The procurement of a qualified Approved Scanning Vendor (ASV) secured services to perform nonintrusive external vulnerability scans on Postbank’s systems for a period of 3 years.Closed

Overview

Procurement of a qualified Approved Scanning Vendor (ASV) secured services to perform nonintrusive external vulnerability scans on Postbank’s systems for a period of 3 years. This RFP targets bidders that are PCI DSS compliant, hold a valid ASV certification, and can deliver quarterly external vulnerability scans, PCI DSS-compliant reports, and ASV attestations, with NDA obligations.

Requirements

• PCI SSC Approved Scanning Vendor (ASV) with a valid ASV certificate; maintain it throughout the engagement.
• Demonstrated experience performing PCI DSS external vulnerability scans for financial institutions, with verifiable references.
• Provide: ASV accreditation certificate, multiple reference letters, and evidence of company experience (minimum 2+ years; higher scores for 3–4+ years).
• Confidentiality: sign a Non-Disclosure Agreement and protect Postbank data.
• Compliance and registrations: SARS tax compliance PIN/CSD as applicable (SARS/TCS); tax clearance where required; adhere to state procurement rules.

How to Apply

• Submission deadline: 24 July 2026 at 11:00; submit via email to RFP@PostBank.co.za (and may also be deposited in the Bid Box at the street address listed in the documents). (RFP AV Scanning.pdf)
• Documents to complete/submit: official bid response on official forms; Pricing Schedule; SBDs (e.g., SBD4, SBD6.1) as outlined in the bid documents. (RFP AV Scanning.pdf)
• Pre-qualifications: provide Tax Compliance Status PIN or SARS TCS; where applicable, CSD number; ensure tax clearance if required. (RFP AV Scanning.pdf)
• Briefing session: details provided at the Pretoria briefing venue: Cnr 497 Sophie de Bruyn & Jeff Masemola Streets, Pretoria Central, Pretoria, 0002. (RFP AV Scanning.pdf)
• Documents location: the full tender and pricing materials are in the attached RFP AV Scanning.pdf.