# FOR THE PROVISION OF CORPORATE THREAT ASSESSMENT FOR THE SOUTH AFRICAN CIVIL AVIATION AUTHORITY (SACAA).

> This tender closed on 2026-10-05.

- **Reference:** RFQ/MR/CORPORATE THREAT/ICT/059/2026-2027 - R
- **Issuer:** [South African Civil Aviation Authority](https://za.bidwunder.com/tenders/issuer/south-african-civil-aviation-authority.md)
- **Region:** Gauteng
- **Type:** Request for quotation
- **Published:** 2026-09-23
- **Closing date:** 2026-10-05 13:00 SAST
- **Sectors:** [Professional, scientific, technical](https://za.bidwunder.com/tenders/sector/M.md)

## Summary

#### Overview
**Provision of a Corporate Threat Assessment across SACAA’s IT environment, including internal networks, external systems, cloud platforms, and web applications.** Suitable bidders should have proven experience in corporate security testing, vulnerability management, and risk remediation, with capabilities aligned to ISO/IEC 27001, OWASP Top 10 (2025), and NIST SP 800-115. The assessment will cover internal IPs, devices, servers, websites, and wireless components, and deliver a remediation roadmap plus audience-specific briefings (Management, Exco, ARC).

#### Requirements
- Five (5) dated reference letters in the last 3 years for Corporate Threat Assessment work (or 4 = 20 pts, 3 = 10 pts) with contact details.
- Demonstrated ability to conduct internal and external penetration testing, vulnerability analysis, risk management, wireless security testing, and 20 web sites per OWASP.
- Certifications: Certified Ethical Hacker (CEH), Offensive Security Certified Professional (OSCP), and/or Certified Information Systems Security Professional (CISSP).
- Detailed technical approach/methodology covering internal and external testing, plus a remediation plan and executive/technical reporting.
- Grey-box engagement with limited initial information; ability to present tailored reports to Management, Exco, and ARC; remediation verification of critical findings.

#### How to Apply
- Submission deadline: 05 October 2026, 11:00 (RFQ references) (RFQ for Corporate Threat Assessments - 23 September 2026.pdf).
- Submission method: sealed envelope/envelope system to SACAA Tender Box 1, ByLS Bridge Office Park, Centurion. Include the RFQ reference and bidder details (see document).
- Documents to submit (Envelope 1/2/3): 
  - Compulsory: SBD1, SBD4, SBD6.1; Proof of CSD registration; Tax PIN/TCS as described; CSD number if no TCS; evidence if in service of state rules.
  - Envelope 2: Technical proposal (1 original + copy) with methodology, references, and audience-focused deliverables.
  - Envelope 3: Pricing schedule (separate envelope, 1 original + copy) with detailed breakdown.
- Required registrations/pre-qualifications: Central Supplier Database (CSD); Tax Compliance Status (TCS) PIN or SARS PIN; ensure tax/compliance status; consortia must provide separate TCS/CSD numbers for each party.
- Special access note: Access codes to enter SACAA’s new office park must be arranged in advance with Betty Monyeki or Cynthia Motuang (security requirement) (see Special Conditions).
- Briefing sessions: Not indicated; no separate briefing details provided.
- Where to obtain documents: RFQ documents are attached to the tender (see RFQ for Corporate Threat Assessments - 23 September 2026.pdf).
- Evaluation pathway: Bids will be assessed on functionality (80 points) and price/specific goals (80/20). Functionality requires references, certifications, and a sound methodology; scores ≥80 proceed to price evaluation. Specific goals align to BBBEE status levels.

Notes: The RFQ includes a three-envelope submission system and explicit security/entry constraints for on-time delivery (see Special Conditions).

## Description

FOR THE PROVISION OF CORPORATE THREAT ASSESSMENT FOR THE SOUTH AFRICAN CIVIL AVIATION AUTHORITY (SACAA).

FOR THE PROVISION OF CORPORATE THREAT ASSESSMENT FOR THE SOUTH AFRICAN CIVIL AVIATION AUTHORITY (SACAA).

Delivery Location: BYLS Bridge Office Park, Olievenhoutbosch Road & Jean Ave - Centurion - Pretoria - 0062 Special Conditions: BIDDERS ARE REQUIRED TO SUBMIT BIDS ON TIME TO AVOID BEING LATE. OUR NEW OFFICE PARK HAS STRINGENT SECURITY MEASURES. EACH BIDDER WILL BE REQUIRED TO OBTAIN AN ACCESS CODE TO ENTER THE OFFICE PARK. TO RECEIVE THE ACCESS CODE PRIOR ARRANGEMENTS MUST BE MADE WITH EITHER BETTY MONYEKI ON 082 885 4270 OR CYNTHIA MOTAUNG ON 083 461 6534 TO OBTAIN THE ACCESS CODE FOR THE OFFICE PARK.

## Documents

- RFQ for Corporate Threat Assessments - 23 September 2026.pdf

Documents download with a free BidWunder account.

## Published on

- [eTenders OCDS API](https://www.etenders.gov.za/Home/opportunities?id=1)

More open tenders: https://za.bidwunder.com/tenders.md

---

> Source: https://za.bidwunder.com/tenders/for-the-provision-of-corporate-threat-assessment-for-the-south-african-civil-avi-36b916c1