Objectives

The primary objective of this tender is to supply, deliver, and install a fully integrated cyber security solution for a period of 36 months. The goal is to establish a comprehensive cybersecurity framework that includes continuous monitoring, vulnerability management, incident response, and governance to protect municipal assets against cyber threats such as ransomware, phishing, credential compromise, and data exposure.

Scope

The scope encompasses the provision of a fully managed cybersecurity service that includes:

• Supply, delivery, and installation of cybersecurity hardware and software components.
• Implementation of a Security Operations Centre (SOC) with 24/7 monitoring and investigation.
• Deployment of SIEM, Endpoint Detection and Response (EDR), Identity Threat Detection and Response (ITDR), and security awareness training.
• Ongoing vulnerability management, annual penetration testing, threat intelligence, and incident response support.
• Cybersecurity governance, reporting, and transition support at contract end.

Technical Requirements

The technical specifications include:

• Provision of a Managed Security Operations Centre (SOC) operating 365 days/year with trained cybersecurity analysts.
• Implementation of SIEM/log management, EDR, ITDR, and security awareness platforms.
• Continuous vulnerability scanning and management, including detection, prioritization, remediation tracking, and verification.
• Annual penetration testing with a defined scope covering internet-facing infrastructure, web applications, and critical ICT assets.
• Threat intelligence and proactive threat hunting capabilities.
• Incident response support with defined notification and escalation procedures.
• Cybersecurity governance frameworks, policies, and compliance reporting aligned with recognized standards.
• Provision of detailed reports, including vulnerability management, governance assessments, penetration testing, and incident reports.
• Onboarding, implementation, and transition support, including integration with existing municipal systems.

Skills Requirements

The tender mandates the following skills and qualifications for key personnel:

• Project Manager: Degree in Management or Information Systems, with verifiable experience, and certifications such as CISA, CISM, or CRISC. Responsible for overall project delivery and stakeholder coordination.
• Cybersecurity Governance Specialist: Certified in ISO 27001, CGEIT, COBIT 5, or ITIL, with experience in security policy review, risk assessment, and governance frameworks.
• Managed SOC Advisory Support & Offensive Security Specialist: Evidence of OSCP, CRTP, or CPPT certifications, with expertise in vulnerability management, penetration testing, threat validation, and remediation verification.

Additional skills include experience with ISO 9001 and ISO 27001 standards, and the ability to address continuous cybersecurity operations, incident management, threat hunting, and governance reporting.