Implementation of ISO 27001 and ISO 14001 Systems.
SCM
In plain English
The National Lotteries Commission is seeking a service provider to implement ISO/IEC 27001 and ISO 14001 management systems. Bidders must be registered on the Central Supplier Database and comply with B-BBEE requirements.
Always check the official documentDescription
The National Lotteries Commission (NLC) is seeking a service provider to implement an ISO/IEC 27001 Information Security Management System and an ISO 14001 Environmental Management System. The project involves conducting gap analyses, developing management manuals, and providing staff training. The work will be performed over a six-month period. Key deliverables include comprehensive gap analysis reports, finalized management system manuals, and training materials for NLC officials. The service provider will report directly to the Chief Risk Officer. This initiative aims to strengthen the organization's information security and environmental management practices through structured capacity building and policy development.
What you need to qualify
- CSD registration — Registration on the Central Supplier Database — required to do business with government.
- Tax clearance — A valid SARS tax compliance status (PIN) showing your tax affairs are in order.
- B-BBEE certificate — A B-BBEE certificate or sworn affidavit confirming your contribution level.
- Letter of Good Standing — COID registration and a Letter of Good Standing from the Compensation Fund.
Full requirements
- Must be registered on the Central Supplier Database (CSD)
- Must have valid SARS Tax Compliance Status PIN
- Must provide valid B-BBEE certificate or sworn affidavit
- Project Team Leader must hold ISO/IEC 27001 Lead Implementer or Auditor certification
- At least one project team member must hold ISO 14001 certification
- Must provide proof of COIDA registration
Contact & how to apply
Name: SCM
Email: lucky@nlcsa.org.za
Phone: 012-432-1309
How to apply: Proposals must be submitted via the e-tender portal. Documents must be in PDF format, with financial and technical responses attached separately. Submissions must be clearly marked with the bidder's name, tender number, and title.
Related tenders
Supply and Implement Integrated Regulatory Information System.
The National Credit Regulator (NCR) seeks a qualified service provider to supply, configure, implement, and maintain an Integrated Regulatory Information Management System (IRIS). The project includes data migration, system integration, and a self-service portal, to be executed at the NCR offices in Midrand over three years, with a possible two-year extension. A Minimum Viable Product is required within six months. The solution must encompass training, support, and security management. Bidders should have a proven track record with regulatory bodies, and pricing must be in South African Rand, covering a five-year total cost of ownership.
Provision of Quality Management System at ACSA.
Airports Company South Africa (ACSA) seeks a service provider to design, develop, and implement an automated Quality Management System (QMS) for a sixty-month period at ACSA facilities. The system must support ISO 9001 standards, include mobile accessibility, and integrate with existing enterprise systems. Key deliverables include a centralized document management repository, workflow automation, real-time reporting dashboards, and user training. Bidders must have at least five years of QMS implementation experience and provide five contactable reference letters.
Managed Cybersecurity Services Provider for NHBRC.
The National Home Builders Registration Council (NHBRC) seeks proposals for a Managed Cybersecurity Services Provider for a five-year contract. The provider will offer comprehensive security services, including a 24/7/365 Security Operations Centre in South Africa, covering network and cloud security, incident response, vulnerability management, penetration testing, and threat intelligence. Additional responsibilities include cyber awareness training, policy governance, and document security. Deliverables include operational reports, risk assessments, and incident response playbooks. Bidders must have at least five years of experience in enterprise-grade cybersecurity and ensure all services are performed by South African-based analysts to maintain data sovereignty. A detailed cost model for implementation, ongoing operations, and annual escalations is required.
Enterprise Risk and Compliance Management Services.
South African Tourism seeks a service provider to implement and mature an integrated Enterprise Risk Management, Compliance, Ethics, and Business Continuity Management framework over 36 months. Responsibilities include conducting maturity assessments, developing governance documents, facilitating risk workshops, and training staff. The project supports both the South African Tourism Head Office and international offices. Bidders must have five years of relevant experience and a team with specific professional qualifications. The evaluation includes a technical functionality threshold of 70%. A detailed commercial proposal is required, and the project aims to enhance organizational resilience and compliance with standards like King V and the Public Finance Management Act.
AI tools license provider for National Lotteries Commission.
The National Lotteries Commission seeks a service provider to supply, configure, and support enterprise AI tools for two years. This includes providing eight user licenses for platforms like ChatGPT, Azure AI, Claude, or Google Gemini. The scope covers administrative controls, data privacy, single sign-on integration, and technical support. Training for ten staff members and IT personnel is required. The project starts with a kick-off phase, followed by license provisioning, security setup, and training within the first month, with ongoing support for 24 months.
Procurement of Integrated Data Analytics Platform for Transnet.
Transnet seeks a service provider to supply and implement an integrated data analytics platform for its internal audit division across all operating divisions in South Africa for five years. The platform must handle data ingestion, transformation, and secure reporting, integrating with systems like SAP and Oracle. Deliverables include software licensing, system configuration, audit workflow development, and ongoing maintenance and support. The solution must ensure high availability, disaster recovery, and strict data security. Bidders must provide evidence of past experience and demonstrate technical expertise.