Service Provider for Red Team Assessment.
Tefo
In plain English
The Trans-Caledon Tunnel Authority is seeking a service provider to conduct a Red Team Assessment. Eligible bidders must comply with the requirements outlined in the RFQ, including B-BBEE considerations.
Always check the official documentDescription
The Trans-Caledon Tunnel Authority (TCTA) invites service providers to submit proposals for a Red Team Assessment. The project involves conducting a controlled, ethical security evaluation of TCTA’s critical systems, network zones, digital assets, and physical security controls. The work will take place over a six-month period. Key deliverables include a comprehensive security test plan, detailed technical reports on vulnerabilities, an executive summary with risk heatmaps, evidence packs, and skills transfer workshops for TCTA staff. The assessment covers external and internal network testing, Active Directory analysis, wireless security, web application testing, and social engineering. Bidders must participate in a non-compulsory online briefing session via Microsoft Teams on 06 November 2026. The final deadline for all submissions is 10 October 2026.
What you need to qualify
- CSD registration — Registration on the Central Supplier Database — required to do business with government.
- Tax clearance — A valid SARS tax compliance status (PIN) showing your tax affairs are in order.
Full requirements
- Must hold valid ISO/IEC 27001 and ISO/IEC 27035 certifications
- Technical Lead must hold OSCP, OSEP, OSWE, or GIAC GPEN plus two security certifications
- Must be registered on the National Treasury Central Supplier Database (CSD)
- Must provide a valid SARS Tax Compliance PIN
- Must provide three contactable references for similar Red Team projects
- Technical Lead must have led at least three previous Red Team engagements
- Must agree to TCTA personnel vetting
Contact & how to apply
Name: Tefo
Email: tenders06@tcta.co.za
Phone: 012-683-1217
How to apply: Proposals must be submitted via email to tenders06@tcta.co.za by the closing date and time.
Related tenders
Provision of IT Hardware and Support Services.
The Trans-Caledon Tunnel Authority (TCTA) seeks a service provider for the supply of desktops, laptops, and accessories with a three-year warranty and support. The project includes delivery of IT hardware over three years, device tracking, and security management. Equipment must be new and delivered within six weeks of order, with a 48-hour repair or replacement turnaround. Support is required at TCTA offices or within a 50km radius. Bidders need six years of experience and three reference letters.
Service Provider for Developing Assessment Instruments
The Construction Education and Training Authority (CETA) seeks a service provider to develop assessment instruments, RPL toolkits, and moderation tools for 21 occupational qualifications over six months. The project includes creating exemplars, marker memorandums, and conducting industry workshops. Key deliverables include a project implementation plan, progress reports, and final verification of tools in collaboration with the QCTO. The service provider will manage the development process for fields like road maintenance, geomatics, and building construction.
Panel of External Quality Assurance Assessors for 36 Months
CATHSSETA invites bids for a panel of nine External Quality Assurance Assessors and a Project Manager to provide services nationally for 36 months. The work involves conducting site validation and monitoring visits, reviewing assessments, and ensuring Skills Development Providers comply with QCTO and CATHSSETA standards. Key deliverables include comprehensive quality assurance reports, monthly progress updates, and evidence of site inspections. The project requires a team with specific experience in SETA environments and ETQA project management. The tender is issued by CATHSSETA, and the closing date for submissions is 06 November 2026.
Provision of Enterprise Project and Asset Management Solutions.
The Trans-Caledon Tunnel Authority (TCTA) seeks information on Enterprise Project Controls and Asset Management solutions to modernize project planning, budgeting, cost control, and asset maintenance systems. Deliverables include software for project scheduling, financial forecasting, work order management, and inventory tracking. Vendors must detail system architecture, security features, integration capabilities, training methodologies, implementation plans, and post-implementation support. This RFI aims to gather market information and indicative pricing for future procurement.
Procurement of Integrated Data Analytics Platform for Transnet.
Transnet seeks a service provider to supply and implement an integrated data analytics platform for its internal audit division across all operating divisions in South Africa for five years. The platform must handle data ingestion, transformation, and secure reporting, integrating with systems like SAP and Oracle. Deliverables include software licensing, system configuration, audit workflow development, and ongoing maintenance and support. The solution must ensure high availability, disaster recovery, and strict data security. Bidders must provide evidence of past experience and demonstrate technical expertise.
Provision of Tactical Response Team Security Services at Camden Power Station
Eskom Holdings SOC Ltd invites tenders for a 48-month contract to provide Tactical Response Team (TRT) and special security operations at Camden Power Station. The scope includes armed tactical response, aerial drone surveillance, canine unit operations, and mobile ablution facilities. The service provider must maintain a 24/7 control room, provide roadworthy vehicles, and ensure personnel are trained and equipped. Deliverables include security reports, incident management, and adherence to safety and environmental standards. A minimum technical threshold score of 70% is required. The tender is valid for 180 days from the closing date of 26 November 2026.