Objectives

The primary objective of this tender is to procure an on-premises Privileged Access Management (PAM) solution that includes software licensing, implementation, support, and maintenance for a period of three (3) years. The solution aims to enhance security by managing, monitoring, and auditing privileged access across the organization’s infrastructure, ensuring compliance with relevant security standards and regulations such as ISO 27001, NIST, and POPIA.

Scope

The scope encompasses the deployment of a comprehensive PAM platform supporting both Production and Disaster Recovery environments. It includes:

• Discovery and management of privileged accounts, service accounts, application accounts, SSH keys, and credentials.
• Configuration, management, monitoring, and auditing of privileged sessions and activities.
• Automated remediation and mitigation recommendations for privileged access security gaps.
• Integration with existing identity management, logging, and cybersecurity platforms.
• Support for secure credential vaulting, session recording, behavioral analytics, anomaly detection, and compliance reporting.
• Support for hybrid environments including on-premises, cloud, and hybrid architectures.
• Provision of support and maintenance for 36 months post-deployment.

Technical Requirements

The technical specifications include, but are not limited to:

• Support for centralized PAM architecture with high availability (HA) and disaster recovery (DR) configurations.
• Integration with Active Directory, LDAP, MFA, SAML, and RADIUS authentication providers.
• Secure storage and control of privileged credentials, including password check-in/check-out and automated rotation.
• Real-time session monitoring, keystroke logging, command logging, file transfer monitoring, and session replay.
• Behavioral analytics, anomaly detection, and user behavior analytics capabilities.
• Audit logging, compliance reporting, SIEM integration, and forensic reporting.
• Support for endpoint privilege management, application control, privilege elevation, and application whitelisting.
• Protection of PAM infrastructure through tamper-proof logs and FIPS compliance.
• Secure remote privileged access for vendors and third parties, including VPN-less access and session oversight.
• Support for mobile remote access on iOS and Android platforms.

Skills Requirements

The bidder must demonstrate:

• Experience in deploying enterprise-grade PAM solutions with high availability and disaster recovery configurations.
• Proven ability to integrate PAM with existing identity management and security platforms.
• Capability to provide secure credential management, session monitoring, and behavioral analytics.
• Experience in supporting hybrid environments (on-premises, cloud, and hybrid).
• Qualified personnel with relevant certifications and experience in PAM deployment, configuration, and support.
• Ability to deliver comprehensive documentation, operational procedures, architecture diagrams, and knowledge transfer sessions.
• Support and maintenance expertise aligned with the solution’s technical specifications.