Objectives

The primary objective is to strengthen the Commission for Conciliation, Mediation & Arbitration’s information security management by equipping one internal audit official with advanced penetration testing competencies. This initiative aligns cybersecurity training with organisational strategy, supports legislative compliance, and enables more independent, effective, and value-adding assurance engagements.

Scope

The service provider will deliver a two-day, interactive online workshop via Microsoft Teams for a single CCMA employee. The engagement includes the CompTIA PenTest+ V3 Complete Bundle with a retake option. Training coverage spans planning and scoping, information gathering, vulnerability discovery and analysis, attacks and exploits, tools and automation, reporting and communication, and examination preparation. The scope requires:

• Practical demonstrations using included virtual lab environments
• Guidance on CertMaster Perform and CertMaster Practice platforms
• Formative knowledge checks and a structured post-workshop study plan
• A detailed course outline mapped to PenTest+ V3 exam objectives
• Accredited learning materials, learner aids, and both formative and summative assessments
• Issuance of attendance and completion certificates within thirty days
• A facilitator progress report and a project outline with risk mitigation strategies

Technical Requirements

• Bidders must submit a fixed, all-inclusive quotation covering all applicable taxes, presented on official company letterhead
• Mandatory documentation includes a valid Tax Clearance Certificate, proof of authorisation as a CompTIA partner/reseller (or written confirmation of authorised channel procurement), and a current Seta, QCTO, or CHE accreditation certificate
• Training must be conducted entirely online via MS Teams with interactive, participative methodologies
• Quotations must meet a minimum functionality score of 70 points before price evaluation
• Evaluation utilises an 80/20 scoring model: 80 points for price competitiveness and 20 points for transformation-specific goals
• Late submissions, missing documentation, or failure to quote on official letterhead result in automatic disqualification

Skills Requirements

• The lead facilitator must possess a minimum of three years’ experience delivering training workshops
• Holders must demonstrate recognised cybersecurity qualifications such as PenTest+, Security+, CISM, CEH, CISSP, OSCP, or CISA
• Providers must attach detailed CVs showcasing relevant expertise and pedagogical competence
• Three verifiable reference letters or attendance registers for comparable ICT training engagements are required
• Facilitators must demonstrate the ability to accommodate learners with special needs or barriers to learning
• A proven track record with documented client testimonials confirming successful delivery of similar services is mandatory

Key Terms & Explanations

80/20 System: Refers to South Africa’s Preferential Procurement Policy Framework Act (PPPFA), where 80 points are allocated to competitive pricing and 20 points to specific transformation goals, primarily enterprise ownership demographics.

Seta/QCTO/CHE Accreditation: Denotes mandatory national recognition for training providers in South Africa, ensuring curriculum quality, regulatory compliance, and alignment with sector-specific skills development frameworks.

CertMaster Perform/Practice: CompTIA’s official virtual hands-on lab environment and exam simulation platform integrated into the training bundle for realistic assessment preparation.

SBD4 & SBD6.1: Standard South African government bidding disclosure and preference claim forms requiring full transparency regarding directorships, state employment links, and ownership percentages to calculate transformation preference points accurately.