Cybersecurity Managed Services and Licenses for ECIC.
Lopang Kwape
In plain English
The Export Credit Insurance Corporation of South Africa is seeking a service provider for cybersecurity managed services and licenses for three years. Eligible bidders must comply with the Preferential Procurement Policy Framework Act and related regulations.
Always check the official documentDescription
The Export Credit Insurance Corporation of South Africa (ECIC) is seeking a service provider for Cybersecurity Managed Services and Licenses. The work will be performed at the ECIC offices in Centurion. The contract covers a three-year period and includes Microsoft 365 security, endpoint protection, cloud backup monitoring, vulnerability management, and DMARC configuration. Key deliverables include annual cybersecurity awareness training, phishing simulations, and formal assessments based on ISO27001:2022 and COBIT 2019 standards. The provider must also facilitate skills transfer for ECIC ICT staff and provide monthly security reporting. The environment supports approximately 100 to 120 users and includes a monthly retainer for health checks plus a dedicated bucket of support hours for ad-hoc technical requirements.
What you need to qualify
- CSD registration — Registration on the Central Supplier Database — required to do business with government.
- Tax clearance — A valid SARS tax compliance status (PIN) showing your tax affairs are in order.
- B-BBEE certificate — A B-BBEE certificate or sworn affidavit confirming your contribution level.
- Other registration — An industry registration the tender requires (e.g. PSIRA, NHBRC, a professional or trade licence).
Full requirements
- Registered on National Treasury Central Supplier Database (CSD)
- Valid SARS Tax Compliance Status (TCS) PIN
- Valid B-BBEE certificate or sworn affidavit
- Authorized partnership with Microsoft and relevant DMARC/Vulnerability tool OEMs
- Assessment team must hold ISO27001 and COBIT 2019 certifications
- Three contactable reference letters for similar projects within the last five years
- Evidence of internal security/governance via third-party risk assessment
Contact & how to apply
Name: Lopang Kwape
Email: procurement@ecic.co.za
Phone: 012-471-3800
How to apply: Proposals must be submitted in PDF format via email to procurement@ecic.co.za. If files exceed 20MB, split them into multiple emails. Alternatively, proposals can be hand-delivered to the ECIC office in Centurion or submitted via USB.
Related tenders
Identity Governance and Administration Solution for IEC.
The Electoral Commission (IEC) seeks bids for an Identity Governance and Administration (IGA) solution for 1500 to 2000 users. The project includes integration with systems like SAP, Active Directory, and Microsoft 365, and professional services for policy definition, migration, and change management. Work will occur at the IEC National Office in Centurion and a disaster recovery site, lasting 8 to 9 months starting February 2027, with a 3-year support plan. Bidders must offer automated identity lifecycle management and support for 30 bespoke applications.
Supply and installation of ICT security software licenses.
The Buffalo City Metropolitan Development Agency (BCMDA) seeks a service provider for a 12-month project to supply and install ICT security software licenses, including endpoint security, cloud backup, patch management, and encryption services in East London. The project requires licenses for 35 Windows devices, 3 Windows Servers, 2 SQL instances, and SSL certificates. Bidders must show experience with two previous ICT security projects worth at least R200,000.00.
Cybersecurity Vulnerability Testing Software License.
The Buffalo City Metropolitan Development Agency seeks a service provider for a 12-month cybersecurity vulnerability testing software license in East London. Deliverables include network scanning, asset discovery, vulnerability identification, risk assessment, and detailed reporting. The provider must also offer software training. The project aims to enhance digital security by identifying system weaknesses and missing patches, with support for recurring scans and centralized management.
Website Maintenance and Upgrade for ECSECC.
The Eastern Cape Socio-Economic Consultative Council (ECSECC) seeks services for the maintenance and upgrade of its website and Digital Knowledge Hub over five years, with a potential five-year renewal. The project includes technical support, infrastructure management, server migration, .NET framework upgrade, mobile-first design, cybersecurity enhancements, and modernization of recruitment and tender modules. Bidders must submit a project plan, personnel breakdown with rates, and a firm ceiling price. The project is based in the Eastern Cape, with submissions due by 28 September 2026 at 15:00.
Service Provider for WAN Connectivity Services
The MICT SETA seeks a service provider for the implementation, support, and maintenance of WAN connectivity services across six sites in South Africa, including Midrand, Bloemfontein, and Cape Town. The project involves managing fibre connectivity, internet services, secure VPNs, and email filtering for 300 users over 60 months. Deliverables include next-generation firewalls, cloud backup for Microsoft 365, and 24/7 technical support. Bidders must provide a project implementation plan and risk management strategy.
Cybersecurity Awareness Solution for ATNS.
Air Traffic and Navigation Services (ATNS) seeks a service provider to supply, implement, and support a cloud-based cybersecurity awareness training platform for five years. The solution should include online training, phishing simulations, email reminders, and Active Directory integration. The provider must offer progress tracking and analytics. The project will be executed at ATNS facilities, with a contract duration of five years. A compulsory briefing session is on 07 September 2026, and the closing date is 09 October 2026.