Supply and Management of Human Risk and Security Platform
Rubina Data
In plain English
South African Airways is procuring a Human Risk Management and Security Awareness Training Platform. Bidders must comply with cybersecurity standards and provide necessary certifications and documentation.
Always check the official documentDescription
South African Airways (SAA) has issued a Request for Quotation (GSM085/2026) for the supply, implementation, and management of a Human Risk Management and Security Awareness Training Platform. The project requires a solution for at least 2,200 users, featuring phishing simulations, micro-learning content, and advanced behavioural analytics. The platform must align with ISO 27001, NIST, and CIS standards and integrate with existing security environments like Active Directory and Single Sign-On. The contract includes a 12-month managed service component covering administration and technical support. Bidders must demonstrate experience through three signed-off projects from the last five years and provide CVs for personnel holding IT diplomas and cybersecurity certifications. The closing date for submissions is 12 November 2026 at 16:00. The validity period for all quotes is 180 days from the closing date.
What you need to qualify
- CSD registration — Registration on the Central Supplier Database — required to do business with government.
- Tax clearance — A valid SARS tax compliance status (PIN) showing your tax affairs are in order.
- Other registration — An industry registration the tender requires (e.g. PSIRA, NHBRC, a professional or trade licence).
Full requirements
- Valid Tax Clearance Certificate or SARS pin
- Proof of partnership or accreditation with the solution vendor
- Evidence of ISO/IEC 27001 alignment
- Formal undertaking of NIST framework and data protection compliance
- Technical evidence of system integration capabilities
- Testimonial letters for project experience and managed services
- CVs and certifications for key delivery personnel
- Registration on the Central Supplier Database (CSD)
Contact & how to apply
Name: Rubina Data
Email: RubinaData@flysaa.com
Phone: 011-978-2155
How to apply: Submit the completed Written Quote Form and all required documentation via email to RubinaData@flysaa.com and Tenders@flysaa.com. Ensure all files are under 2MB; larger files must be sent via a secure, accessible download link.
Related tenders
Provision of Quality Management System at ACSA.
Airports Company South Africa (ACSA) seeks a service provider to design, develop, and implement an automated Quality Management System (QMS) for a sixty-month period at ACSA facilities. The system must support ISO 9001 standards, include mobile accessibility, and integrate with existing enterprise systems. Key deliverables include a centralized document management repository, workflow automation, real-time reporting dashboards, and user training. Bidders must have at least five years of QMS implementation experience and provide five contactable reference letters.
Provision of Learning Management System for SACAA.
The South African Civil Aviation Authority (SACAA) seeks bids for developing and implementing a Learning Management System (LMS) to support the General Aviation Accident Reduction Initiative. The system should provide training for 20,000 users, featuring a secure, mobile-responsive platform with user management, video streaming, assessment tools, and certification. The two-year project requires integration with existing databases and staff training, based at SACAA offices in Centurion.
Panel for Internal Audit Services for SAA Group.
The South African Airways (SAA) Group seeks to appoint a panel of up to three service providers for internal audit assurance, advisory, and related services over three years. The scope includes financial, operational, IT, and capital project audits, as well as compliance and risk management, covering SAA, SAAT, and AirChefs. Services will be provided across domestic and international locations, using TeamMate audit software and a rotational work allocation model.
IBM Planning Analytics Support Services for SAA.
South African Airways (SAA) seeks quotations for professional support services for their IBM Planning Analytics (TM1) environment. The project includes maintenance, administration, development, and advisory services to support SAA's financial planning, budgeting, and reporting systems. Services may be required on a full-time, project-based, or ad-hoc basis. Key deliverables include incident management, performance monitoring, model development, and knowledge transfer. Bidders must have at least five years of experience in IBM Planning Analytics, with expertise in Solution Architect and Functional Consultant roles. A technical evaluation threshold of 75% applies. Submissions close on 05 November 2026 at 12:00pm.
Managed Cybersecurity Services Provider for NHBRC.
The National Home Builders Registration Council (NHBRC) seeks proposals for a Managed Cybersecurity Services Provider for a five-year contract. The provider will offer comprehensive security services, including a 24/7/365 Security Operations Centre in South Africa, covering network and cloud security, incident response, vulnerability management, penetration testing, and threat intelligence. Additional responsibilities include cyber awareness training, policy governance, and document security. Deliverables include operational reports, risk assessments, and incident response playbooks. Bidders must have at least five years of experience in enterprise-grade cybersecurity and ensure all services are performed by South African-based analysts to maintain data sovereignty. A detailed cost model for implementation, ongoing operations, and annual escalations is required.
Supply and Support of Network Firewalls
Air Traffic and Navigation Services (ATNS) seeks a service provider for the supply, implementation, and five-year support of web application and internal network firewalls across eight national sites, including major airports. The project includes hardware installation, software configuration, 24/7 monitoring, firmware upgrades, and staff training to ensure high-availability protection against cyber threats. A compulsory briefing session is scheduled for 15 October 2026.