ITES-11275 - South Africa - Managed Cybersecurity Services - Deadline November 23,2026

(1) Vendor needs to provide managed cybersecurity services. – Provide 24/7/365 monitoring, detection, triage, containment, and incident response. – Reduce cyber risk exposure through continuous exposure management and remediation support. – Support compliance with ISO/IEC 27001, POPIA, PFMA and relevant internal policies. – Improve cybersecurity maturity through assessments, governance uplift, and continuous improvement. – Enhance security culture through cyber awareness and human–risk management. – The bidder must implement and operate a layered security design covering, at minimum, the following layers: – Cloud security (posture management, workload protection, cloud logging, cloud identity and privilege security). – Network security (perimeter controls, segmentation, IDS/IPS, secure remote access, DNS and network anomaly detection). – Server and infrastructure security (hardening, patching, workload monitoring, EDR/XDR coverage, privileged access controls). – Application security (secure SDLC integration, SAST/DAST/SCA, API security testing, WAF where applicable, secrets management). – Database security (encryption, auditing, activity monitoring, privilege oversight, vulnerability assessment and patching). – Provide runbooks/playbooks (automated and analyst–driven), including rollback steps, escalation and approvals. – Provide proactive threat hunting (weekly baseline hunts and monthly deep hunts) and deliver reusable queries/content. – Provide operational resilience for SOC operations (redundancy, business continuity, secure communication channels). – Provide exposure prioritisation using exploitability context and business criticality; maintain a remediation tracker and dashboards. – Develop/update a Cyber Incident Response Plan (CIRP) and supporting playbooks and communications plans. (2) Pre–bid briefing session will be held on November 6, 2026.