Tender Summary: Certified Information Security Manager® (CISM) Course Training

Objectives

The primary objective is to bridge the gap between technical cybersecurity expertise and strategic business leadership. The training aims to equip IT professionals with the knowledge to design, govern, and manage enterprise information security programs that directly support organizational goals and ensure regulatory compliance. Secondary objectives include preparing participants for the official CISM certification examination and issuing accredited short-course certificates upon successful completion.

Scope of Work

The service provider will deliver comprehensive CISM training tailored to Brand South Africa employees. The curriculum must cover enterprise information security governance, risk management, vulnerability assessment, third-party security integration, incident response, and business impact minimization. The engagement encompasses structured training delivery, administration of a final examination, and certification issuance. Providers must also submit a detailed, line-item budget breakdown aligned with the specified deliverables.

Technical Requirements

• Experience Verification: Bidders must submit at least one reference letter on a client’s letterhead confirming prior provision of CISM training.
• Facilitator Qualifications: The proposed trainer must provide a CV demonstrating a minimum of one year of technical and professional experience in CISM training.
• Course Components: The offering must include a formal examination and guarantee accredited certification for qualifying attendees.
• Evaluation Framework: Proposals will be assessed using an 80/20 preference points system, allocating 80% of points to price and 20% to specific socio-economic goals.
• Compliance Documentation: Mandatory submissions include a Central Supplier Database (CSD) report, a valid Broad-Based Black Economic Empowerment (B-BBEE) certificate or sworn affidavit, and completed Standard Bid Document (SBD) forms.
• Payment & Governance: Settlement occurs within thirty days of milestone completion. The successful vendor will operate under Brand South Africa’s supervision and adhere to its code of conduct and supply chain management policies.

Skills Requirements

The core competency requirement centers on the facilitator’s ability to translate complex cybersecurity concepts into strategic business frameworks. Essential skills include:

• Enterprise security program architecture and governance
• Risk identification, assessment, and mitigation strategies
• Third-party supplier security management and contractual integration
• Incident response planning and business continuity alignment
• Regulatory compliance mapping and audit readiness
• Advanced instructional capability to effectively prepare candidates for the CISM certification exam while ensuring practical, organization-specific application of learned principles

Unusual or Complicated Terms

• PPPFA 80/20 Preference Points System: A South African public procurement scoring mechanism where 80% of evaluation points are awarded based on competitive pricing and 20% on specific socio-economic transformation goals (e.g., black ownership, exempted micro-enterprise status). Claiming these points requires strict submission of prescribed documentation; failure to provide proof results in zero points for this category.
• Schedule 3A Public Entity Status: Indicates the procuring organization operates under strict public finance legislation, mandating transparent, auditable supply chain processes, budgetary accountability, and adherence to national preferential procurement regulations.
• POPIA Consent Clause: A mandatory data protection acknowledgment requiring bidders to explicitly authorize the collection, processing, storage, and potential disclosure of personal information in compliance with South Africa’s Protection of Personal Information Act, including provisions for third-party sharing where statutorily required.