Objectives

The primary objective of this tender is to provide a Certified Information Security Manager (CISM) course for Brand South Africa employees. The training aims to bridge the gap between technical cybersecurity skills and strategic business leadership, enabling IT professionals to design, govern, and manage enterprise information security programs that align with organizational goals, legal requirements, and industry standards. Additionally, the course seeks to prepare attendees for the CISM exam and compliance management roles, ultimately supporting the organization's cybersecurity and risk management strategies.

Scope

The scope of work includes:

• Delivering a comprehensive training course on information security management tailored for Brand South Africa staff.
• Ensuring the course covers key areas such as security governance, risk management, compliance, incident response, and integration of third-party security requirements.
• Including an exam component to assess participants' understanding.
• Issuing accredited certificates upon successful completion.
• Providing the course in a format suitable for organizational needs, with a focus on practical application aligned with organizational goals and legal frameworks.

Technical Requirements

The technical requirements for the tender include:

• The course must be accredited and include an exam component.
• Provision of an accredited certificate to attendees upon completion.
• The training should incorporate content on:
• Cybersecurity governance frameworks
• Risk management strategies
• Legal and regulatory compliance (including POPIA)
• Incident response procedures
• Third-party security integration
• The course should be delivered by qualified trainers with relevant certifications and experience in information security management.
• The training must include a detailed course outline, exam, and certification process.

Skills Requirements

The skills required from the service provider include:

• Expertise in cybersecurity and information security management, particularly in the context of organizational governance and compliance.
• Experience in delivering professional development courses, especially related to CISM or similar certifications.
• Ability to prepare participants for the CISM exam and compliance roles such as Compliance Manager.
• Strong understanding of legal frameworks such as POPIA and industry best practices.
• Capability to develop and deliver engaging training sessions that combine technical knowledge with strategic insights.
• Proven track record of working with public sector or similar organizations.