Managed Security Operations Centre for NRCS.
GLENDA MATHANE
In plain English
The National Regulator for Compulsory Specifications (NRCS) is seeking a service provider to implement, operate, and support a Managed Security Operations Centre (MSOC) for 36 months. Bidders must be compliant with tax obligations and may need a B-BBEE status level verification certificate or sworn affidavit for preference points.
Always check the official documentDescription
The National Regulator for Compulsory Specifications (NRCS) invites bids for the implementation, operation, and support of a Managed Security Operations Centre (MSOC). The work will take place at the NRCS offices in Pretoria over a 36-month period. Key deliverables include a cybersecurity maturity assessment, 24/7 threat detection and incident response, provision of SIEM and SOAR technology, and ongoing staff training. The service provider must manage all security logging, vulnerability identification, and governance reporting to ensure the organization remains audit-ready. The project aims to enhance the NRCS's digital security posture through continuous monitoring and expert technical support.
What you need to qualify
- CSD registration — Registration on the Central Supplier Database — required to do business with government.
- Tax clearance — A valid SARS tax compliance status (PIN) showing your tax affairs are in order.
- B-BBEE certificate — A B-BBEE certificate or sworn affidavit confirming your contribution level.
- Other registration — An industry registration the tender requires (e.g. PSIRA, NHBRC, a professional or trade licence).
Full requirements
- Valid Tax Compliance Status (TCS) or SARS PIN
- Registered on the Central Supplier Database (CSD)
- OEM authorization for proposed security software and tools
- Valid B-BBEE status certificate or sworn affidavit
Contact & how to apply
Name: GLENDA MATHANE
Email: glenda.mathane@nrcs.org.za
Phone: 012-482-8765
How to apply: Submit sealed documents, including one original, three copies, and one USB drive, to the NRCS tender box located at the SABS Campus, 1 Dr Lategan Road, Groenkloof, Pretoria, by 11h00 on 04 December 2026.
Related tenders
Service Provider for NRCS Inspection Solution.
The National Regulator for Compulsory Specifications (NRCS) seeks a service provider to implement an end-to-end inspection automation solution in Pretoria. The project involves digitizing and automating inspection, enforcement, and reporting processes across various units, including Automotive, Chemicals, and Foods. Deliverables include a configured inspection platform, workflow automation, reporting dashboards, user training, and a five-year support plan. Completion is required within one year, with bidders demonstrating local presence and experience in large-scale digital projects.
Provision of Security Services for NCR Premises.
The National Credit Regulator (NCR) seeks a service provider for guarding and electronic security services, including CCTV monitoring and identity scanning, for 18 months. The tender follows the 80/20 preference point system, emphasizing economic transformation and compliance with South African laws. Bidders must offer all-inclusive pricing, and services must meet high standards.
Managed Cybersecurity Services Provider for NHBRC.
The National Home Builders Registration Council (NHBRC) seeks proposals for a Managed Cybersecurity Services Provider for a five-year contract. The provider will offer comprehensive security services, including a 24/7/365 Security Operations Centre in South Africa, covering network and cloud security, incident response, vulnerability management, penetration testing, and threat intelligence. Additional responsibilities include cyber awareness training, policy governance, and document security. Deliverables include operational reports, risk assessments, and incident response playbooks. Bidders must have at least five years of experience in enterprise-grade cybersecurity and ensure all services are performed by South African-based analysts to maintain data sovereignty. A detailed cost model for implementation, ongoing operations, and annual escalations is required.
Provision of Security Operations Centre Services for Land Bank.
The Land and Agricultural Development Bank of South Africa (Land Bank) seeks proposals for a fully managed Security Operations Centre (SOC) service over five years. Responsibilities include 24/7/365 security monitoring, threat detection, incident investigation, and containment support. The SOC must integrate with existing security technologies and manage log data from various servers and environments. Deliverables include security reporting, data protection compliance, and maintaining a stable security control environment. A virtual briefing session is on 05 November 2026, with proposal submissions due by 18 November 2026.
Provision of SAN and Servers with Data Migration.
The National Regulator for Compulsory Specifications (NRCS) seeks a service provider for the supply, installation, and data migration of SAN and server infrastructure. The project includes high-performance blade servers, 300TB storage, and migrating 100TB of data across 84 virtual machines at NRCS offices in Pretoria. Deliverables include hardware supply, system configuration, a five-year on-site warranty, and a skills transfer program. Bidders must have five years of data center experience and provide a technical methodology. Pricing must be firm in ZAR, inclusive of VAT, with payments linked to project milestones.
Cyber Security Monitoring and Response Services for SACAA.
The South African Civil Aviation Authority (SACAA) requires a service provider for cyber security monitoring and managed detection and response services. The project includes 24/7 threat detection, incident response, and security management for 750 endpoints, 100 servers, and 150 network devices. Deliverables include monthly phishing simulations, quarterly security training for 750 users, and enterprise-wide risk scoring. Services must be provided by local South African personnel using the Trend Vision One platform, with a focus on maintaining 30GB of daily data ingestion and six months of data retention. The contract is for three years, based at SACAA offices in Centurion.