Objectives

The primary objective of this tender is to procure a comprehensive, enterprise-grade cybersecurity awareness and human risk management platform for South African Airways (SAA). The solution aims to enhance user behaviour, strengthen security culture, and reduce human-related cyber risks across the organization through continuous, adaptive, and behaviour-driven training and simulations.

Scope

The scope includes:

• Supply, implementation, and configuration of the CybSafe Human Risk Management and Security Awareness Training Platform.
• Deployment of a continuous cybersecurity awareness program with micro-learning content on topics such as phishing, password management, data protection, mobile security, cloud usage, and digital behaviour.
• Implementation of phishing simulation capabilities with features like unlimited campaigns, automated scheduling, behavioural feedback, and reporting.
• Provision of a content library aligned with standards like ISO 27001, NIST, and CIS Controls.
• Provision of at least 2,200 user licenses with scalability options.
• Enabling advanced behavioural analytics, including risk scoring, security culture measurement, maturity assessments, and trend analysis.
• Delivery of dashboards and reports to monitor engagement, training completion, phishing performance, and overall human risk posture.
• Ongoing management and support of the platform throughout the contract duration.

Technical Requirements

The technical specifications include:

• A fully managed platform supporting at least 2,200 users, with scalability.
• Automated, recurring, and tailored micro-learning content covering key cybersecurity topics.
• Phishing simulation capability with features like unlimited campaigns, automated scheduling, and behavioural feedback.
• Access to an updated content library aligned with international standards (ISO 27001, NIST, CIS Controls).
• Advanced behavioural analytics including human risk scoring, security culture measurement, and trend analysis.
• Dashboards and reporting tools for tracking user engagement, training progress, phishing results, and risk indicators.
• Integration capabilities with existing security operations, including Active Directory (AD) and Single Sign-On (SSO).
• Provision of platform administration, content updates, phishing management, and technical support.

Skills Requirements

The bidder must demonstrate:

• Experience as a CybSafe accredited partner or authorized reseller with proven deployment and management experience in enterprise environments.
• Capability to deliver a fully managed service, including platform administration, content management, phishing simulations, and reporting.
• Ability to provide evidence of prior managed service engagements, with at least 25% of the platform managed service delivered across three different clients within the last five years.
• Demonstrated expertise in delivering cybersecurity awareness and human risk management projects, supported by testimonial letters.
• Proficiency in integrating the platform with existing security tools and monitoring environments.
• Qualified personnel with relevant experience, IT qualifications, and cybersecurity certifications, supported by CVs.
• Capability to produce dashboards, analytics, and reports that measure behavioural change, security culture, and overall human risk posture.