Objectives

The primary objective of this tender is to engage a qualified implementation partner capable of implementing controls for ISO/IEC 27001 within South African Airways (SAA). The partner should assist in establishing an effective Information Security Management System (ISMS) that ensures the confidentiality, integrity, and availability of SAA’s information assets, aligning with international standards. Additionally, the partner will provide related services, strategic guidance, and practical support throughout the implementation process to achieve compliance and enhance information security posture.

Scope

The scope of this tender includes:

• Provision of ISO/IEC 27001 implementation services to establish and integrate controls for information security management.
• Collaboration with SAA’s internal teams to facilitate knowledge transfer and ensure sustainable compliance practices.
• Provision of skilled IT resources, including roles such as ISMS Lead, specialists, and project managers, both onsite and offshore, over a contract period of 6 months.
• Support in risk assessment, treatment, and management aligned with ISO/IEC 27001 standards.
• Assistance with achieving ISO/IEC 27001 certification readiness and ongoing compliance support.

Technical Requirements

The technical requirements for this tender include:

• Demonstrated expertise in implementing ISO/IEC 27001 standards within the past five years, preferably in sectors such as airlines, finance, telecoms, or related industries.
• Provision of experienced and certified IT personnel with knowledge of ISO 27001/27002, capable of delivering a compliant and effective ISMS.
• Ability to provide resources in all required roles, with CVs supporting relevant experience and certifications.
• Implementation of a systematic approach to risk identification, assessment, and treatment in line with ISO/IEC 27001.
• Cost-effective resource deployment with clear pricing based on skillset and location (onsite/offshore).
• Adherence to project timelines, with a detailed implementation schedule or project plan.

Skills Requirements

The skills and qualifications required from the successful bidder include:

• Proven experience in ISO/IEC 27001 implementation, certification, or compliance support within the last five years.
• Strong understanding of information security principles, risk management, and regulatory requirements.
• Availability of skilled IT resources with relevant training, certifications, and hands-on experience in establishing and maintaining ISO/IEC 27001 compliant environments.
• Capability to transfer knowledge and build internal capacity within SAA’s teams.
• Professional certifications such as ISO/IEC 27001 Lead Implementer/Auditor, CISSP, CISM, or equivalent are preferred.
• Educational qualification of at least a diploma or higher in IT or related fields, supported by relevant certifications.
• Excellent communication, collaboration, and project management skills to ensure timely and effective delivery.