Implementation of Privileged Access Management (PAM) and Identity & Access Governance (IAG)Closed

Overview

The tender seeks the design, supply, and implementation of a Privileged Access Management (PAM) and Identity & Access Governance (IAG) solution, including cloud/on‑premises/hybrid deployment and integration with AD and enterprise apps. Eligible bidders are firms with IAM/IGA/PAM expertise, cybersecurity credentials, and proven integration experience, as described in the Terms of Reference (TOR PAM and IAG.pdf).

Requirements

• Proven delivery of integrated PAM/IGA projects (design, implement, migrate data, minimize disruption) and cloud/on‑premises/hybrid deployment.
• Key personnel: CVs for all relevant staff; minimum professional certifications (e.g., CISSP/CISM/CISA) and IAM/IGA/cloud security certifications; copies of all certifications.
• Experience evidence: at least four signed client reference letters in the last 3 years for similar work; preferably in medium/large organisations with IAM/IAG/PAM scopes.
• Evidence of technical capability: architecture/solution design, deployment methodology, system integration (AD, cloud platforms), and post‑go‑live support/knowledge transfer; sample system reports demonstrating auditability and compliance.
• Preferred credentials: product‑specific PAM/IGA certifications (e.g., CyberArk, Saviynt, SailPoint), TOGAF/ITIL Foundation or higher; OEM partner letters (where applicable).
• Deliverables alignment: complete solution with architecture, implementation plan, configured system, documentation, training, and stabilisation support (as per TOR).

Note: Evaluation includes CVs (20 pts), certifications (4 pts), project experience (20 pts), project proposal (25 pts), OEM letter (10 pts), and sample reports (25 pts); minimum qualifying score is 80/100 (SBD6.1 and TOR).

How to Apply

• Deadline: 06 July 2026 at 11:00 (closing date) [RFQ PAM&IAG].
• Submission method: email quotations to RFQ@qcto.org.za (RFQ - PAM&IAG.pdf).
• Documents to submit: itemised quotation (VAT where applicable), recent CSD report, valid BBBEE certificate or sworn affidavit, completed SBD forms, and bank confirmation letter (RFQ PAM&IAG.pdf).
• Required registrations/pre-qualifications: include CSD status; BBBEE documentation; SBD4 disclosure form.
• Attachments to include (from attached documents): quotation, CSD, BBBEE, SBD forms, bank letter; references and reports as requested in the TOR (TOR PAM and IAG.pdf; SBD6.1.pdf).