Provision of Security Incident Management Application (SIEM).
SILUNGILE MBATHA
Compulsory briefing — you must attend to bid
4 November 2026 at 10:00 · Microsoft Teams
In plain English
The Inkomati-Usuthu Catchment Management Agency is procuring services for the provision, installation, configuration, and support of a Security Incident Management Application (SIEM) for 36 months. Bidders must be registered on the National Treasury Supplier database.
Always check the official documentDescription
The Inkomati-Usuthu Catchment Management Agency (IUCMA) is seeking a service provider to supply, install, configure, and support a Security Incident Management Application (SIEM) integrated with Security Orchestration, Automation and Response (SOAR) capabilities. The work will take place at the IUCMA offices in Mbombela. The project involves 24/7 security monitoring, log management, and threat detection across the agency's ICT infrastructure. The contract duration is 36 months, with implementation required within 45 days of appointment. Key deliverables include a scalable SIEM platform, real-time threat hunting, and automated incident response playbooks. Bidders must demonstrate technical proficiency in information security systems and provide support for 135 licenses.
What you need to qualify
- CSD registration — Registration on the Central Supplier Database — required to do business with government.
- Registered company — An active CIPC-registered company in good standing.
- Tax clearance — A valid SARS tax compliance status (PIN) showing your tax affairs are in order.
- B-BBEE certificate — A B-BBEE certificate or sworn affidavit confirming your contribution level.
Full requirements
- Registered on National Treasury Central Supplier Database (CSD)
- Proof of OEM authorization or ownership of SIEM solution
- Valid Tax Compliance Status (SARS PIN or certificate)
- Reference letters for similar SIEM/SOAR projects within last 5 years
- Project Manager CV and certified relevant IT Security certifications
- Valid B-BBEE certificate, CIPC certificate, or sworn affidavit
Contact & how to apply
Name: SILUNGILE MBATHA
Email: mbathas@iucma.co.za
Phone: 069-535-3118
How to apply: Bidders must print the full tender document on A4 paper, bind it, and deposit it into the official bid box at the IUCMA Offices, 2nd Floor, ABSA Square Building, 20 Paul Kruger Street, Mbombela, 1200.
Related tenders
Integrated Electronic Security System for KZN Treasury
The KwaZulu-Natal Provincial Treasury seeks bids for decommissioning existing security systems and installing an Integrated Electronic Security System at three sites in Pietermaritzburg. The contract includes supply, installation, and maintenance over three years, with a possible 24-month extension. Key tasks involve networkable access control, CCTV integration with HR and fire systems, and operator training. The system must be available 24/7, with ongoing maintenance support. A mandatory site briefing is on 9 October 2026, and the tender closes on 23 October 2026.
Service Provider for Law Enforcement Administrative Support
The Victor Khanye Local Municipality seeks a service provider for a three-year contract to supply and manage a traffic contravention system. This includes mobile radar cameras, fixed camera sites, ANPR units, and handheld devices. Responsibilities include violation processing, revenue management, and staff training. The provider must integrate systems with NaTIS and SAPS databases, ensuring mSCOA compliance. Experience in enforcement equipment and back-office systems is required, with proof of similar projects completed in the last two years. The contract is for three years, starting from the signed acceptance form date.
Supply and Maintenance of Intruder Alarm Systems.
The NHBRC seeks a service provider for the supply, installation, and maintenance of intruder alarm systems with monitoring and armed response services at 22 offices nationwide for three years. The project includes wireless alarm technology with video verification, battery backup, and CCTV integration. The provider must ensure 24-hour armed response within a 5km radius, regular maintenance, system relocation, staff training, and a business continuity plan. A virtual briefing session is on 16 October 2026, and the tender closes on 06 November 2026.
Procurement of DNS Security Managed Services.
Eskom Holdings SOC Ltd invites tenders for a five-year contract for DNS Security Managed Services, including one year for implementation and four years for maintenance and support. The project involves deploying a hardware-based DNS security suite, IP Address Management, and real-time threat detection across Eskom data centres. Key deliverables include system configuration, integration with existing security platforms, and 24/7/365 technical support. The project starts on 1 December 2026, requiring a dedicated project manager and compliance with IETF standards and SOC 2 requirements. Skills development and a Quality Management System are also required.
Provision of Audit Management Software for Internal Audit.
SAFCOL seeks a service provider to supply, implement, and support an Audit Management Software tool for its Internal Audit department. The project includes a three-year maintenance and support agreement, covering the full audit lifecycle, risk management, data analytics, and AI capabilities for at least ten users. It involves system configuration, integration with existing ICT infrastructure, and user training. The project requires a project manager and a technical specialist, and will be managed under an NEC4 contract, based in Nelspruit.
Service Provider for Penetration Testing and Vulnerability Assessment
The National Metrology Institute of South Africa (NMISA) seeks bids for a once-off penetration testing and vulnerability assessment of its hybrid ICT environment, covering cloud infrastructure, on-premises networks, web applications, and identity services. Deliverables include an initial security assessment, technical remediation workshops, and two retest cycles over approximately three months, with an additional three-month retesting period. Bidders must have completed at least five similar projects in the last five years, and key personnel must hold relevant cybersecurity certifications and extensive industry experience.