# Implementation and Support of a Third-Party Risk Management solution for a period of three (3) years.

> This tender closed on 2026-09-11.

- **Reference:** RFP2026/20
- **Issuer:** [Sasria SOC Ltd](https://za.bidwunder.com/tenders/issuer/sasria-soc-ltd.md)
- **Region:** Gauteng
- **Type:** Open tender
- **Published:** 2026-08-18
- **Closing date:** 2026-09-11 14:00 SAST
- **Sectors:** [IT services](https://za.bidwunder.com/tenders/sector/J62.md)

## Summary

#### Overview
**Procurement of an enterprise-grade Third-Party Risk Management (TPRM) solution, including implementation and three years of support.** Sasria invites service providers with strong TPRM/GRC, cybersecurity, cloud SaaS hosting, API integration, and POPIA-compliant data handling capabilities to bid for this contract (RFP2026.20 document).

#### Requirements
- Proven experience implementing TPRM or similar GRC solutions; provide project lead CV and client reference letters ( ≤5 years old).  
- One technical team member must hold an IT/cybersecurity certificate (e.g., Microsoft/CompTIA CEH/CySA+).  
- OEM authorization or accreditation letter for the proposed solution.  
- Compliance proof: CSD tax status, and valid B-BBEE certificate or sworn affidavit; JV/Consortium B-BBEE requirements apply.  
- Hosting as secure cloud/SaaS with details on hosting environment, security controls, and data protection, plus POPIA alignment.  
- Integration capabilities with GRC, SIEM, ITSM, and ticketing platforms via APIs/connectors.  
- Data security controls, encryption, RBAC, audit logging; adherence to POPIA and data residency concerns.  
- Comprehensive SLA for 3 years; minimum response times (Critical 6h, High 8h, Medium 16h, Low 24h) and uptime targets (minimum draft SLA required).  
- Transformation goals: partnerships with majority black-owned entities; potential JV/subcontracting arrangements and consolidated B-BBEE scorecard.  
- Complete four returnable schedules and mandatory documents as listed (SBD 1, SBD 4, SBD 6.1, Annexures A–D) per Part 6.

#### How to Apply
- Submit via Sasria’s Online Tender Portal by 11 September 2026 at 12:00 (portal required; see RFP2026.20).  
- Register on the Sasria Online Tender Portal before submission; upload all four schedules (files limited to 4MB each).  
- Include all required documents: SBD 1, SBD 4, SBD 6.1, Annexures A–D, confidentiality NDA, shareholder info, bidder experience, and project team details (see Annexure D).  
- Queries: use the portal; last date for enquiries is 07 September 2026; responses by 09 September 2026 (RFP text).  
- Note: hand delivery, post, email, or fax proposals are not accepted; pricing must be detailed in the portal submission.  

(Document: RFP2026.20-Implementation and Support of a Third-Party Risk Management solution for a period of three (3) years..pdf)

## Description

Implementation and Support of a Third-Party Risk Management solution for a period of three (3) years.

Implementation and Support of a Third-Party Risk Management solution for a period of three (3) years.

Conditions: N/A

## Documents

- RFP2026.20-Implementation and Support of a Third-Party Risk Management solution for a period of three (3) years..pdf..pdf

Documents download with a free BidWunder account.

## Published on

- [eTenders.gov.za](https://www.etenders.gov.za)

More open tenders: https://za.bidwunder.com/tenders.md

---

> Source: https://za.bidwunder.com/tenders/implementation-and-support-of-a-third-party-risk-management-solution-for-a-perio-eaf226b4