# Provision of ICT Security penetration and vulnerability assessment services

> This tender closed on 2026-09-04.

- **Reference:** RFQ/ICT/26/27/020
- **Issuer:** [Manufacturing, Engineering and Related Services SETA (merSETA)](https://za.bidwunder.com/tenders/issuer/manufacturing-engineering-and-related-services-seta-merseta.md)
- **Region:** Gauteng
- **Type:** Request for proposal
- **Published:** 2026-09-01
- **Closing date:** 2026-09-04 17:00 SAST
- **Sectors:** [IT services](https://za.bidwunder.com/tenders/sector/J62.md)

## Summary

#### Overview
**Provision of ICT Security penetration and vulnerability assessment services** for merSETA. The supplier will conduct eight assessments over two years, including vulnerability assessments and penetration testing on ten applications, with detailed findings and remediation recommendations. Suitable bidders are ICT security service providers with proven penetration/testing capabilities and a lead resource with 10+ years in cyber security, holding a valid CISA, CISM or CSSP certification (certifications to be submitted).

#### Requirements
- Standard-based proposal with methodology.
- Three signed reference letters related to ICT risk and security (no appointment letters).
- Lead resource CV showing 10+ years’ cyber security/penetration experience plus valid CISA, CISM or CSSP certification.
- Pricing for two assessments; include a Pricing Schedule (firm prices, VAT where applicable).
- Bidders must be registered on the Central Suppliers Database (CSD) and have tax matters in order.
- BBBEE certificate or equivalent evidence; complete SBD 4, SBD 6.1, SBD 7.1 forms; full set of standard bidding documents.
- Compliance with GCC and any applicable special conditions; may be required to sign a contract or SLA.

#### How to Apply
- Submission deadline: 4 September 2026 at 15:00; late submissions will not be considered. (RFQ RFQ/ICT/26/27/020; see RFQ document)
- Submission method: Email quotations@merseta.org.za with the RFQ number in the subject.
- Documents to submit: completed SBD forms (SBD 4, SBD 6.1, SBD 7.1), pricing schedule (Pricing Schedule–Firm Prices), tax/compliance documents, CSD number, BBBEE certificate, three reference letters, lead resource CV with certifications. (Pricing Schedule details are in the RFQ document: RFQ-ICT-26-27-020 CYBER SECURITY (2).pdf)
- Pre-qualifications: CSD registration, tax clearance, and buyer’s compliance checks; ensure all tax matters are in order at award.
- Additional notes: merSETA may seek verification, negotiations, or award in part/particular terms; site inspections may be conducted if needed.

## Description

Provision of ICT Security penetration and vulnerability assessment services

Provision of ICT Security penetration and vulnerability assessment services

Delivery Location: 8 Hillside road - Park Town - Johannesburg - 2193

## Documents

- RFQ-ICT-26-27-020 CYBER SECURITY (2).pdf

Documents download with a free BidWunder account.

## Published on

- [eTenders OCDS API](https://www.etenders.gov.za/Home/opportunities?id=1)

More open tenders: https://za.bidwunder.com/tenders.md

---

> Source: https://za.bidwunder.com/tenders/provision-of-ict-security-penetration-and-vulnerability-assessment-services-c2025bbf