Objectives

The primary objective is to deploy, configure, stabilize, and operationalise the RedRok Threat Intelligence platform within the Land Bank’s IT environment. The project aims to strengthen the institution’s cybersecurity posture by integrating advanced threat intelligence, attack surface monitoring, and human-risk security awareness, while ensuring comprehensive knowledge transfer and long-term operational sustainability for internal staff.

Scope of Work

• Provide end-to-end professional services for the installation, configuration, and stabilization of the RedRok platform.
• Deliver structured training and knowledge transfer to Land Bank personnel to guarantee independent platform operation.
• Support approximately 600 laptops and 100 servers/network devices across the bank’s existing infrastructure.
• Implement four core solution modules: Intelligence Module, Internal Attack Surface Module, External Attack Surface Module, and Employee Security Awareness Training Human Risk Factor Module.
• Submit a fixed-price quotation covering all associated costs (installation, configuration, stabilization, training, taxes, logistics, labour, and subsistence) for a 12-month period per module.
• Comply with all mandatory South African public procurement, tax, and transformation requirements as stipulated in the tender documentation.

Technical Requirements

• Bidders must hold valid OEM, OSM, or Accredited Reseller/Partner/Distributor status for RedRok, supported by official proof of authorization.
• Proposals must clearly itemize pricing for each module, acknowledging that the client reserves the right to select all or only specific modules based on budget and operational priorities.
• Ensure seamless integration with existing endpoints and network infrastructure without disrupting daily banking operations.
• Adhere to strict confidentiality, data protection (POPIA), and financial due diligence (FICA) standards throughout deployment and service delivery.
• Meet all statutory compliance criteria, including SARS Tax Compliance Status, Central Supplier Database registration, fully completed SBD disclosure forms, and valid B-BBEE certification.

Skills Requirements

• Proven expertise in deploying and configuring enterprise-grade threat intelligence and cyber exposure management platforms.
• Cybersecurity engineering capabilities for attack surface mapping, threat data aggregation, and system stabilization.
• Ability to design and deliver practical security awareness training focused on human risk factors and cyber hygiene practices.
• Strong knowledge transfer and change management skills to empower internal teams for sustained platform operation.
• Familiarity with South African regulatory frameworks, public procurement processes, and government banking sector compliance standards.

Notes on Unusual or Complicated Terms

• RedRok / CTEM Modules: Refers to a Cyber Threat Exposure Management platform that consolidates multi-source threat data, continuously monitors internal and external digital footprints, and mitigates human-related security vulnerabilities through targeted training and risk assessment.
• 80/20 Preference Point System: A South African public procurement scoring model where 80 evaluation points are awarded based on competitive pricing, and 20 points are allocated to socio-economic goals, primarily Black Economic Empowerment (B-BBEE) ownership and enterprise development targets.
• FICA & POPIA Compliance: Mandatory South African legal frameworks requiring thorough identity verification (Know Your Customer) and strict handling, processing, and storage of personal information during vendor onboarding and contract execution.