Objectives

The primary objective is to appoint a qualified service provider to supply, install, and configure a Privilege Access Management (PAM) solution for the Buffalo City Metropolitan Municipality’s critical applications. The initiative aims to strengthen cybersecurity governance, secure administrative credentials, enforce strict oversight of privileged user activities, and protect sensitive municipal data from internal and external threats.

Scope of Work

• Supply and deploy a complete PAM solution aligned with BCMM’s IT infrastructure.
• Conduct on-site installation and configuration in East London.
• Provide annual licensing for twenty (20) system administrators.
• Deliver ongoing technical support and maintenance post-implementation.
• Submit comprehensive operation and maintenance manuals in both hard copy and electronic formats, accompanied by detailed system architecture diagrams.
• Achieve guaranteed proof of delivery and full operational readiness within fourteen to thirty days after receipt of an official purchase order.

Technical Requirements

The PAM solution must satisfy the following technical specifications:

• Compatible with virtualised environments and seamlessly integrable into BCMM’s existing server and network ecosystem.
• Real-time monitoring and granular control over administrator actions, including login tracking, keystroke logging, and mouse event capture.
• Automated session recording for all changes executed on servers, firewalls, and critical applications.
• Secure credential lifecycle management featuring encrypted storage, automated password generation, scheduled rotation, and audit-ready reporting.
• Implementation of just-in-time access protocols to grant elevated privileges only during authorised tasks, with automatic revocation upon completion.
• Continuous threat detection and rapid response capabilities to identify and neutralise suspicious activities, malware, and cybercriminal intrusions.
• Comprehensive change-tracking and audit trail functionality ensuring full visibility of all privileged operations.

Skills and Experience Requirements

Bidders must demonstrate proven capability through the following mandatory criteria:

• Documented experience in successfully supplying, installing, and configuring PAM solutions for comparable public or private sector organisations.
• Verifiable project references, including client contact details and supporting official purchase orders.
• Detailed curriculum vitae of key implementation personnel, backed by certified academic and professional qualifications.
• Active registration on the Central Supplier Database (CSD) with verified tax compliance status.
• Compliance with Broad-Based Black Economic Empowerment (BBBEE) requirements, supported by a SANAS-accredited certificate or valid sworn affidavit.
• Proven capacity to execute the full implementation within the stipulated 14–30 day delivery window upon contract award.

Key Terms and Concepts Explained

• Privilege Access Management (PAM): A security framework and software suite that identifies, controls, monitors, and secures privileged user accounts (e.g., system administrators, root users) to prevent unauthorised access, mitigate insider threats, and enforce least-privilege principles.
• Just-in-Time Access: A security practice where elevated permissions are granted temporarily for a specific task and automatically revoked immediately after use, significantly reducing the risk of credential misuse or lateral movement by attackers.
• 80/20 Preference Points System: An evaluation methodology where eighty percent of scoring is allocated to competitive pricing, and twenty percent is distributed across socio-economic goals, including BBBEE status level and geographical locality within the municipality.
• Central Supplier Database (CSD): A national government registry used to verify supplier legitimacy, tax compliance, and eligibility to conduct business with public sector entities.