Overall Objectives

The procurement aims to establish a comprehensive security framework for Eskom's facilities, focusing on both network management and physical security enhancements. The primary goals are to standardize IP address allocation for physical security devices to ensure efficient, conflict-free, and secure network operations, and to implement outcome-based security solutions that leverage advanced technology, improve security effectiveness, and reduce reliance on physical guarding. These initiatives seek to enhance the overall safety, operational resilience, and cyber security posture of Eskom's critical infrastructure.

Scope

The scope encompasses the planning, design, deployment, and management of security systems across Eskom sites and substations. It includes the allocation and documentation of IP addresses for devices such as CCTV cameras, access control, intrusion detection, public address systems, and peripherals, ensuring consistent network schemas and security policies. Additionally, it covers the provision of integrated security solutions, development of control rooms for centralized monitoring, deployment of advanced technologies like AI analytics and thermal imaging, and the support for incident management and legal compliance. The scope also extends to stakeholder engagement and community liaison strategies, with a focus on long-term operational resilience.

Technical Requirements

Technical specifications emphasize the use of private IP address ranges within the 10.x.x.x space, structured according to regions and sites, with each site allocated a /24 subnet. The IP schema includes designated ranges for network equipment, security devices, and future expansion, following a standardized pattern (e.g., 10.20x.x.1 to 10.20x.x.40 for core infrastructure, 10.20x.x.41 to 10.20x.x.219 for security peripherals). The systems must support high-definition, AI-enabled CCTV with night vision and facial recognition, perimeter sensors, and tamper detection devices. Data security is critical, requiring encrypted storage and transfer, role-based access, and audit trails. The infrastructure must support real-time monitoring, alert management, and integration with Eskom’s existing security ecosystem, ensuring high system availability (>99%) and detection accuracy (>90-99%). Communication networks should be resilient, with backup power solutions, and systems must comply with Eskom standards and relevant legislation.

Skills and Skills Requirements

The tenderer must demonstrate proven experience in delivering integrated, outcome-based security solutions for critical infrastructure, including energy sectors. Technical capabilities should cover deployment and maintenance of CCTV, intrusion detection, access control, AI analytics, and communication systems. The team must be skilled in developing control room operations, incident management, and real-time response protocols, ensuring compliance with Eskom standards and legal frameworks such as POPIA, FCA, and PSIRA. Certified personnel with relevant qualifications are required, along with experience in stakeholder engagement, law enforcement collaboration, and community liaison. The provider should possess strong project management skills, capacity for system integration and scalability, and a commitment to continuous improvement and future technology adoption.