Objectives

The primary objective is to secure an annual renewal of comprehensive endpoint security and managed detection and response services for the Eastern Cape Gambling Board. The procurement aims to maintain robust cyber defence capabilities, ensure regulatory compliance, and align with national preferential procurement policies while protecting critical digital infrastructure.

Scope

The contract covers the annual licensing, deployment, and support renewal for 120 endpoints across multiple Cybereason platforms. The scope encompasses:

• Next-generation antivirus and anti-malware protection.
• Endpoint detection and response (EDR) platform access and management.
• Regional data centre hosting for EDR components to meet data residency expectations.
• Server add-on support for Windows and Linux operating systems.
• Managed detection and response (MDR) services, including continuous monitoring, threat hunting, and incident response.
• Dedicated technical support services.

Bidders must submit verifiable proof of authorised Cybereason partner status to qualify for consideration.

Technical Requirements

Bidders must supply the following licensed solutions for 120 endpoints (with four units of technical support):

• NGAV (Next-Generation Antivirus): AI-driven protection offering fileless attack prevention, ransomware mitigation, and reputation-based threat intelligence for Windows and macOS environments.
• ENTR (Enterprise EDR): Automated platform enabling rapid threat triage, response, and mitigation, supported by independent 24/7 threat hunting and granular endpoint controls.
• EDR-HOST (Local Hosting Add-on): Ensures the EDR platform operates from a regional data centre located outside the United States, addressing data sovereignty and latency considerations.
• EDR-SERV (Server Support Add-on): Provides compatibility and maintenance support for Windows Server and Linux OS deployments.
• MDR-CMPLT (Managed Detection & Response): Fully outsourced security operations covering premium onboarding, continuous monitoring, proactive threat hunting, system tuning, and active incident response to augment internal security teams.
• CR-TS-SUP-S (Technical Support): Dedicated support package ensuring timely, expert assistance aligned with organisational operational needs.

Skills Requirements

While not explicitly itemised, the nature of the deliverables implies bidders must demonstrate:

• Valid Cybereason partner/reseller certification and active vendor accreditation.
• Proven expertise in deploying, configuring, and managing enterprise-grade EDR and NGAV solutions across heterogeneous operating environments.
• Operational capacity to deliver 24/7 managed detection and response, including threat intelligence analysis, incident triage, containment, and remediation.
• Technical proficiency in server support architectures and regional cloud/data centre hosting configurations.
• Capability to navigate South African public sector procurement frameworks, including tax compliance verification, B-BBEE documentation, and statutory form completion.

Key Procurement & Contractual Notes

80/20 Preference Point System: Evaluations allocate 80 points to price and 20 points to specific socio-economic goals: 5 points each for greater than 50% black ownership, greater than 50% black female ownership, verified SMME/EME/QSE status, and Eastern Cape-based registration. Documentary proof must accompany the bid.

Warranty & Performance: A standard twelve-month warranty applies post-delivery. Successful bidders must furnish performance security within thirty days of award and adhere to strict delivery timelines, with financial penalties applied for delays.

Compliance: All bids require valid SARS tax clearance (PIN or TCS certificate), Central Supplier Database (CSD) registration, and signed SBD declaration forms. Collusive bidding, restrictive practices, or false declarations result in immediate disqualification and potential ten-year procurement bans.