Cyber Security Monitoring and Response Services for SACAA.
Ntombizodwa Duma
In plain English
The South African Civil Aviation Authority is procuring cyber security monitoring and managed detection and response services for three years. Bidders must ensure compliance with tax obligations and submit a B-BBEE status level verification certificate or sworn affidavit.
Always check the official documentDescription
The South African Civil Aviation Authority (SACAA) is seeking a service provider for Cyber Security Monitoring and Managed Detection and Response (MDR) services. The project involves 24/7 threat detection, incident response, and security management for 750 endpoints, 100 servers, and 150 network devices. Key deliverables include monthly phishing simulations, quarterly security training for 750 users, and enterprise-wide risk scoring. The work must be performed by local South African personnel using the existing Trend Vision One platform. The contract duration is three years, with a focus on maintaining 30GB of daily data ingestion and six months of data retention. The project will be based at the SACAA offices in Centurion.
What you need to qualify
- CSD registration — Registration on the Central Supplier Database — required to do business with government.
- Tax clearance — A valid SARS tax compliance status (PIN) showing your tax affairs are in order.
- B-BBEE certificate — A B-BBEE certificate or sworn affidavit confirming your contribution level.
- Other registration — An industry registration the tender requires (e.g. PSIRA, NHBRC, a professional or trade licence).
Full requirements
- Registered on National Treasury Central Supplier Database (CSD)
- Valid SARS Tax Compliance Status (TCS) PIN
- Valid B-BBEE certificate or sworn affidavit
- Minimum 3 to 5 contactable trade references for similar services
- Personnel must hold CISM, CEH, ISC2, and Trend Micro Advanced certifications
Contact & how to apply
Name: Ntombizodwa Duma
Email: tenders@caa.co.za
Phone: 011-545-1262
How to apply: Submit bids using a three-envelope system in Bid Box 1 at the SACAA Head Office, Byls Bridge Office Park, Centurion. Envelopes must contain mandatory documents, technical proposals, and pricing schedules respectively. Direct all written queries to tenders@caa.co.za by 20 November 2026.
Related tenders
Provision of Learning Management System for SACAA.
The South African Civil Aviation Authority (SACAA) seeks bids for developing and implementing a Learning Management System (LMS) to support the General Aviation Accident Reduction Initiative. The system should provide training for 20,000 users, featuring a secure, mobile-responsive platform with user management, video streaming, assessment tools, and certification. The two-year project requires integration with existing databases and staff training, based at SACAA offices in Centurion.
Service Provider for Competency Assessments and RBO Implementation.
The South African Civil Aviation Authority (SACAA) seeks a service provider to conduct technical and behavioural competency assessments for approximately 300 staff members, including inspectors and managers. The project supports the implementation of Risk-Based Oversight (RBO) over a two-year period. Key deliverables include developing assessment matrices and tools, scoring psychometric and work-based exercises, providing individual feedback reports, and presenting organizational insights to the SACAA Board. The work will take place at the SACAA Head Office in Centurion.
Supply and Management of Human Risk and Security Platform
South African Airways (SAA) seeks quotations for the supply, implementation, and management of a Human Risk Management and Security Awareness Training Platform for 2,200 users. The platform must include phishing simulations, micro-learning content, and advanced behavioural analytics, aligning with ISO 27001, NIST, and CIS standards. It should integrate with existing security environments like Active Directory and Single Sign-On. The contract includes a 12-month managed service for administration and technical support. Bidders must show experience with three projects in the last five years and provide CVs of personnel with IT diplomas and cybersecurity certifications. Submissions close on 12 November 2026 at 16:00, with a quote validity of 180 days.
Managed Cybersecurity Services Provider for NHBRC.
The National Home Builders Registration Council (NHBRC) seeks proposals for a Managed Cybersecurity Services Provider for a five-year contract. The provider will offer comprehensive security services, including a 24/7/365 Security Operations Centre in South Africa, covering network and cloud security, incident response, vulnerability management, penetration testing, and threat intelligence. Additional responsibilities include cyber awareness training, policy governance, and document security. Deliverables include operational reports, risk assessments, and incident response playbooks. Bidders must have at least five years of experience in enterprise-grade cybersecurity and ensure all services are performed by South African-based analysts to maintain data sovereignty. A detailed cost model for implementation, ongoing operations, and annual escalations is required.
Provision of SACAA Office Accommodation in Cape Town.
The South African Civil Aviation Authority (SACAA) seeks office accommodation in Cape Town for five years starting February 2027. The space required is between 400m² and 430m², located within the Cape Town International Airport precinct or a 5km radius. The building must be B-grade or higher, less than 20 years old, and include 35 parking bays. Key deliverables include emergency power and water backups, CCTV security, fiber connectivity, and accessibility for people with disabilities. The landlord is responsible for all building maintenance, including HVAC, fire protection, and electrical systems.
Renewal of Trend Micro Services for SAPO.
The South African Post Office invites bids for the renewal of Trend Micro cybersecurity software licences, hardware support, and maintenance for a 12-month period. The scope includes renewing licences for endpoint, email, and internet access security, as well as network security infrastructure. The work will be performed at the SAPO Data Centre in Pretoria. Bidders must have at least five years of experience in managing enterprise security renewals for environments with 1,000 or more users and provide two certified engineers with relevant experience. All pricing must be firm and quoted in South African Rand.