FOR THE PROVISION OF CYBER SECURITY MONITORING AND MANAGED DETECTION AND RESPONSE SERVICES FOR THE SACAA FOR A PERIOD OF THREE (3) YEARS.Closed

Overview

Procurement of Cyber Security Monitoring and Managed Detection and Response (MDR) services for SACAA for three years. The contract envisions leveraging SACAA’s existing Trend Micro ecosystem (Trend Vision One) within a Cyber Risk Operations Center (CROC) model, with 24/7/365 MDR, platform administration by SA staff, threat hunting, incident response, CREM, and security awareness training. Proposals must align with the current Trend Micro setup and avoid replacing the existing SIEM. Special access arrangements are required for SACAA’s new office park (contact Betty Monyeki or Cynthia Motaung for access codes). (Tender Document - Cyber Security Monitoring Services - June 2026.pdf)

Requirements

• Deliver full MDR across endpoint, server, email, network, identity, and cloud, ingesting SACAA telemetry into Trend Vision One.
• Provide 24/7 monitoring, IOC/IoA sweeps, MITRE ATT&CK–aligned detection, threat hunting, and guided response; include incident containment actions.
• Manage Trend Vision One platform administration from South Africa (health checks, policy tuning, reporting, up to 10 SOAR playbooks annually, quarterly reviews).
• Staff: minimum 10 personnel; 1 CISM, 1 CEH, 4 ISC2 certifications, 4 Trend Micro Platform Advanced certifications.
• Additional: CREM, security awareness training, incident response, and risk reporting; ensure compatibility with 6-month data retention and log ingestion credits.
• Compliance: CSD registration, SBD1/3/4/6.1, tax PIN, GCC, and related bid documentation; 180-day bid validity; no USBs.

How to Apply

• Submission: three envelopes (Envelope 1: mandatory documents; Envelope 2: technical proposal; Envelope 3: price and specific goals). Submit original + copy to SACAA Bid Box 2, Byls Bridge Office Park, Centurion, by 11:00 on 24 June 2026; ensure correct marking and sequencing.
• Documents to submit: SBD1, SBD3 (Pricing Schedule), SBD4, SBD6.1; proof of CSD registration; tax compliance PIN or SARS certificate; any authority resolutions for signatories.
• Registrations: Central Supplier Database (CSD); SARS Tax Compliance; possible BBBEE documentation for preference points.
• Clarifications: queries to tenders@caa.co.za by 17 June 2026; no briefing session (N/A).
• Attached documents: core scope and evaluation criteria are in the Tender Document (Tender Document - Cyber Security Monitoring Services - June 2026.pdf).