FOSRBY-RFP-02-26/27 REQUEST FOR PROPOSAL [RFP] FOR THE PROVISION OF MANAGED CYBERSECURITY SERVICES FOR A PERIOD OF SIXTY (60) MONTHSClosed

Overview

This RFP seeks the provision of Managed Cybersecurity Services for Foskor for a 60-month period. Bid opportunities are open to Managed Security Services Providers (MSSPs) with 24/7 SOC/SIEM capabilities, vulnerability management, threat intelligence, incident response, and OT/ICS awareness. Must demonstrate ISO/IEC 27001 certification; include CVs, certifications, and client references as part of the bid evaluation.

Requirements

• ISO/IEC 27001 certification (mandatory; evidence required).
• 24/7/365 SOC monitoring and SIEM platform management (onsite/onboarding of up to 12 months historical logs).
• Vulnerability management and regular security assessments (external, internal, cloud, web, AD; quarterly hardening).
• Security awareness training with phishing testing and reporting dashboards.
• Incident Detection & Response capabilities (containment, SOAR, escalation; incident playbooks; at least two annual cyber‑attack simulation exercises).
• Threat intelligence, threat hunting, honeypots (if proposed), and dark web monitoring with actionable reporting.
• Governance, reporting, and SLAs/KPIs, including log retention (1 year hot, 5 years archival) and compliance with POPIA/Cybercrimes Act; alignment to ISO/NIST where relevant.
• Required resources: CVs and certifications for Security Analysts, Architects/Engineers, Cloud Security Experts, Penetration Testers, Governance & Compliance; client references; SOC/SIEM-specific certifications (SOC 2 Type II, SIEM certifications).
• Ad-hoc services (consulting, forensics) priced separately; project onboarding and training scoped in pricing.

How to Apply

• Submission deadline: 28 July 2026 at 12:00. Briefing on 7 July 2026 at 11:00 (Microsoft Teams); briefing venue listed as Teams (physical address for briefing provided: 21 John Ross Parkway, Richards Bay).
• Documents to submit (where applicable note attached document):
  • Price/Costing Proposal; Company Profile (Annexure 2); Scope of Work responses (Annexure 3) Yes/No; Proposal/Evaluation documents (Annexure 4).
  • Evidence of ISO/IEC 27001 certification; SOC 2 Type II (if available) and SIEM certifications; CVs for proposed team; client references; sample IR Playbooks and sample Post-Incident Reports (per Annexure 3/Annexure B).
  • Annexure A/B/C references in the attached documents; bid documents are available on Foskor’s etenders portal (see attached Annexures and the zip package).
• Submissions may require online portal delivery; use the attached Annexures for format and content.
• Notes: Data privacy compliance (POPIA) and related governance requirements apply; no explicit CIDB/CSD prequalification is stated in the provided material.

If needed, quote references to attached documents: scope and evaluation details are in Annexure A (Scope of Work.pdf) and Annexure B (Technical Evaluation.pdf); contractual terms in Annexure C (Foskor Template Services Agreement.pdf).