Business Continuity Management and Offsite Recovery Solution.
Nomasomi Ndzibongwana
In plain English
The South African Civil Aviation Authority is procuring a comprehensive business continuity management and offsite recovery site for three years. Bidders must ensure compliance with tax obligations and submit a B-BBEE status level verification certificate or sworn affidavit to qualify for preference points.
Always check the official documentDescription
The South African Civil Aviation Authority (SACAA) is seeking a service provider for a three-year Business Continuity Management (BCM) and offsite recovery solution. The project involves providing advisory services aligned with ISO 22301 and ISO 27001 standards, alongside a fully equipped recovery facility. The facility must be located between 30 km and 60 km from the SACAA head office in Centurion and include 48 workstations, secure infrastructure, and backup power and water systems. Key deliverables include a BCM framework, risk registers, business impact analysis reports, and crisis management plans. The successful bidder must maintain the facility for scheduled testing and disaster recovery scenarios. The contract duration is three years, with a bid validity period of 180 days.
What you need to qualify
- CSD registration — Registration on the Central Supplier Database — required to do business with government.
- Tax clearance — A valid SARS tax compliance status (PIN) showing your tax affairs are in order.
- B-BBEE certificate — A B-BBEE certificate or sworn affidavit confirming your contribution level.
- Other registration — An industry registration the tender requires (e.g. PSIRA, NHBRC, a professional or trade licence).
Full requirements
- Registered on National Treasury Central Supplier Database (CSD)
- Valid Tax Compliance status (SARS PIN)
- Membership with professional Business Continuity institution or ISO 22301 accreditation
- Valid B-BBEE status level verification certificate or sworn affidavit
Contact & how to apply
Name: Nomasomi Ndzibongwana
Email: ndzibongwanan@CAA.CO.ZA
Phone: 011-545-1595
How to apply: Submit your proposal using a three-envelope system to Tender Box 3 at the South African Civil Aviation Authority, Byls Bridge Office Park, Centurion. You must contact Betty Monyeki or Cynthia Motaung beforehand to obtain an access code for the office park.
Related tenders
Maintenance of Electronic Security Systems for SACAA.
The South African Civil Aviation Authority (SACAA) requires a service provider for the maintenance of electronic security systems at its head office in Centurion for three years. Responsibilities include monthly maintenance of access control systems, CCTV cameras, fire alarm panels, and security hardware like boom gates and metal detectors. The provider must also create a project plan for security breach prevention and emergency response. The work is located at Byls Bridge Office Park, Centurion, and the tender closes on 12 October 2026.
Provision of Physical Security Services for SACAA.
The South African Civil Aviation Authority (SACAA) seeks a service provider for physical security and armed response services at its Centurion offices for three years. The contract includes 24/7 operations with guarding, access control, CCTV monitoring, VIP protection, and patrolling. The provider must supply trained personnel and equipment like firearms, radios, and metal detectors, complying with PSIRA and Department of Labour wage standards. Tender closes on 12 October 2026.
Service provider for BCM training workshop.
The Presidency seeks a service provider to conduct a one-month Business Continuity Management (BCM) training workshop for 30 employees. The training will cover ISO 22301 standards, Business Impact Analysis, risk assessment, incident management, and testing methodologies. The provider must supply training materials, facilitate BCI certification exams, and deliver a detailed training program, attendance records, a final report, and achievement certificates. All personnel must be South African nationals, and the project must be completed within four weeks post-workshop.
Independent Client Satisfaction Survey for SACAA.
The South African Civil Aviation Authority (SACAA) seeks a research agency to conduct an independent client satisfaction survey at its Centurion offices. The project includes developing a survey methodology, managing data collection, identifying service delivery gaps, and providing actionable insights. Deliverables include a final research report, a presentation for executive stakeholders, and a management training workshop. The fieldwork must be completed by the end of the fourth quarter of the financial year. Bidders must show relevant research experience, provide references, and have a qualified team experienced in stakeholder perception surveys.
Cloud-Based Privileged Access Management Solution Implementation.
The Trans-Caledon Tunnel Authority (TCTA) seeks a service provider to implement a cloud-based Privileged Access Management (PAM) solution for three years. The project includes designing, configuring, and supporting a system with 100 licenses, managing privileged accounts, enforcing access controls, credential vaulting, and real-time monitoring. The solution must integrate with existing cloud platforms, and training for ten TCTA officials is required. The work will be conducted in Centurion, with 300 hours of post-implementation support included.
Provision of Cloud Services and Disaster Recovery.
The Commission for Gender Equality (CGE) seeks a service provider to supply, host, and manage a cloud-based Infrastructure-as-a-Service (IaaS) platform, including Disaster Recovery as a Service (DRaaS), for 36 months. The project involves migrating existing virtual servers to a new platform with 99.9% uptime, 24/7 technical support, network management, and automated disaster recovery with quarterly testing. Bidders must have at least five years of experience in the South African cloud sector and provide a team with international industry certifications. The solution must support specific technical requirements, including virtual servers, storage volumes, and robust security monitoring.