Objectives

The primary objective of this tender is to procure ICT support services and licensing for a period of three years to enhance the municipality's ICT infrastructure, security, monitoring, and management capabilities. The services aim to ensure robust support, security compliance, risk management, and efficient operation of ICT systems across the municipality.

Scope

The scope encompasses a comprehensive range of ICT services including:

• Provision of ICT support and licensing for 3 years
• Implementation of security monitoring, vulnerability assessments, penetration testing, and incident response
• Deployment of security information and event management (SIEM), security automation, and SOC services
• Development of ICT policies, procedures, disaster recovery, and enterprise architecture
• Support for cloud assessment, monitoring, and compliance management
• Implementation of cybersecurity awareness and training programs
• Provision of network and infrastructure management tools, documentation, and asset management platforms
• Dark web monitoring, threat detection, and incident response services
• Support for compliance with standards such as ISO 27001, NIST, POPIA, PCI DSS, and others

Technical Requirements

The technical requirements include, but are not limited to:

• Support for enterprise security policies, vulnerability scanning, and patch management
• Implementation of Security Operations Centre (SOC) with 24/7 monitoring and incident response capabilities
• Deployment of SIEM, log management, and security automation tools supporting high-volume event processing
• Advanced threat detection including breach detection, malware, ransomware, and suspicious activity monitoring
• Cloud security assessment, configuration change management, and compliance tracking for Microsoft 365, Azure, SharePoint, and other cloud services
• Monitoring of network devices, endpoints, servers, and cloud environments with automated alerting and reporting
• Support for automated vulnerability assessments, penetration testing, and remediation workflows
• Implementation of IT documentation, knowledge management, and asset discovery platforms
• Regular security audits, training, and awareness programs aligned with industry standards
• Provision of support for compliance with POPIA, ISO 27001, COBIT, ITIL, CMMC, PCI DSS, and other relevant standards

Skills Requirements

The tenderer must demonstrate the following skills and competencies:

• Certified expertise in cybersecurity frameworks such as ISO 27001, NIST CSF, CIS Controls, and POPIA compliance
• Proven experience in deploying and managing SIEM, SOC, and security automation solutions
• Capability to conduct vulnerability assessments, penetration testing, and incident response
• Strong knowledge of cloud security, especially Microsoft Azure, Office 365, SharePoint, and OneDrive
• Experience in developing and implementing ICT policies, disaster recovery, and enterprise architecture
• Skilled in network and infrastructure management, including switches, routers, firewalls, and endpoints
• Ability to provide cybersecurity awareness training aligned with SANS standards and best practices
• Competence in asset management, documentation, and knowledge base platform deployment
• Capability to support compliance audits, reporting, and continuous monitoring
• Strong project management skills with the ability to deliver integrated solutions on time and within budget