This tender closed on 11 Sept 2026. The page stays up for reference. See open tenders from Sasria SOC Ltd.
Implementation and Support of a Third-Party Risk Management solution for a period of three (3) years.Closed
Summary
AI-generated from the tender documents.
Overview
Procurement of an enterprise-grade Third-Party Risk Management (TPRM) solution, including implementation and three years of support. Sasria invites service providers with strong TPRM/GRC, cybersecurity, cloud SaaS hosting, API integration, and POPIA-compliant data handling capabilities to bid for this contract (RFP2026.20 document).
Requirements
- Proven experience implementing TPRM or similar GRC solutions; provide project lead CV and client reference letters ( ≤5 years old).
- One technical team member must hold an IT/cybersecurity certificate (e.g., Microsoft/CompTIA CEH/CySA+).
- OEM authorization or accreditation letter for the proposed solution.
- Compliance proof: CSD tax status, and valid B-BBEE certificate or sworn affidavit; JV/Consortium B-BBEE requirements apply.
- Hosting as secure cloud/SaaS with details on hosting environment, security controls, and data protection, plus POPIA alignment.
- Integration capabilities with GRC, SIEM, ITSM, and ticketing platforms via APIs/connectors.
- Data security controls, encryption, RBAC, audit logging; adherence to POPIA and data residency concerns.
- Comprehensive SLA for 3 years; minimum response times (Critical 6h, High 8h, Medium 16h, Low 24h) and uptime targets (minimum draft SLA required).
- Transformation goals: partnerships with majority black-owned entities; potential JV/subcontracting arrangements and consolidated B-BBEE scorecard.
- Complete four returnable schedules and mandatory documents as listed (SBD 1, SBD 4, SBD 6.1, Annexures A–D) per Part 6.
How to Apply
- Submit via Sasria’s Online Tender Portal by 11 September 2026 at 12:00 (portal required; see RFP2026.20).
- Register on the Sasria Online Tender Portal before submission; upload all four schedules (files limited to 4MB each).
- Include all required documents: SBD 1, SBD 4, SBD 6.1, Annexures A–D, confidentiality NDA, shareholder info, bidder experience, and project team details (see Annexure D).
- Queries: use the portal; last date for enquiries is 07 September 2026; responses by 09 September 2026 (RFP text).
- Note: hand delivery, post, email, or fax proposals are not accepted; pricing must be detailed in the portal submission.
(Document: RFP2026.20-Implementation and Support of a Third-Party Risk Management solution for a period of three (3) years..pdf)
Implementation and Support of a Third-Party Risk Management solution for a period of three (3) years. Implementation and Support of a Third-Party Risk Management solution for a period of three (3) years. Conditions: N/A
- RFP2026.20-Implementation and Support of a Third-Party Risk Management solution for a period of three (3) years..pdf..pdf
Want tenders like this one in your inbox?
Create a free account to search every open tender and download the documents.