Service Provider for Penetration Testing and Vulnerability Assessment
Tebogo Mbiza
In plain English
NMISA is procuring penetration testing and vulnerability assessment services for a three-month engagement. Bidders must be suitably qualified and experienced cybersecurity service providers.
Always check the official documentDescription
The National Metrology Institute of South Africa (NMISA) invites bids for a once-off penetration testing and vulnerability assessment of its hybrid ICT environment. The project covers cloud infrastructure, on-premises networks, web applications, and identity services. Key deliverables include an initial security assessment, technical remediation workshops, and two retest cycles. The project duration is approximately three months, with an additional three-month period for retesting. Work must commence within five business days of appointment. Bidders must provide evidence of at least five similar projects completed in the last five years, and key personnel must hold relevant cybersecurity certifications and extensive industry experience.
What you need to qualify
- CSD registration — Registration on the Central Supplier Database — required to do business with government.
- B-BBEE certificate — A B-BBEE certificate or sworn affidavit confirming your contribution level.
Full requirements
- Must hold valid Professional Indemnity and Cyber Liability insurance
- Must be registered on the Central Supplier Database (CSD)
- Must possess a valid B-BBEE certificate
Contact & how to apply
Name: Tebogo Mbiza
Email: scm3@nmisa.org
Phone: 012-947-2875
How to apply: Submit a quotation on company letterhead with all mandatory forms via email to scm3@nmisa.org by 14:00 on 23 October 2026. If files exceed 8MB, split the submission into multiple emails.
Related tenders
Microsoft Dynamics 365 Maintenance and Support Services.
The National Metrology Institute of South Africa (NMISA) requires a service provider for the maintenance and technical support of its Microsoft Dynamics 365 ERP system for twelve months. The contract includes functional support, system integration, and corrective development for financial, HR, and procurement processes. Deliverables include an application takeover plan, monthly incident reports, and quarterly system health reviews. The provider must manage the transition from the current partner and ensure system stability at NMISA facilities. Proposals are due by 28 October 2026.
Service Provider for LAN and Wi-Fi Assessment
The MICT SETA seeks a service provider to conduct a detailed LAN and Wi-Fi network assessment at their Midrand head office. The project includes mapping Wi-Fi coverage, identifying signal interference, reviewing network configurations, and testing performance. Deliverables are an inception report, a comprehensive assessment report with heat maps and recommendations, and a presentation of findings. The work must be completed within four weeks to ensure network integrity and efficiency.
ICT Governance Assessment for MICT SETA.
The MICT SETA seeks a service provider to conduct a comprehensive ICT governance assessment over 12 months at its Head Office in Midrand. The project involves evaluating ICT frameworks, risk management, cybersecurity, and data governance against standards like King IV, COBIT, and ISO/IEC 27001. Deliverables include an inception report, maturity assessment, gap analysis, and strategic improvement roadmap. The successful bidder must present findings to the Board to ensure ICT operations align with organizational goals and regulatory requirements.
Procurement of DNS Security Managed Services.
Eskom Holdings SOC Ltd invites tenders for a five-year contract for DNS Security Managed Services, including one year for implementation and four years for maintenance and support. The project involves deploying a hardware-based DNS security suite, IP Address Management, and real-time threat detection across Eskom data centres. Key deliverables include system configuration, integration with existing security platforms, and 24/7/365 technical support. The project starts on 1 December 2026, requiring a dedicated project manager and compliance with IETF standards and SOC 2 requirements. Skills development and a Quality Management System are also required.
Appointment of Service Provider for ICT Research Services.
The National Lotteries Commission seeks a service provider for ICT research and advisory services over two years in Hatfield, Pretoria. The provider must offer an online research portal, expert advisory hours, and strategic guidance on ICT governance, risk management, and security. Deliverables include quarterly executive briefings, benchmarking reports, and a dedicated account manager. Analysts should have at least eight years of experience and relevant qualifications. The contract duration is 24 months from the appointment date.
Provision of ICT Peripherals and Components.
The Council for Geoscience seeks a service provider for supplying ICT peripherals, devices, and components on an as-and-when-required basis for three years. The scope includes input devices, laptop and desktop components, networking equipment, audio-visual tools, and Apple accessories, all with a minimum 12-month warranty. The work is based in Pretoria, with a fixed-price quote required for 56 line items. The project supports staff onboarding, hardware refreshes, and equipment maintenance. Submissions close on 23 October 2026 at 11:00.