Objectives

The primary objective of this tender is to procure an Integrated Cloud Email Security Solution for Airports Company South Africa (ACSA) for a period of six (6) months. The solution aims to enhance ACSA’s email security posture by integrating with existing Microsoft 365 email security systems, providing advanced threat protection, and ensuring the security, compliance, and resilience of email communications. The goal is to improve cyber security maturity, safeguard business systems from threats such as phishing, ransomware, and impersonation, and support ACSA’s digitization and digital workforce modernization initiatives.

Scope

In Scope

• Provision of an Integrated Cloud Email Security Solution that seamlessly integrates with existing M365 email security capabilities.
• Protection against Business Email Compromise (BEC), ransomware, and phishing attacks.
• Advanced threat protection including impersonation attack mitigation.
• Management of DMARC protocols to prevent phishing and spoofing.
• Protection against malicious attachments and links through features like sandboxing, anti-virus, URL scanning, and disarmament.
• Impersonation protection including spam blocking, anomaly detection, and account takeover prevention.
• Operations, management, and reporting functionalities such as quarantine management, alerting, detailed sandbox reporting, and log data management.
• Deployment, integration, and data residency considerations, including API, SIEM, identity provider, CASB, ticketing, endpoint protection, and other integrations.
• Implementation of ICES and DMARC services.
• Governance alignment with policies, standards, and continuous improvement processes.

Out of Scope

• Costs related to M365 email security components unless directly related to integration APIs and functionalities.
• Provision of additional or standalone M365 email security features outside the scope of integration.

Technical Requirements

The solution must include:

• Comprehensive email threat protection capabilities including BEC, ransomware, and phishing.
• Advanced threat detection features such as impersonation detection, URL reputation management, and anomaly detection.
• Protection against malicious attachments and links with sandboxing, disarmament, and URL scanning.
• Impersonation and account takeover prevention mechanisms.
• Management interface with MFA, quarantine controls, alerting, and customizable policies.
• Reporting tools for security events, incidents, and system performance, including sandbox reports and log exports.
• Deployment and integration support with existing systems via APIs, SIEM, identity providers, CASB, ticketing, and endpoint solutions.
• Implementation of ICES and DMARC protocols.
• Adherence to data residency requirements and governance standards.

Skills Requirements

• Expertise in cloud-based email security solutions and integration with Microsoft 365 environments.
• Proficiency in implementing and managing DMARC, DKIM, and SPF protocols.
• Experience in deploying advanced threat protection features including anti-phishing, anti-spam, sandboxing, and URL disarmament.
• Capability to provide comprehensive incident management, reporting, and analytics.
• Strong understanding of cybersecurity best practices, threat intelligence sharing, and governance compliance.
• Ability to support deployment, integration, and ongoing support of security solutions across multiple systems and platforms.
• Effective communication skills for stakeholder engagement, reporting, and documentation.