Objectives

The primary objective is to procure comprehensive cybersecurity capabilities through Managed Detection and Response (MDR) services, accompanying software, and related professional services. This initiative aims to strengthen the South African Medical Research Council’s (SAMRC) information security posture across its headquarters in Cape Town and regional branches in Gauteng and KwaZulu-Natal.

Scope

The scope encompasses the end-to-end provision of threat monitoring, detection, investigation, and response capabilities. It includes the supply of required MDR software platforms and professional services for deployment, integration, and ongoing operational management. The agreement will operate for an initial term of thirty-six months, subject to annual performance reviews, with a discretionary extension option of up to twenty-four months.

Technical Requirements

While granular technical specifications are reserved for the full tender documentation, the invitation mandates a strict functionality-based assessment. Bidders must demonstrably meet all prescribed functional criteria; failure to comply results in immediate disqualification. Suppliers must also maintain active registration on the Central Supplier Database (CSD) and submit their official supplier number and unique reference code for validation. Submission protocols require one original hard copy and a corresponding PDF archive on a USB flash drive, delivered physically before the deadline. Email, fax, or online portal submissions are explicitly invalid.

Skills Requirements

Bidders must be qualified and technically competent in delivering enterprise-level cybersecurity operations. Although specific personnel certifications are not enumerated in this notice, successful suppliers will need proven expertise in architecting and managing MDR ecosystems, integrating security software with complex IT environments, and providing sustained professional support. Experience operating across multi-site institutions and navigating regulated research data environments is strongly implied given SAMRC’s operational footprint.

Key Terms & Clarifications

• Managed Detection and Response (MDR): An advanced cybersecurity service model that combines automated threat-detection technologies with dedicated human analysts. It extends beyond traditional endpoint protection by offering continuous, proactive monitoring, rapid incident triage, containment, and remediation guidance tailored to the client’s specific infrastructure.
• Central Supplier Database (CSD): A mandatory national procurement registry administered by the National Treasury. State entities are legally prohibited from awarding contracts to suppliers who are not properly registered on the CSD with verified, current company details.
• 80/20 Preference Point System: A statutory evaluation methodology under South African procurement law. Eighty percent of the scoring weight is assigned to technical functionality and capability, while twenty percent reflects socio-economic transformation criteria, primarily Broad-Based Black Economic Empowerment (BBBEE) status.
• Functionality-First Evaluation: A two-stage assessment process where bids are initially judged solely on their ability to meet technical and operational requirements. Only fully compliant bids proceed to the financial and preference point evaluation phase.