit proof of tax

(SARS) Valid Tax Compliance Status compliance demonstrating that the bidder

PIN Document meets SARS requirements. SARS PIN must

remain valid for 60 days from submission

7.10 Non-Compliance with Administrative Requirements If the Bidder fails to comply

with any of the administrative requirements, or if ATNS is unable to verify whether

these requirements are met, ATNS reserves the right to:

7.10.1 Reject the bid and exclude it from further evaluation, or

7.10.2 Accept the bid for evaluation, subject to the following condition:

7.10.2.1 The Bidder must submit any supplementary information within seven (7) days

to achieve full compliance.

7.10.2.2 The supplementary information must strictly address administrative

requirements and not be substantive in nature.

12 | P a g e

8 Stage 2: Evaluation for Price and ATNS Specific Goals

8.1 The bid will be evaluated using the 80/20-point system.

Criteria Means of Verification Points

Price Proposed Bid Price 80,00

Preference Points Specific Goals 20,00

Total Points 100,00

8.2 The 80/20 price/preference points system will be applied to the evaluation of responsive

tenders up to and including a Rand value of R50’000’000 (all applicable taxes included),

whereby the order(s) will be placed with the tenderer(s) scoring the highest total number

of adjudication points.

8.3 The formulae to be utilised in calculating points scored for price are as follows:

Pt−Pmin

Ps= 80(1− )Pmin

Pmin

Where

Ps = Points scored for price of tender under consideration

Pt = Price of tender under consideration

Pmin = Price of lowest acceptable tender

8.3.1 The tendered amounts shall be evaluated based on the pricing information

provided by bidder in the applicable Standard Bidding Document (SBD) for this

bid:

Definition Required Evidence for Required

evaluation Document

SBD 3.3 Pricing Schedule (Professional Services) a. Full completed and signed

Standard Bidding Document (SBD

3.3) and any other Price related

document as requested in this bid.

8.4 Preference points will be based on the Specific Goal as per below:

Definition Required Evidence Number of The specific goals

points allocated in terms of

allocated this bid

(80/20

system)

51% Black Owned An entity with at least 51% a. Central Supplier Database 20,00

suppliers (Section black ownership, which (CSD) Report

13 | P a g e

2(1)(d)(i) of the PPPFA) confers both voting rights and b. Companies and Intellectual

economic interest to black Property Commission

people (CIPC) Documents

c. Shareholder Certificates

d. ID copies of shareholders

e. Valid B‐BBEE Certificate or

Sworn Affidavit (for

EMEs/QSEs)

8.4.1 The Bidder must indicate how they claim points for specific for each preference

point system in the provided SBD 6.1.

9 Verification of Specific Goals

9.1 Tenderers must also provide valid proof to substantiate any claims made in support

of these goals to qualify for the allocated points. The following information is required

for bidders to qualify for specific claimed:

9.2 Bidders must submit:

9.2.1 CSD Report

9.2.2 CIPC documents

9.2.3 Shareholder certificates

9.2.4 ID copies of shareholders

10 ATNS Specific Goals

10.1 ATNS evaluates bids based on Preferential Procurement Regulations, 2022.

10.2 Suppliers are required to claim points for specific goals in SBD 6.1.

14 | P a g e

Section c: RFQ conditions and instructions to bid

11 Disclaimer

11.1 The Bidder shall bear all costs incurred in connection with the preparation and

submission of their Bid Response and for finalisation of the contract and the

attachments thereof. ATNS will in no case be responsible for payment to the Bidder for

these costs.

11.2 The Company reserves the right to reject any or all Bids, to undertake discussions with

one or more Bidders, and to accept that Bid or modified Bid which in its sole judgment,

will be most advantageous to the Company, price and other evaluation factors having

been considered.

Bid response documents may be sent to: e-submission (e-tender) system

Bidding procedure enquiries may be directed to technical enquiries may be directed to:

a. Lesedi Mashiloane

CONTACT PERSON b. Bright Blessie CONTACT PERSON

Telephone

Telephone number +27 11 607 1000 number

Facsimile number n/a facsimile number

a. [email protected]

E-MAIL ADDRESS b. [email protected] E-MAIL ADDRESS

Supplier information

Name of bidder

Postal address

Street address

Telephone number code number

Cell phone number

Facsimile number code number

E-mail address

VAT registration

Number

Supplier tax compliance system central

Compliance status pin: supplier

Or

Database

No: MAAA

B-bbee status tick applicable box] b-bbee status level [tick

Level verification sworn affidavit applicable

Certificate box]

Yes No

Yes

No

[A B-BBEE STATUS LEVEL VERIFICATION CERTIFICATE/ SWORN AFFIDAVIT (FOR EMES & QSEs) MUST BE

Submitted in order to qualify for preference points for b-bbee]

ARE YOU THE Yes No

Accredited are you a foreign

Representative in based supplier for the [if yes, answer

SOUTH AFRICA FOR Yes No GOODS /SERVICES /WORKS THE

The goods offered? Questionnaire

/Services /works [if yes enclose proof] below ]

Offered?

Questionnaire to bidding foreign suppliers

Is the entity a resident of the republic of south africa (RSA)? yes NO

Does the entity have a branch in the RSA? yes NO

20 | P a g e

Does the entity have a permanent establishment in the RSA? yes NO

Does the entity have any source of income in the RSA? yes NO

Is the entity liable in the RSA for any form of taxation? Yes NO

If the answer is “NO” to all of the above, then IT is not a requirement to register for a tax

Compliance status system pin code from the south african revenue service (SARS) and if not

Register as per 2.3 Below.

35 SBD 1 – Terms and Conditions for Bidding (PART B)

1. Bid submission:

1.1. Bids must be delivered by the stipulated time to the correct address. Late bids will not be

Accepted for consideration.

1.2. All bids must be submitted on the official forms provided–(not to be re-typed) or in the

Manner prescribed in the bid document.

1.3. This bid is subject to the preferential procurement policy framework act, 2000 and the

Preferential procurement regulations, 2022, the general conditions of contract (gcc)

And, if applicable, any other special conditions of contract.

1.4. The successful bidder will be required to fill in and sign a written contract form

2. Tax compliance requirements

2.1 Bidders must ensure compliance with their tax obligations.

2.2 Bidders are required to submit their unique personal identification number (pin) issued by

SARS to enable the organ of state to verify the taxpayer’s profile and tax status.

2.3 Application for tax compliance status (tcs) pin may be made via e-filing through the SARS

Website www.SARS.GOV.ZA.

2.4 Bidders may also submit a printed tcs certificate together with the bid.

2.5 In bids where consortia / joint ventures / sub-contractors are involved, each party must

Submit a separate tcs certificate / pin / csd number.

2.6 Where NO tcs pin is available but the bidder is registered on the central supplier database

(Csd), a csd number must be provided.

2.7 NO bids will be considered from persons in the service of the state, companies with

Directors who are persons in the service of the state, or close corporations with

Members persons in the service of the state.”

Nb: failure to provide / or comply with any of the above particulars may render the bid invalid.

Signature of bidder: ...................................................

Capacity under which this bid is signed: ...................................................

(Proof of authority must be submitted e.g. company resolution)

Date: .................................

21 | P a g e

36 SBD 3.1 – Pricing Schedule (Professional Services)

Name of bidder: ........................................................................

BID NO.: ATNS/RFQ14/07/2026/27/IT-Digital Forensic

CLOSING TIME 10:00 CLOSING DATE: 08 September 2026

Offer to be valid for 60 days from the closing date of bid.

Item description bid price in RSA

Currency

NO **(all applicable

Taxes included)

No Items Total Price

1. Professional fees for the complete scope of work, including R

investigation planning, evidence collection and preservation,

malware analysis, forensic investigations, reporting,

presentation of findings, and all related activities as detailed in

the specification

Sub Total (VAT Excl.) R

VAT 15% r

Grand Total R

Any enquiries regarding bidding procedures may be directed to the –

(Insert name and address of department/entity)

................................................................................

...............................................................................

Tel: ...........................................................................

Or for technical information –

(Insert name of contact person)

............................................................................

Tel: .......................................................................

22 | P a g e

37 SBD 4 – Bidder’s Disclosure

1. Purpose of the form

Any person (natural or juristic) may make an offer or offers in terms of this invitation to bid. In

line with the principles of transparency, accountability, impartiality, and ethics as enshrined in

the Constitution of the Republic of South Africa and further expressed in various pieces of

legislation, it is required for the bidder to make this declaration in respect of the details required

hereunder.

Where a person/s are listed in the Register for Tender Defaulters and / or the List of Restricted

Suppliers, that person will automatically be disqualified from the bid process.

2. Bidder’s declaration

2.1 Is the bidder, or any of its directors / trustees / shareholders / members / partners or

any person having a controlling interest3 in the enterprise,

employed by the state? YES/NO

2.1.1 If so, furnish particulars of the names, individual identity numbers, and, if applicable,

state employee numbers of sole proprietor/ directors / trustees / shareholders /

members/ partners or any person having a controlling interest in the enterprise, in table

below.

Full Name Identity Number Name of State

institution

3 the power, by one person or a group of persons holding the majority of the equity of an enterprise,

alternatively, the person/s having the deciding vote or power to influence or to direct the course and

decisions of the enterprise.

23 | P a g e

2.2 Do you, or any person connected with the bidder, have a relationship with any person

who is employed by the procuring institution? YES/NO

2.2.1 If so, furnish particulars:

................................................................................................

................................................................................................

2.3 Does the bidder or any of its directors / trustees / shareholders / members / partners

or any person having a controlling interest in the enterprise have any interest in any

other related enterprise whether or not they are bidding for this contract?

Yes/no

2.3.1 If so, furnish particulars:

........................................................................................

........................................................................................

30.1 Any budget amount that may be indicated in this document shall be deemed to be a

guide only and Bidders are expected to submit a costing that is fair and reasonable.

30.2 All costs related to this assignment are to be allowed for in the pricing schedule and in

the formats prescribed and must be returned as part of the submission. Bids submitted

without a price or with an incomplete price, will be deemed to be non-responsive.

30.3 A pricing schedule with one of the specified elements (fees and reimbursable costs)

omitted from the costing, may be considered non-responsive.

31 Registration On the CSD

31.1 In this part, bidders must submit proof of their registration, or proof that they have

applied for registration on the Central Supplier Database. Bids submitted without the

required proof, will be deemed to be non-responsive.

32 Registration Certificates and Accreditation with OEMS Or Professional Bodies

32.1 Registration with professional bodies. Bids submitted without proof will be deemed to

be non-responsive.

33 Fraud Prevention and Whistleblowing

33.1 ATNS is committed to the highest standards of ethical conduct and integrity. All bidders,

suppliers, and stakeholders are encouraged to report any suspected fraud, corruption,

or unethical conduct related to this procurement process.

33.2 Reports may be made confidentially and anonymously through the ATNS Fraud

Hotline:

33.2.1 Fraud Hotline: 0800 222 335 (Freecall number available 24hrs)

33.2.2 Email: [email protected]

33.2.3 Deloitte Tip-offs website www.tip-offs.com

33.3 All allegations will be treated with strict confidentiality and investigated in line with

ATNS policies and applicable legislation.

19 | P a g e

Section d: standard bidding documents

34 SBD 1 - Invitation to Bid (PART A)

You Are Hereby Invited to Bid for Requirements of the Air Traffic and Navigation Services SOC Limited (ATNS)

BID NUMBER: ATNS/RFQ14/07/2026/27/IT-DIGITAL CLOSING 08 September CLOSING 10h00

Forensic date: 2026 time:

Appointment of a service provider for digital forensic investigation of

Malware incidents at fape and alleged data theft incidents at famm

Section d: standard bidding documents ........................................................... 20

35 SBD 1 - Invitation to Bid (PART A) ............................................................... 20

36 SBD 1 – Terms and Conditions for Bidding (PART B) ..................................... 21

37 SBD 3.1 – Pricing Schedule (Purchases) ..................................................... 22

38 SBD 4 – Bidder’s Disclosure ...................................................................... 23

39 SBD 6.1 – Preferential Points Claim Form in Terms of the Preferential

Procurement Regulations 2022 ............................................................................... 26

40 Protection of Personal Information (POPIA) Consent ................................... 31

44. General Conditions of Contract ................................................................. 34

3 | P a g e

Ps = Points scored for price of tender under consideration

Pt = Price of tender under consideration

Pmin = Price of lowest acceptable tender

8.3.1 The tendered amounts shall be evaluated based on the pricing information

provided by bidder in the applicable Standard Bidding Document (SBD) for this

bid:

evaluation Document

SBD 3.3 Pricing Schedule (Professional Services) a. Full completed and signed

Standard Bidding Document (SBD

3.3) and any other Price related

document as requested in this bid.

8.4 Preference points will be based on the Specific Goal as per below:

29.1 Bidders must complete, sign and return the full “Invitation to Bid” document.

29.2 Bids submitted without a completed and signed Invitation to Bid will be deemed to be

non-responsive.

30 Pricing Schedule

30.1 Any budget amount that may be indicated in this document shall be deemed to be a

guide only and Bidders are expected to submit a costing that is fair and reasonable.

30.2 All costs related to this assignment are to be allowed for in the pricing schedule and in

the formats prescribed and must be returned as part of the submission. Bids submitted

without a price or with an incomplete price, will be deemed to be non-responsive.

30.3 A pricing schedule with one of the specified elements (fees and reimbursable costs)

omitted from the costing, may be considered non-responsive.

Members persons in the service of the state.”

Nb: failure to provide / or comply with any of the above particulars may render the bid invalid.

Signature of bidder: ...................................................

Capacity under which this bid is signed: ...................................................

(Proof of authority must be submitted e.g. company resolution)

Date: .................................

21 | P a g e

36 SBD 3.1 – Pricing Schedule (Professional Services)

Name of bidder: ........................................................................

BID NO.: ATNS/RFQ14/07/2026/27/IT-Digital Forensic

CLOSING TIME 10:00 CLOSING DATE: 08 September 2026

Offer to be valid for 60 days from the closing date of bid.

Tax Compliance Status compliance demonstrating that the bidder

tax compliance status (TCS) or PIN may also be made via e-filing

Tax compliance system central

Tax compliance status system pin code from the south african revenue service (SARS) and if not

Tax compliance requirements

Tax compliance status (tcs) pin may be made via e-filing through the SARS

Tcs pin is available but the bidder is registered on the central supplier database

CSD Report

CSD number

CSD number must be provided

Central Supplier Database

Central Supplier Database (CSD) Report

Central Supplier Database 20,00

Central Supplier Database (CSD)

Central Supplier Database (CSD), a CSD number must be provided

(SARS) Valid Tax Compliance Status compliance demonstrating that the bidder

VAT Registration Number

Points Allocation: 90 points

B-BBEE Details: NG PROCEDURE ENQUIRIES MAY BE DIRECTED TO TECHNICAL ENQUIRIES MAY BE DIRECTED TO:

a. Lesedi Mashiloane

CONTACT PERSON b. Bright Blessie CONTACT PERSON

Telephone

Telephone number +27 11 607 1000 number

Facsimile number n/a facsimile number

a. [email protected]

E-MAIL ADDRESS b. [email protected] E-MAIL ADDRESS

Supplier information

Name of bidder

Postal address

Street address

Telephone number code number

Cell phone number

Facsimile number code number

E-mail address

VAT registration

Number

Supplier tax compliance system central

Compliance status pin: supplier

Or

Database

No: MAAA

B-bbee status tick applicable box] b-bbee status level [tick

Level verification sworn affidavit applicable

Certificate box]

Yes No

Yes

No

[A B-BBEE STATUS LEVEL VERIFICATION CERTIFICATE/ SWORN AFFIDAVIT (FOR EMES & QSEs) MUST BE

Submitted in order to qualify for preference points for b-bbee]

ARE YOU THE Yes No

Accredited are you a foreign

Representative in based supplier for the [if yes, answer

SOUTH AFRICA FOR Yes No GOODS /SERVICES /WORKS THE

The goods offered? Questionnaire

/Services /works [if yes enclose proof] below ]

Offered?

Questionnaire to bidding foreign suppliers

Is the entity a resident of the republic of south africa (RSA)? yes NO

Does the entity have a branch in the RSA? yes NO

20 | P a g e

Does the entity have a permanent establishment in the RSA? yes NO

Does the entity have any source of income in the RSA? yes NO

Is the entity liable in the RSA for any form of taxation? Yes NO

If the answer is “NO” to all of the above, then IT is not a requirement to register for a tax

Compliance status system pin code from the south african revenue service (SARS) and if not

Register as per 2.3 Below.

35 SBD 1 – Terms and Conditions for Bidding (PART B)

1. Bid sub

that the information provided shall only be used for the preparation of a response to this document. The information

furnished will not be used for any other purpose than stated and that the information will not directly or indirectly, by

agent, employee or representative, be disclosed either in whole or in part, to any other third party without the express

written consent by the Company or its representative.

ATNS Fraud Hotline: Fraud Hotline: 0800 222 335 (Freecall number available 24hrs); Email: [email protected] ; Deloitte Tip-offs

website www.tip-offs.com

RFQ reference number: ATNS/RFQ14/07/2026/27/IT-DIGITAL FORENSIC

Description: APPOINTMENT OF A SERVICE PROVIDER FOR DIGITAL

Safety and Customer Centricity: Prioritising customer needs and ensuring that

safety is non-negotiable

Accountability: Holding ourselves and others accountable for our actions

Agility: Ensuring that we are flexible and adaptable to change

Diversity: Embracing inclusion, equality and social differences

Integrity: Following a moral and incorruptible corporate code

7 | P a g e

ATNS is a State-Owned Company (SOC), established in 1993 under the ATNS Company Act

(Act ) to provide air traffic services aligned with ICAO standards and South African

Civil Aviation Regulations. As a commercialised air navigation service provider (ANSP), ATNS

operates on a “user-pays” principle, relying on revenues and debt funding to cover operational

and capital expenses.

a. Conduct a forensic investigation of affected OT systems and associated IT

infrastructure.

b. Perform malware analysis and reverse engineering where required.

c. Determine the infection source and attack vector.

d. Assess whether data exfiltration occurred and identify compromised information.

e. Review network logs, endpoint artefacts, and security monitoring records.

f. Determine the timeline of events.

g. Identify systems affected directly or indirectly.

9 | P a g e

h. Assess potential impact on operational continuity and safety-critical services.

i. Provide remediation recommendations and lessons learned.

3.3 FAMM Insider Threat Investigation

a. Executive summary.

b. Scope and methodology.

c. Findings and evidence.

d. Root cause analysis.

e. Impact assessment.

f. Timeline of events.

g. Attribution analysis where possible.

h. Risk assessment.

10 | P a g e

i. Recommendations for remediation and future prevention.

j. Reports must be suitable for executive, legal, disciplinary, regulatory, and audit

purposes.

21.1 As soon as it becomes known to the contractor that he/she will not be able to deliver

the services within the delivery period and/or against the quoted price and/or as

specified, ATNS must be given immediate written notice to this effect. ATNS reserves

the right to implement remedies as provided for in the GCC.

I CERTIFY THAT THE INFORMATION FURNISHED IN PARAGRAPHS 1, 2 and 3

economic, social, and environmental sustainability.

12.1 Whilst ATNS have taken every reasonable step to ensure the accuracy of this brief, the

Company accepts no liability in relation to the accuracy of any representations made.

Bidders should accept that their tender response is on the basis and reliance of its own

judgment and information. ATNS reserves the right to vary the scope and terms as

described in this document. If any variation does take place tenderer will be advised as

soon as possible in writing.

12.2 The successful tenderer will be engaged subject to acceptance of a contract containing

the standard Terms and Conditions as given. The contract contains standard clauses

including a retention clause for non-satisfactory completion, breach of contract and

confidentiality clauses and a requirement for the tenderer to have adequate

professional indemnity insurance. All Tenderers must bear in mind that if circumstances

dictate, ATNS reserves its right to withdraw from any commitments that will be entered

into within this statement of work.

12.3 All designs and documentation submitted by the tenderer will be treated as

confidential.

12.4 ATNS reserves the right to reject, withdraw or cancel any or all Proposals/Tenders, to

undertake discussions with one or more Tenderers and to accept that tender or modified

tender which in its sole judgment, will be most advantageous to the Company, price and

other evaluation factors having been considered.

13 Cancellation of Procurement Process

13.1 This procurement process can be postponed or cancelled at any stage at the sole

discretion of ATNS provided that such cancellation or postponement takes place prior

to entering a contract with a specific service provider to which the bid relates.

15 | P a g e

14 Bid Submission Conditions, Instruction and Evaluation Process/Criteria

14.1 The Bid submission conditions and instructions as well as the evaluation

process/criteria have been noted. Non-compliance to any of these will result in a bid

being rejected.

15 Negotiation and Contracting

15.1 ATNS have the right to enter negotiation with one or more Bidders regarding any terms

and conditions, including price(s), of a proposed contract.

15.2 Under no circumstances will negotiation with any Bidders, including preferred Bidders,

constitute an award or promise/ undertaking to award the contract.

15.3 ATNS shall not be obliged to accept the lowest or any bid, offer or proposal.

15.4 A contract will only be deemed to be concluded when reduced to writing in a formal

contract and Service Level Agreement (if applicable) signed by the designated

responsible person of both parties.

15.5 ATNS also reserves the right to enter one contract with a Bidder for all required

functions or into more than one contract with different Bidders for different functions.

16 Reasons for Rejection

16.1 ATNS shall reject a proposal for the award of a contract if the recommended Bidder

has committed a proven corrupt or fraudulent act in competing for the particular

contract.

16.2 ATNS may disregard the bid of any bidder if that bidder, or any of its directors:

16.2.1 Have abused the SCM system of the ATNS.

16.2.2 Have committed proven fraud or any other improper conduct in relation to such

system.

16.2.3 Have failed to perform on any previous contract and the proof exists.

16.2.4 Such actions shall be communicated to the National Treasury.

17 General Conditions of Contract

17.1 The General Conditions of Contract must be accepted.

18 Additional Information Requirements

18.1 During evaluation of the bids, additional information may be requested in writing from

Bidders. Replies to such request must be submitted, within 7 working days or as

otherwise indicated. Failure to comply, may lead to your bid being disregarded.

18.2 No additional information will be accepted from any individual Bidder without such

information having been requested.

16 | P a g e

19 Confidentiality

19.1 The bid and all information in connection therewith shall be held in strict confidence

by Bidders and usage of such information shall be limited to the preparation of the bid.

Bidders shall undertake to limit the number of copies of this document.

20 Intellectual Property, Inventions and Copyright

20.1 Copyright of all documentation relating to this contract belongs to the client. The

successful Bidder may not disclose any information, documentation, or products to

other clients without the written approval of the accounting authority or the delegate.

20.2 This paragraph shall survive termination of this contract.

21 Non-Compliance with Delivery Terms

21.1 As soon as it becomes known to the contractor that he/she will not be able to deliver

the services within the delivery period and/or against the quoted price and/or as

specified, ATNS must be given immediate written notice to this effect. ATNS reserves

the right to implement remedies as provided for in the GCC.

22 Warrants

22.1 The bidder warrants that it can conclude this Agreement to the satisfaction of ATNS.

23 Parties not affected by waiver or breaches

23.1 The waiver (whether express or implied) by any Party of any breach of the terms or

conditions of this contract by the other Party shall not prejudice any remedy of the

waiving party in respect of any continuing or other breach of the terms and conditions

hereof.

23.2 No favour, delay, relaxation or indulgence on the part of any Party in exercising any

power or right conferred on such Party in terms of this contract shall operate as a waiver

of such power or right nor shall any single or partial exercise of any such power or right

under this agreement.

24 Retention

24.1 On termination of this agreement, the bidder shall, on demand hand over all

documentation provided as part of the project and all deliverables, etc., without the right

of retention, to ATNS.

24.2 No agreement to amend or vary a contract or order or the conditions, stipulations or

provisions thereof shall be valid and of any force and effect unless such agreement to

amend or vary is entered into in writing and signed by the contracting parties. Any

17 | P a g e

waiver of the requirement that the agreement to amend or vary shall be in writing, shall

also be in writing.

25 Central Supplier Database

25.1 It is a requirement that all suppliers/ services providers to ATNS shall be registered on

the National Treasury Central Supplier Database (CSD).

25.2 Bidders are therefore required to register as a supplier on the CSD before submitting

a bid. The CSD website can be accessed on the following link:

http://ocpo.treasury.gov.za/Pages/default.aspx

25.3 Bidders are therefore required to submit proof of their registration on the CSD, or if not

yet registered, provide proof of their application to be registered, with their bid.

25.4 No bid will be awarded, and a contract concluded with a bidder who is not registered

on the CSD.

26 Format of Bids

26.1 Bidders must complete all the necessary bid documents and undertakings required in

this bid document. Bidders are advised that their proposal should be concise, written

in plain English and simply presented.

26.2 If applicable, Bidders are to set out their proposal in the format prescribed hereunder.

This means that the proposal must be structured in the parts noted below. Information

not submitted in the relevant part, may not be considered for evaluation purposes.

27 SARS Tax Clearance Certificate(S)

27.1 Bidde must ensure compliance with their tax obligations.

27.2 Bidders are required to submit their unique personal identification number (PIN) issued

by SARS to enable the organ of state to view the taxpayer’s profile and tax status.

27.3 Application for tax compliance status (TCS) or PIN may also be made via e-filing. To

use this provision, taxpayers will need to register with SARS as e-filers through the

website www.sars.gov.za

27.4 Bidders may also submit a printed TCS together with the bid.

27.5 In bids where consortia/ joint ventures/ sub-contractors are involved; each party must

submit a separate proof of TCS/ PIN/ CSD number.

27.6 Where no TCS is available, but the bidder is registered on the Central Supplier

Database (CSD), a CSD number must be provided.

27.7 Bids submitted without any one of the above, will be deemed to be non-responsive.

28 Declaration of Interest

28.1 Each party to the bid must complete and return the “Declaration of Interest”.

18 | P a g e

28.2 Bids submitted without a complete and signed Declaration of Interest will be deemed

to be non-responsive.

29 Invitation to Bid

29.1 Bidders must complete, sign and return the full “Invitation to Bid” document.

29.2 Bids submitted without a completed and signed Invitation to Bid will be deemed to be

non-responsive.

Section a: introduction and scope of work ..................................................... 7

1. Introduction ............................................................................................... 7
2. Objective ........................................................ Error! Bookmark not defined.
3. Scope of work ............................................................................................ 9
4. Validity Period .................................................................................................... 11
5. Correspondence ................................................................................................ 11

6 Bid Submission Structure ......................................................................... 11

Section b: bid evaluation process ...................................................................... 12

7 Stage 1: Administrative Requirements ....................................................... 12

8 Stage 2: Evaluation for Price and ATNS Specific Goals ................................. 13

10 Verification of Specific Goals .................................................................... 14

11 ATNS Specific Goals ................................................................................. 14

Section c: RFQ conditions and instructions to bid ....................................... 15

12 Disclaimer ............................................................................................... 15

13 Contract Terms ........................................................................................ 15

14 Cancellation of Procurement Process ........................................................ 15

15 Bid Submission Conditions, Instruction and Evaluation Process/Criteria ...... 16

16 Negotiation and Contracting ..................................................................... 16

17 Reasons for Rejection ............................................................................... 16

18 General Conditions of Contract ................................................................. 16

19 Additional Information Requirements ........................................................ 16

20 Confidentiality ......................................................................................... 17

21 Intellectual Property, Inventions and Copyright ........................................... 17

22 Non-Compliance with Delivery Terms ........................................................ 17

23 Warrants .................................................................................................. 17

24 Parties not affected by waiver or breaches ................................................. 17

25 Retention ................................................................................................. 17

26 Central Supplier Database ........................................................................ 18

27 Format of Bids ......................................................................................... 18

28 SARS Tax Clearance Certificate(S) ............................................................. 18

29 Declaration of Interest .............................................................................. 18

2 | P a g e

30 Invitation to Bid ........................................................................................ 19

31 Pricing Schedule ...................................................................................... 19

32 Registration On the CSD ........................................................................... 19

Navigation Services Company Limited (ATNS) and no representation or warranty, express or

implied, is made as to the accuracy, completeness, or thoroughness of the content of this

Request for Quotation (RFQ).

6.1 The bid must be submitted in two parcels through e-Submission (e-Tender)

system:

a. Parcel A – Administrative (Phase 1 Evaluation)

• Volume 1A: General instructions and administrative requirements

(Excluding SBD 3.3 & 6.1)

• Phase 1: Administrative Requirements

b. Parcel B – Price & Specific Goals (Phase 2 Evaluation)

• Phase 3: SBD 3.3 - Pricing schedule

• Phase 3: SBD 6.1 - Preference Points Claim Form

• Central Supplier Database (CSD) Report

• Companies and Intellectual Property Commission (CIPC) Documents

• Shareholder Certificates

11 | P a g e

• ID copies of shareholders

• Valid B‐BBEE Certificate or Sworn Affidavit (for EMEs/QSEs)

Section b: bid evaluation process

The bid evaluation process for this RFQ will be conducted in Two (2) distinct stages

as follows:

Stage 1: Administrative Requirements

Stage 2: Price and Specific Goals

7 Stage 1: Administrative Requirements

judgment and information. ATNS reserves the right to vary the scope and terms as

described in this document. If any variation does take place tenderer will be advised as

soon as possible in writing.

12.2 The successful tenderer will be engaged subject to acceptance of a contract containing

the standard Terms and Conditions as given. The contract contains standard clauses

including a retention clause for non-satisfactory completion, breach of contract and

confidentiality clauses and a requirement for the tenderer to have adequate

professional indemnity insurance. All Tenderers must bear in mind that if circumstances

dictate, ATNS reserves its right to withdraw from any commitments that will be entered

into within this statement of work.

12.3 All designs and documentation submitted by the tenderer will be treated as

confidential.

12.4 ATNS reserves the right to reject, withdraw or cancel any or all Proposals/Tenders, to

undertake discussions with one or more Tenderers and to accept that tender or modified

tender which in its sole judgment, will be most advantageous to the Company, price and

other evaluation factors having been considered.

20.1 Copyright of all documentation relating to this contract belongs to the client. The

successful Bidder may not disclose any information, documentation, or products to

other clients without the written approval of the accounting authority or the delegate.

20.2 This paragraph shall survive termination of this contract.

23.1 The waiver (whether express or implied) by any Party of any breach of the terms or

conditions of this contract by the other Party shall not prejudice any remedy of the

waiving party in respect of any continuing or other breach of the terms and conditions

hereof.

23.2 No favour, delay, relaxation or indulgence on the part of any Party in exercising any

power or right conferred on such Party in terms of this contract shall operate as a waiver

of such power or right nor shall any single or partial exercise of any such power or right

under this agreement.

24.1 On termination of this agreement, the bidder shall, on demand hand over all

documentation provided as part of the project and all deliverables, etc., without the right

of retention, to ATNS.

24.2 No agreement to amend or vary a contract or order or the conditions, stipulations or

provisions thereof shall be valid and of any force and effect unless such agreement to

amend or vary is entered into in writing and signed by the contracting parties. Any

17 | P a g e

waiver of the requirement that the agreement to amend or vary shall be in writing, shall

also be in writing.

33.2.1 Fraud Hotline: 0800 222 335 (Freecall number available 24hrs)

33.2.2 Email: [email protected]

33.2.3 Deloitte Tip-offs website www.tip-offs.com

33.3 All allegations will be treated with strict confidentiality and investigated in line with

4.3. Name of company/firm...............................................................................

4.4. Company registration number: .....................................................................

4.5. Type of company/ firm

 Partnership/Joint Venture / Consortium

 One-person business/sole propriety

 Close corporation

 Public Company

 Personal Liability Company

 (Pty) Limited

 Non-Profit Company

 State Owned Company

[Tick applicable box]

4.6. I, the undersigned, who is duly authorised to do so on behalf of the company/firm,

certify that the points claimed, based on the specific goals as advised in the tender,

qualifies the company/ firm for the preference(s) shown and I acknowledge that:

i) The information furnished is true and correct;

ii) The preference points claimed are in accordance with the General Conditions as

indicated in paragraph 1 of this form;

iii) In the event of a contract being awarded as a result of points claimed as shown

in paragraphs 1.4 and 4.2, the contractor may be required to furnish documentary

proof to the satisfaction of the organ of state that the claims are correct;

iv) If the specific goals have been claimed or obtained on a fraudulent basis or any

of the conditions of contract have not been fulfilled, the organ of state may, in

addition to any other remedy it may have –

(a) disqualify the person from the tendering process;

(b) recover costs, losses or damages it has incurred or suffered as a

29 | P a g e