Objectives

The primary objective of this tender is to engage a suitably qualified service provider to securely access a BitLocker-encrypted hard drive owned by Mpofana Local Municipality. The engagement aims to either successfully unlock the drive using authorized credentials or, if unlocking is unfeasible, to recover the stored data while strictly adhering to legal, ethical, and security standards.

Scope of Work

• Phase 1 – Assessment: Conduct an initial technical evaluation of the encrypted storage device to determine its condition and identify the optimal recovery pathway.
• Phase 2 – BitLocker Recovery: Attempt to unlock the drive using legitimate forensic methodologies. The provider must not attempt to bypass, crack, or illegally decrypt the drive without explicit authorization and valid recovery credentials.
• Phase 3 – Data Recovery: If unlocking proves unsuccessful, execute advanced data extraction techniques to retrieve files directly from the encrypted medium, provided the task is technically viable.
• Phase 5 – Reporting: Submit a comprehensive technical report detailing all procedures executed, tools utilized, success metrics, and final data deliverables.

Technical Requirements

• Utilize only legally recognized forensic and data recovery techniques.
• Maintain absolute integrity, confidentiality, and security of all municipal information throughout the engagement.
• Avoid unauthorized decryption, brute-force attacks, or credential circumvention.
• Demonstrate capability to handle enterprise-grade encryption protocols and deliver structured, auditable technical documentation.

Skills & Qualifications

• Proven expertise in digital forensics, cybersecurity, and enterprise data restoration.
• Specialized knowledge of Microsoft BitLocker architecture, recovery key management, and volume encryption standards.
• Formal certification or accredited training in forensic computing or data recovery.
• Strong analytical, documentation, and reporting skills aligned with public sector compliance frameworks.
• Experience managing sensitive municipal or government data under strict confidentiality protocols.

Key Terms & Concepts

BitLocker: A full-disk encryption feature developed by Microsoft that automatically secures entire storage volumes. Access requires a valid recovery key or password; unauthorized removal or cracking is illegal and violates data protection laws.

Forensic Data Recovery: A scientific process of extracting, preserving, and analyzing data from damaged, failed, or encrypted storage devices while ensuring the original evidence remains unaltered and legally admissible.

80/20 Preference Point System: A South African public procurement scoring model where 80 points are awarded based on competitive pricing and 20 points are allocated for socio-economic transformation goals, specifically race (black ownership), gender (women ownership), and disability ownership.

CSD Registration: Mandatory enrollment in the Central Supplier Database, the national government repository used to verify supplier legitimacy, tax compliance, and business registration status prior to contract award.