Corporate Threat Assessment for SACAA.
Rudolph Mohlala
In plain English
The SACAA is seeking a service provider to conduct a comprehensive Corporate Threat Assessment across its IT environment. Bidders must be registered on the Central Supplier Database (CSD) and provide specific documentation.
Always check the official documentDescription
The South African Civil Aviation Authority (SACAA) is seeking a service provider to conduct a comprehensive Corporate Threat Assessment. The project involves evaluating the SACAA IT environment, including internal networks, external systems, cloud platforms, and business-critical assets. Key tasks include vulnerability identification, web application testing, and wireless security assessments based on ISO/IEC 27001, OWASP, and NIST standards. The successful bidder must deliver a detailed threat analysis report, a mitigation roadmap, and tailored presentations for management and the Audit and Risk Committee. The work will take place at the SACAA Head Office in Centurion.
What you need to qualify
- CSD registration — Registration on the Central Supplier Database — required to do business with government.
- Tax clearance — A valid SARS tax compliance status (PIN) showing your tax affairs are in order.
- Other registration — An industry registration the tender requires (e.g. PSIRA, NHBRC, a professional or trade licence).
Full requirements
- Registered on the National Treasury Central Supplier Database (CSD)
- Valid SARS Tax Compliance Status (TCS) PIN
- Five contactable references for similar work completed within the last three years
- Proof of professional certifications: CEH, OSCP, and CISSP
Contact & how to apply
Name: Rudolph Mohlala
Email: caaquotes@caa.co.za
Phone: 011-545-1720
How to apply: Submit your proposal using a three-envelope system to Tender Box 1 at the SACAA Head Office, Byls Bridge Office Park, Centurion. You must obtain an access code from the designated SACAA contacts before delivery.
Related tenders
Maintenance of Electronic Security Systems for SACAA.
The South African Civil Aviation Authority (SACAA) requires a service provider for the maintenance of electronic security systems at its head office in Centurion for three years. Responsibilities include monthly maintenance of access control systems, CCTV cameras, fire alarm panels, and security hardware like boom gates and metal detectors. The provider must also create a project plan for security breach prevention and emergency response. The work is located at Byls Bridge Office Park, Centurion, and the tender closes on 12 October 2026.
Provision of Physical Security Services for SACAA.
The South African Civil Aviation Authority (SACAA) seeks a service provider for physical security and armed response services at its Centurion offices for three years. The contract includes 24/7 operations with guarding, access control, CCTV monitoring, VIP protection, and patrolling. The provider must supply trained personnel and equipment like firearms, radios, and metal detectors, complying with PSIRA and Department of Labour wage standards. Tender closes on 12 October 2026.
Business Continuity Management and Offsite Recovery Solution.
The South African Civil Aviation Authority (SACAA) seeks a service provider for a three-year Business Continuity Management and offsite recovery solution. The project includes advisory services aligned with ISO 22301 and ISO 27001 standards, a recovery facility located 30-60 km from SACAA's Centurion head office, and 48 workstations with secure infrastructure and backup systems. Deliverables include a BCM framework, risk registers, business impact analysis reports, and crisis management plans. The facility must be maintained for scheduled testing and disaster recovery scenarios. The contract is for three years with a 180-day bid validity period.
BeyondTrust PRA License Renewal for SACAA.
The South African Civil Aviation Authority (SACAA) seeks bids for renewing BeyondTrust Privileged Remote Access licenses over three years. The project includes 50 named user cloud licenses, advanced web access, and 200 hours of technical support at SACAA facilities in Centurion. Bidders must show technical expertise and past performance in similar projects. Tender closes on 16 October 2026.
Provision of Reputational Index Survey Services
The South African Civil Aviation Authority (SACAA) seeks proposals for conducting a Reputational Index Survey. The project includes designing and implementing a survey to assess stakeholder and public perception of SACAA, with work conducted at their Centurion head office. Deliverables include an inception report, progress updates, a final research report with a reputation index score, and an executive presentation to the board. The service provider will also facilitate workshops on survey outcomes. The project must be completed within five months, and bidders must show experience in perception surveys, provide three professional reference letters, and submit CVs for at least three team members, including a lead researcher with 5 to 7 years of experience.
Integrated Aviation Security Screening Solution for ACSA.
Airports Company South Africa (ACSA) seeks a comprehensive aviation security screening solution across its national airport network, including OR Tambo, Cape Town, and King Shaka International Airports. The project involves the design, supply, installation, and maintenance of advanced security technology such as 3D X-ray machines, full-body scanners, and automated tray handling lanes. The contract spans a ten-year lifecycle, focusing on system integration, cybersecurity, and staff training to enhance passenger throughput and security detection. Bidders must ensure 99% operational uptime and adhere to strict aviation security standards.