Objectives

The primary objective of this tender is to procure managed cybersecurity services from a qualified MSSP to enhance Foskor’s cybersecurity operations over a contract period of sixty (60) months. The services aim to strengthen Foskor’s ability to detect, prevent, and respond to cyber threats, ensuring the protection of digital assets, networks, endpoints, and cloud environments.

Scope

The scope includes providing outsourced Managed Cybersecurity Services, which encompass:

• 24/7 Security Operations Centre (SOC) monitoring and threat detection
• Incident containment, eradication, and response
• Vulnerability assessments and remediation guidance
• Threat hunting and intelligence integration
• Cybersecurity awareness training for Foskor users
• Ad-hoc consulting, advisory, and forensic services
• Reporting, compliance, and governance support aligned with standards such as ISO/IEC 27001, NIST CSF, POPIA, and others
• Migration and integration of historical logs and event data from existing SIEM platforms

Technical Requirements

The technical specifications include:

• 24/7/365 SOC operations with dashboards, alerting, and reporting capabilities
• Threat detection using advanced telemetry, behavior analytics, and threat intelligence sources
• Use of third-party threat intelligence to identify malicious activities and indicators of compromise
• Vulnerability scanning and prioritization, leveraging Foskor’s existing Tenable One platform
• Incident response procedures, including containment, eradication, and recovery activities
• Provision of cybersecurity awareness training modules, regular phishing tests, and user engagement
• Annual security assessments and control hardening support
• Clear separation of IT and OT/ICS monitoring, escalation, and response processes where applicable
• Compliance with relevant standards such as ISO/IEC 27001, NIST CSF, POPIA, and others
• Provision of incident reports, forensic analysis, and evidence management

Skills and Skills Requirements

The skills and certifications required of the MSSP resources include:

• Threat Monitoring & Security Operations: Experience with security tools, SIEM platforms, and incident response
• Network Security: Knowledge of firewalls, intrusion detection/prevention systems, and network protocols
• Risk Management & Vulnerability Assessment: Ability to identify, assess, and mitigate cybersecurity risks
• Penetration Testing & Ethical Hacking: Skills in vulnerability identification through simulated attacks
• Identity & Access Management: Managing user permissions and access controls
• Application Security & Secure Coding: Understanding of application vulnerabilities and secure development practices
• Automation & Scripting: Proficiency in Python, PowerShell, JavaScript, etc.
• Threat Intelligence & Analysis: Use of third-party sources and analysis tools
• Certifications: Relevant cybersecurity certifications such as CISSP, GCIH, CySA+, Security+, CEH, OSCP, CISA, CISM, ISO/IEC 27001 Lead Auditor, SOC2 Type II, and SIEM management certifications

Resources must demonstrate relevant experience, with resumes and certifications submitted as part of the proposal. The MSSP resources should be capable of delivering continuous, high-quality cybersecurity services aligned with industry standards and best practices.