Managed Cybersecurity Services Provider for NHBRC.
Sphiwe Mbatha
In plain English
The tender is for providing comprehensive cybersecurity services including SOC operations, SIEM/SOAR capabilities, and vulnerability management. Bidders must be registered on the Central Supplier Database (CSD) and hold ISO/IEC 27001:2022 certification.
Always check the official documentDescription
The National Home Builders Registration Council (NHBRC) is seeking a Managed Cybersecurity Services Provider (MCSP) for a five-year contract. The work involves providing 24/7/365 Security Operations Centre (SOC) services, incident response, vulnerability management, penetration testing, and cyber awareness training. The provider must ensure all SOC operations and analyst access occur within South Africa. The project covers the NHBRC head office in Sunninghill, Gauteng, along with various provincial and satellite offices nationwide. Key deliverables include operational runbooks, monthly risk reports, and quarterly maturity roadmaps. Bidders must demonstrate at least five years of experience in enterprise-grade cybersecurity services and provide a detailed cost model including annual escalations. The tender will be adjudicated using the 80/20 preference point system.
What you need to qualify
- CSD registration — Registration on the Central Supplier Database — required to do business with government.
- Tax clearance — A valid SARS tax compliance status (PIN) showing your tax affairs are in order.
- Other registration — An industry registration the tender requires (e.g. PSIRA, NHBRC, a professional or trade licence).
Full requirements
- Must hold valid ISO/IEC 27001 and ISO 9001 certifications
- Must hold Cyber Liability Insurance of at least R10,000,000
- Must be registered on CSD with valid tax compliance status
- Must provide three contactable references for similar engagements
- Must provide proof of OEM certifications or authorized reseller agreements
Contact & how to apply
Name: Sphiwe Mbatha
Email: Sphiweb@nhbrc.gov.za
Phone: 011-317-0476
How to apply: Bids must be submitted online via the National Treasury eTender Portal at https://www.etenders.gov.za/. No physical or emailed proposals will be accepted. Proposals must be in PDF format and include all required documentation and a signed pricing schedule.
Related tenders
Service Provider for Security Systems Maintenance
The National Treasury seeks a service provider for the maintenance, upgrade, and support of electronic security systems at their Riverwalk Office Park buildings for three years. The project includes preventative maintenance, emergency repairs, and supply of security consumables. Key tasks involve maintaining Hikvision-Hikcentral systems, ensuring 24/7 emergency maintenance, and providing technical support. A virtual briefing is on 21 August 2026, with bids due by 11:00 AM on 04 September 2026. The contract requires experienced technicians in Hikvision systems.
Appointment of Service Provider for Managed Information Security Services
BANKSETA seeks service providers for managed information security services, including supplying network equipment like switches and access points, and providing network monitoring and redesign services across national offices. Deliverables include a network diagram within six months, ongoing monitoring, and regular security and equipment health reports. The contract is valid until 30 April 2030, requiring a qualified Team Leader and Network Security specialist.
Provision of GRC Software Solution and Support.
The South African Civil Aviation Authority (SACAA) seeks a service provider for an off-the-shelf Governance, Risk, and Compliance (GRC) software solution, including a five-year support and maintenance contract. The project requires a web-based, modular system for managing enterprise risk, internal audits, legal compliance, and quality assurance, with integration capabilities and data migration from the current BarnOwl system. The provider must supply 129 user licenses, conduct staff training, and have at least five years of GRC software deployment experience with three contactable references. The project team leader must have a recognized project management certification and five years of relevant experience.
Provision and Support of PAM Solution for NRCS.
The National Regulator for Compulsory Specifications (NRCS) seeks a service provider to supply, install, and support a Privileged Access Management (PAM) solution for 24 months. The solution should be equivalent to BeyondTrust, featuring password management, automated rotation, video activity recording, multi-factor authentication, and audit logging. Implementation is required within one month of the purchase order, supporting NRCS's Windows Server, Active Directory, and SQL Server environment. Skills transfer for four NRCS officials is also required. The contract lasts 24 months, with a bid validity of 180 days.
Provision of IT Services for Data Centres.
The Department of Home Affairs seeks a service provider for IT services and technical support for Data Centres and server infrastructure. The project includes maintaining systems for Live Capture and Smart ID Card applications across four main Data Centres in Gauteng and 210 offices nationwide. Responsibilities include managing approximately 1,200 physical servers, hardware, storage, virtualization, and network environments. Key tasks are preventative maintenance, incident resolution, disaster recovery support, and ensuring 24/7 operational availability. The contract is for three years, with an option to extend for two more years. Work will primarily occur at SITA Centurion and Hallmark buildings, with potential travel to other sites. Bidders must provide specialized technical skills, and all on-site staff must be South African citizens subject to security vetting. The submission deadline is 21 August 2026 at 11:00.
Provision of software development services.
The Border Management Authority seeks a service provider to supply a software development team for three years. The work includes web, mobile, and enterprise system development, database management, cloud solutions, AI integration, and cybersecurity. Responsibilities include testing, quality assurance, system maintenance, and staff training. Deliverables are functional software, source code, technical documentation, and project reports. The team must include a Project Manager, Senior Developer, and Database Administrator meeting specific qualifications and experience standards. Work will be on an as-needed basis.