Objectives

The primary objective is to appoint a qualified service provider to supply, implement, configure, license, support, and maintain the Mimecast Email Security Solution for the Engineering Council of South Africa (ECSA). The initiative aims to strengthen cybersecurity defenses against phishing, malware, ransomware, spam, and business email compromise while enhancing email compliance, archiving, and business continuity within ECSA’s Microsoft 365 environment.

Scope

• Provision and maintenance of Mimecast licenses aligned with ECSA’s active user count on an annual subscription basis for a fixed three-year term.
• End-to-end implementation, configuration, ongoing support, maintenance, monthly reporting, and professional services.
• Detailed documentation, system diagrams, knowledge transfer, and participation in disaster recovery and business continuity reviews.
• Optional services priced separately, including Incydr modules for data loss prevention, instructor-led training, email integration, and OneDrive add-ons.

Technical Requirements

• Bidders must hold current authorization as a Mimecast Partner, Reseller, Distributor, or Service Provider.
• Delivery must include Advanced Protection Cloud Gateway licenses, user licenses, DMARC Analyzer subscriptions, and OEM-backed support.
• Implementation requires a comprehensive methodology covering migration strategy, governance framework, risk management, reporting structure, and knowledge transfer plan.
• Support model must specify either 24/7/365 or business-hours coverage, with documented escalation procedures, a functional service desk, dedicated account management, and clear SLA commitments.
• All pricing must be quoted in South African Rand, inclusive of VAT, with mandatory and optional services explicitly separated.

Skills Requirements

• Company must demonstrate over ten years of experience in Mimecast security, email security, DMARC management, managed security services, and Microsoft 365 solutions.
• Proposed team must include certified Mimecast or Microsoft 365 Security specialists.
• Support resources must possess at least three to five years of relevant experience, with longer tenure receiving higher evaluation weighting.
• Bidders must submit client reference letters confirming successful delivery of similar projects within the past seven years.
• Mandatory administrative compliance includes valid tax clearance, CIPC registration, bank confirmation, and Broad-Based Black Economic Empowerment (B-BBEE) documentation.

Key Terms & Services Explanation

• Mimecast: A cloud-native email security platform that provides threat protection, secure gateway services, failover capabilities, and long-term archiving to ensure continuous email operations.
• DMARC Analyzer: A monitoring and enforcement service that validates Domain-based Message Authentication, Reporting & Conformance protocols to prevent domain spoofing, improve sender reputation, and enhance email deliverability.
• Incydr: A data loss prevention (DLP) solution that detects, monitors, and restricts unauthorized transmission of sensitive information across email, cloud storage, and endpoints, supplemented here with training and integration components.
• B-BBEE: South Africa’s regulatory framework promoting economic transformation and inclusion; compliance scores influence preference point allocation during bid evaluation.
• OEM Support: Direct technical assistance, warranty coverage, and priority troubleshooting provided by the original equipment manufacturer, ensuring rapid resolution and access to vendor-specific updates.