VVUZA

Cyber Incident and Response Retainer Services.

Land Bank

In plain English

The Land Bank is seeking a service provider for a 12-month digital forensics incident response retainer. Bidders must comply with mandatory requirements and tax compliance obligations.

Always check the official document
Closing date
13 October 2026
Location
272 Lenchen Avenue, Lakefield Office Park, Building A, First Floor, Die Hoewes, Centurion-Centurion-Centurion-0157
Estimated value
R 2 500 000
Published
18 September 2026
Tender no.
RFQ-Cyber-Incident-and-Response-Retainer

Description

The Land and Agricultural Development Bank of South Africa invites bids for a 12-month Digital Forensics Incident Response (DFIR) retainer. The service provider will offer 24/7 emergency support, incident triage, forensic investigations, threat intelligence, and security assessments. Work will be conducted remotely and onsite at the Land Bank Head Office. Key deliverables include an onboarding plan, incident response procedures, forensic investigation reports, threat monitoring updates, and penetration testing results. The contract duration is one year, requiring constant availability for incident activation.

What you need to qualify

  • CSD registrationRegistration on the Central Supplier Database — required to do business with government.
  • Tax clearanceA valid SARS tax compliance status (PIN) showing your tax affairs are in order.
  • B-BBEE certificateA B-BBEE certificate or sworn affidavit confirming your contribution level.

Full requirements

  • Must be registered on CSD and hold valid SARS tax compliance status
  • Must possess valid B-BBEE certificate or sworn affidavit
  • Must provide evidence of 10 years DFIR experience in financial institutions
  • Must provide evidence of engagement with relevant regulatory or security bodies
  • Team must hold relevant forensic certifications and professional experience
  • Must provide documented forensic evidence handling and methodology procedures
  • Must have documented 24/7 incident activation and escalation procedures

Contact & how to apply

Name: Supply Chain Management

Email: Tenders@landbank.co.za

Phone: 012-686-0500

How to apply: Bids must be submitted via email to BSeerane@landbank.co.za and/or quotations@landbank.co.za by 13 October 2026 at 16h00.

Download tender documents

Related tenders

Technology28 Sept 2026

Implementation and Support of Network Detection and Response Solution

Sasria seeks a service provider for a 36-month project to implement and support a Network Detection and Response (NDR) solution. The project involves design, deployment, and maintenance of a cyber threat detection system, integrating network and cloud telemetry, AI-driven threat analytics, and identity services. Deliverables include staff training, technical documentation, and ongoing support, with integration into existing tools like Microsoft Sentinel and Defender. A structured methodology for testing, performance monitoring, and incident response is required to ensure robust protection across hybrid environments.

34 & 36 Fricker Rd -Illovo-Sandton-2196R 4 500 000
Technology22 Sept 20264d left

RedRok Threat Intelligence Platform Installation and Training

The Land and Agricultural Development Bank of South Africa invites bids for the installation, configuration, and stabilization of the RedRok Threat Intelligence platform. The project includes setting up modules for internal threat intelligence, external attack surface monitoring, and employee security awareness training for approximately 600 laptops and 100 servers. The successful bidder will provide professional services, including system integration, tuning of detection capabilities, and comprehensive training for bank personnel over a 12-month period. The platform must be fully operational and handed over to the bank's team by the end of the contract.

272 Lenchen Avenue, Lakefield Office Park, Building A, First Floor, Die Hoewes, Centurion-Centurion-Centurion-0157R 1 200 000
Security25 Sept 20267d left

Service Provider for Forensic Investigation on Fraud and Corruption.

The National Regulator for Compulsory Specifications (NRCS) seeks a service provider to conduct a forensic investigation into alleged fraud and corruption involving an intern. The investigation will take place at NRCS offices, with deliverables including a comprehensive report, working papers, and evidence suitable for legal proceedings. The project must be completed within 30 days, with an estimated effort of 160 hours. The service provider must also support potential disciplinary hearings and report findings to the Internal Audit Manager.

Dr Lategan Road,SABS Campus,-Groenkloof-Pretoria-0001R 250 000
General Purpose30 Sept 2026

Provision of Ad Hoc Forensic Investigation Services.

The Perishable Products Export Control Board (PPECB) seeks a service provider for ad-hoc forensic investigation services to address suspected misconduct, fraud, and corruption. The contract is for 36 months, with a possible 24-month extension. Responsibilities include data analysis, reporting, supporting disciplinary hearings, and assisting with law enforcement communication. Expertise in forensic auditing and cybercrime investigation is required.

45 Silwerboom Avenue-Plattekloof-Cape Town-7560R 3 500 000
Security09 Oct 2026

Threat Detection and Response Services for RAF.

The Road Accident Fund (RAF) seeks a service provider for Managed Threat Detection and Response services over five years. This includes 24/7 monitoring, SIEM engineering, incident response, threat hunting, and skills transfer. Services will be performed at RAF offices in Centurion, with a Security Operations Center maintained in South Africa. Key deliverables include a service migration plan and regular training for 10 personnel.

420 Witch-Hazel Avenue, Eco Glades 2-Centurion-Pretoria-0046R 15 000 000
Security15 Oct 2026

Cyber Security Enhancement for City Power Johannesburg

City Power Johannesburg (SOC) Ltd seeks a qualified ICT Security Services Partner to implement a Network Detection and Response (NDR) solution. The project aims to enhance cyber security through advanced threat hunting, automated response, and continuous network monitoring. It includes the supply of hardware and software, system design, integration with existing security tools, and ongoing maintenance. Key deliverables are a pre-deployment assessment, system configuration, administrator training, and technical support. Bidders must achieve a minimum technical functionality score of 80% to qualify. The contract requires adherence to strict incident management response times and compliance with international security standards. The closing date is 15 October 2026 at 11h00.

40 Heronmere road-Reuven -Johannesburg -2016R 8 500 000