Objectives

The primary objective of this tender is to appoint a qualified service provider to deliver comprehensive managed cybersecurity services and operate a 24/7 Security Operations Centre (SOC) for Mossel Bay Municipality. The goal is to enhance the municipality's cybersecurity posture, protect its digital infrastructure, and ensure continuous monitoring and incident response, leveraging Microsoft E5 security features and best practices.

Scope

The scope of work includes:

• Provision of managed cybersecurity services aligned with Microsoft E5 security components.
• Full implementation, configuration, and ongoing maintenance of Microsoft E5 security features.
• Regular vulnerability assessments and annual penetration testing.
• Continuous 24/7 security monitoring and incident response through the SOC.
• Monthly cybersecurity reporting, including insights and recommendations.
• Participation in quarterly security review meetings.
• Limited cybersecurity advisory services to support the municipality’s internal team.
• Management of approximately 1,200 devices within the municipality’s digital ecosystem.

Technical Requirements

The technical requirements include:

• Delivery of services equivalent to appointing a dedicated Cybersecurity Officer.
• Implementation and management of Microsoft Defender, Sentinel, and other security tools.
• Conducting vulnerability assessments and annual penetration tests.
• Real-time threat detection, incident coordination, and response via the SOC.
• Provision of monthly reports and dashboards.
• Participation in security review meetings and advisory support.
• Provision of necessary licenses, including 560 Microsoft E5 licenses.
• Compliance with relevant cybersecurity standards and best practices.

Skills Requirements

The successful bidder must demonstrate:

• Proven experience in managing cybersecurity services, with a minimum of 3 years in managing cyber security services and providing three reference letters.
• Capability to implement and manage Microsoft E5 security features.
• Expertise in vulnerability assessments, penetration testing, and continuous security monitoring.
• Qualified cybersecurity personnel, including:
• Project Manager with at least 3 years’ experience managing similar projects.
• Cybersecurity analysts or SOC specialists with relevant certifications (e.g., CISSP, CISM, CEH, CompTIA).
• Penetration testers with at least 3 years’ experience and relevant certifications.
• Ability to provide technical advisory support and participate in security review meetings.
• Certified Microsoft Partner or OEM/OSM certification evidence.
• Experience in managing large-scale cybersecurity environments and device ecosystems.