Overall Objectives

The overarching goal of the tender is to establish a robust framework that ensures the security, integrity, safety, quality, and regulatory compliance of Transnet's operational systems and infrastructure. Specifically, the security objectives focus on protecting Operational Technology (OT) environments from cyber threats, managing risks, and maintaining resilience through comprehensive controls, monitoring, and management practices. Concurrently, the quality objectives aim to guarantee that all products, systems, and services delivered across ports meet established standards for quality, safety, and environmental compliance, ensuring reliable and safe operations.

Scope of Work

The scope encompasses two interconnected domains:

• OT Security and Management: Developing, implementing, and monitoring security controls for OT systems, including documenting critical processes, defining responsibilities, maintaining policies and SOPs, conducting compliance site visits, managing network architecture, remote access, virus protection, patch management, physical security, incident response, training, third-party management, and ensuring legal and regulatory adherence.
• Quality Assurance and Control: Overseeing the entire lifecycle of product and service delivery—from design and manufacturing to installation and commissioning—across all ports. This includes establishing quality management systems, inspection and testing procedures, documentation control, and compliance verification through audits and certifications.

Technical Requirements

For OT Security and Management:

• Documentation and review of network architecture with segmentation and minimal TCP/IP connections.
• Implementation of firewalls, DMZ, secure configurations, and restricted remote access with strong authentication.
• Deployment of tailored antivirus and malware protection, secure backup and recovery procedures, physical security measures, vulnerability assessments, and incident response protocols.
• Management of wireless networks, staged patching, password policies, resilient infrastructure with redundancy, and vendor/third-party controls.
• Alignment with best practices and standards to ensure confidentiality, integrity, and availability of OT data and systems.

For Quality Assurance and Control:

• Implementation of a Quality Management System aligned with ISO 9001:2015.
• Preparation of Quality Control Plans (QCPs), inspection checklists, factory acceptance tests (FAT), and control of non-conforming products via NCRs.
• Calibration, verification, and proper use of inspection and test equipment, with records maintained.
• Structured inspection and testing schedules, documentation control, and records retention for at least five years.

Skills and Competency Requirements

For OT Security and Management:

• Management and oversight personnel capable of implementing and maintaining security controls, policies, and frameworks.
• Security and governance specialists with experience in risk management, vulnerability assessments, incident response, and compliance monitoring.
• Training providers for ongoing security awareness and competency development of OT staff.
• Third-party and vendor management expertise to oversee contractual and security compliance.
• Personnel skilled in change management, system monitoring, auditing, and data protection.

For Quality Assurance and Control:

• Qualified quality personnel with certifications and experience in quality assurance, inspection, testing, and compliance with ISO standards.
• Technicians trained in calibration, use, and verification of inspection and test equipment.
• Personnel familiar with preparing, reviewing, and approving QCPs, FATs, NCRs, and related documentation.
• Skills in conducting audits, inspections, and surveillance activities to ensure adherence to quality standards.
• Proficiency in maintaining accurate records, data packs, and documentation in line with ISO 9001:2015 requirements.