Supply Implementation Training Support and Maintenance of an Integrated Enterprise Cyber Risk and Exposure Management Platform with Information Asset Management Vulnerability Management Patch Management and Compliance Monitoring Capabilities for a Period of 3 Years

SUPPLY IMPLEMENTATION TRAINING SUPPORT AND MAINTENANCE OF AN INTEGRATED ENTERPRISE CYBER RISK AND EXPOSURE MANAGEMENT PLATFORM WITH INFORMATION ASSET MANAGEMENT VULNERABILITY MANAGEMENT PATCH MANAGEMENT AND COMPLIANCE MONITORING CAPABILITIES FOR A PERIOD OF 3 YEARS

CYBER RISK VULNERABILITY MANAGEMENT AND COMPLIANCE PLATFORM

Tender number: KEBS/1029/0489/2026-27

Procuring entity: KENYA BUREAU OF STANDARDS

Procurement category: Non Consultancy Services

Procurement method: Open Tender

Bidding access: Open

Source of funds: GoK

Bid security: KES 280,000

Performance security: 10% of contract value

Technical evaluation: Combination of Both

Evaluation basis: Grand total wise

Bid validity: 182 days

Clarifications until: 03 Nov 2026 10:00 (Nairobi time)

Published: 27 Oct 2026 11:00 (Nairobi time)

Closing: 13 Nov 2026 11:00 (Nairobi time)

Bid opening: 13 Nov 2026 11:15 (Nairobi time)

Eligibility documents required

- SELF - DECLARATION FORM - SD1&2 - SUBMIT A VALID COPY OF THE COMPANY’S CERTIFICATE OF INCORPORATION, CERTIFICATE OF REGISTRATION, OR BUSINESS NAME REGISTRATION CERTIFICATE, AS APPLICABLE - SUBMIT A VALID KENYA REVENUE AUTHORITY TAX COMPLIANCE CERTIFICATE. THE CERTIFICATE SHALL BE VERIFIED THROUGH THE KRA TAX COMPLIANCE CERTIFICATE CHECKER. - SUBMIT A VALID AND CURRENT CR12 FORM, TOGETHER WITH COPIES OF THE NATIONAL IDENTITY CARDS OR OTHER VALID IDENTIFICATION DOCUMENTS OF ALL LISTED DIRECTORS - SUBMIT A VALID COUNTY GOVERNMENT SINGLE BUSINESS PERMIT OR EQUIVALENT BUSINESS LICENSE - ORIGINAL BID BOND: BANK GUARANTEE OF KES 280,000 VALID FOR 30 DAYS BEYOND THE 212-DAY TENDER VALIDITY, ISSUED BY A BANK OR MICROFINANCE INSTITUTION LICENSED AND OPERATINGIN KENYA. - SUBMIT A DULY COMPLETED, SIGNED, AND STAMPED CONFIDENTIAL BUSINESS QUESTIONNAIRE. - SUBMIT A DULY COMPLETED, SIGNED, AND STAMPED FORM OF TENDER. - BIDDER MUST PROVIDE A VALID AGPO CERTIFICATE INDICATING REGISTRATION UNDER THE YOUTH OWNED ENTERPRISE CATEGORY. - SUBMIT A DULY COMPLETED, SIGNED, AND STAMPED DECLARATION AND COMMITMENT TO THE CODE OF ETHICS. - SUBMIT A DULY COMPLETED, SIGNED, AND STAMPED CERTIFICATE OF INDEPENDENT TENDER DETERMINATION. - SUBMIT WITH TENDER A VALID COPY OF THE FOLLOWING ACCREDITATION/COMPLIANCE CERTIFICATE FROM ICT AUTHORITY: (TO BE VERIFIED) I. ICTA 1: INFORMATION SECURITY II. ICTA 1: SYSTEMS AND APPLICATIONS - BIDDER MUST HAVE PARTNERSHIP WITH OEMS AND MUST PROVIDE MANUFACTURER AUTHORIZATION CERTIFICATION. (TO BE VERIFIED - SUBMIT WITH TENDER A VALID OFFICE OF THE DATA PROTECTION COMMISSIONER (ODPC) REGISTRATION CERTIFICATE LICENSE AS I. DATA CONTROLLER II. DATA PROCESSOR (TO BE VERIFIED) - SIX MONTHS BANK STATEMENTS CERTIFIED BY THE ISSUING BANK

Tender documents are free to download from the e-GP Tenders page (egpkenya.go.ke/tender) without an account; search by tender number. Bids are submitted electronically on e-GP.