# APPOINTMENT OF A REPUTABLE CYBERSECURITY SERVICE PROVIDER TO CONDUCT A VULNERABILITY ASSESSMENT AND PENETRATION TESTING (VAPT) EXERCISE FOR A YEAR.

> This tender closed on 2026-08-14.

- **Reference:** 334/65110/2026
- **Issuer:** [Ithala Development Finance Corporation](https://za.bidwunder.com/tenders/issuer/ithala-development-finance-corporation.md)
- **Region:** KwaZulu-Natal
- **Type:** Open tender
- **Closing date:** 2026-08-14 11:00 SAST

## Summary

#### Overview
**Procurement of a reputable cybersecurity service provider to conduct a Vulnerability Assessment and Penetration Testing (VAPT) exercise for one year.** Open tender issued by Ithala Development Finance Corporation for a VAPT engagement covering external and internal IDFC ICT environments, with three penetration tests over 12 months. Suitable for cybersecurity firms with VAPT capability, ISO 27001 accreditation, and demonstrated experience in financial or regulated sectors.

#### Requirements
- CSD registration and SARS tax compliance, with PIN where applicable; separate TCS/Pin/CSD for consortia.
- SARS e-filing readiness and tax clearance where required; VAT status to be disclosed.
- Complete SBD 1 (Invitation to bid) and SBD 4 (Declaration of Interest); include authority proof.
- NDA/non-disclosure agreement to be signed.
- ISO 27001 accreditation required (evaluation criterion).
- Demonstrated VAPT leadership experience and relevant certifications for the team leader (OSCP/CREST; OSWE and/or eWPTX encouraged; CEH/PNPT/CISSP acceptable).
- Three VAPT tests to be conducted within 12 months; detailed rules of engagement, reporting, and remediation validation.
- Preference points claimed for specific goals (≥51% Black, Women, Youth, and Persons with Disability ownership).

#### How to Apply
- Closing date/time: 14 August 2026 at 11:00 (RFQ-334-65110/2026-.pdf). Submit via Hand Delivery to Ithala Trade Centre or by Email to quotes@ithala.co.za.
- Documents to submit: Official bid forms (SBD 1, SBD 4, SBD 6.1 for preference points) and pricing schedule; ensure CSD and Tax PIN status are provided.
- Registration/pre-qualifications: CSD registration, SARS tax compliance status (PIN), VAT details; consortia must provide per participant.
- Inquiries: SCM — Silindile Gumede; Technical — Mathubamahle P. Ndebele (contact details in RFQ).
- Where documents exist: RFQ document RFQ-334-65110/2026-.pdf (contains scope, deliverables, evaluation criteria, and pricing).

## Description

APPOINTMENT OF A REPUTABLE CYBERSECURITY SERVICE PROVIDER TO CONDUCT A VULNERABILITY ASSESSMENT AND PENETRATION TESTING (VAPT) EXERCISE FOR A YEAR.

## Documents

- RFQ-334-65110-2026-.pdf

Documents download with a free BidWunder account.

## Published on

- [Ithala Development Finance Corporation](https://ithala.co.za)

More open tenders: https://za.bidwunder.com/tenders.md

---

> Source: https://za.bidwunder.com/tenders/appointment-of-a-reputable-cybersecurity-service-provider-to-conduct-a-vulnerabi-8257ba87