Objectives

The primary objective of this tender is to procure and implement a comprehensive KnowBe4 Security Awareness Training and Phishing Human Risk Management Tool for the University of Johannesburg (UJ). The goal is to streamline cybersecurity efforts by consolidating phishing detection, automated email quarantine, interactive security training, and real-time risk analysis into a single, integrated platform. This initiative aims to enhance the university's security posture, reduce manual intervention, ensure compliance with relevant standards (such as POPIA and ISO/IEC 27001:2022), and mitigate cyber threats effectively over a period of at least three years.

Scope

The scope includes the deployment of the KnowBe4 platform with capabilities such as:

• Phishing threat detection and simulation
• Automated email quarantine and incident escalation workflows
• Interactive, behaviour-driven micro-training modules
• Real-time analytics and dashboards for security metrics and user risk profiling
• Integration with existing security infrastructure including O365, Elastic SIEM, Microsoft Defender, VirusTotal, and OTX
• Customisable content for different organisational domains (IT, HR, Finance)
• Support for ongoing updates, patches, and upgrades
• Post-implementation documentation and knowledge transfer
• Support and maintenance services for a minimum of three years

Technical Requirements

The solution must meet the following technical specifications:

• Seamless integration with existing security tools and infrastructure, including email gateways and SIEM systems
• Ability to automate phishing detection, quarantine, and incident escalation workflows
• Real-time behaviour-driven micro-training based on user actions
• Unified analytics dashboards for monitoring training progress, phishing simulation performance, and user risk profiles
• AI-driven phishing detection and reporting features, including easy reporting buttons in Outlook
• Integration with threat intelligence feeds such as VirusTotal and AlienVault OTX
• Auto-quarantine of malicious emails before delivery
• Role-based access control and domain-specific content management
• API access for data integration with internal dashboards (e.g., Power BI)
• Support for migration from existing solutions (e.g., COFENSE)
• Regular patches, updates, and security health checks

Skills Requirements

The tenderer must demonstrate:

• Proven experience of at least three years in deploying and supporting KnowBe4 or similar security awareness and phishing management solutions, supported by references
• Expertise in cybersecurity, including knowledge of threat detection, incident response, and security awareness training
• Capability to provide ongoing support, including after-hours incident handling, expert consultancy, and regular performance reviews
• Ability to deliver tailored training content and domain-specific modules
• Technical proficiency in integrating security tools and managing system upgrades and patches
• Experience in developing and implementing automation playbooks for threat response
• Qualified personnel with relevant certifications such as CSATP, Security+, CISSP, or CySA+
• Strong project management skills to ensure timely delivery, configuration, and documentation