Cyber Security Audit - Security and Compliance Audit
Central Board Of Excise And Customs (cbec)
MUMBAI, MAHARASHTRA
Bid Publish Date
30-Dec-2025, 10:12 am
Bid End Date
12-Jan-2026, 11:00 am
Location
Progress
Quantity
1
Bid Type
Two Packet Bid
Organization: Bharat Petroleum Corporation Ltd. The procurement targets a Cyber Security Audit service focusing on Information Technology Audits of Systems And Business Applications. Scope includes configuration, implementation, data migration, and architecture audits within a central government/state-owned context, assessed against formal shortlisting criteria. Key differentiators include strict pre-qualification on cyber security certifications, multi-order experience thresholds, and ATT/POA submission requirements. The tender emphasizes technical and legal compliance over generic capabilities and relies on verifiable past performance in similar audits. This opportunity is positioned for bidders capable of meeting CERT-In, GST, and bank-related documentation standards, with robust governance around IT security processes. Unique clauses include a quantity/duration adjustment right up to 25% at contract issue and after issuance.
Product/service: Cyber Security Audit and IT Audits of Systems And Business Applications
Scope: Configuration/Implementation/Data Migration/Architecture Audit for Central/State Govt organizations or PSUs/Pubic Limited
Experience thresholds: 1 order ≥ ₹21.81 Lakh OR 2 orders ≥ ₹13.63 Lakh OR 3 orders ≥ ₹10.90 Lakh (lower for MSEs)
Documentation: CERT-In empanelment, GST, PAN, CIN, bank details, POA, work completion certificates
Contract flex: 25% quantity/duration adjustment at issuance
No BOQ items; evaluation based on technical and legal compliance
EMD and security deposit details are not explicitly specified; ensure readiness with standard bid deposits
Certification requirements include CERT-In and potential MSE relaxations via Udhyam CA certificates
Delivery/contract duration adjustments allowed up to 25% at contract issue
Not explicitly stated in the extract; bidders should anticipate standard government payment terms after certificate verification and acceptance of deliverables per ATC
No explicit delivery timeline provided; contract terms may include delivery milestones aligned with audit project phases and approvals
Penalty regimes not detailed; ATC clauses likely describe LDs for delay or non-compliance with IT audit standards
Entity type: Company, LLP, or registered firm with 3 years existence
CERT-In compliant bidder with empanelment certificate
GST registration, PAN, and tax registrations in good standing
Experience in cyber security audits and system/architecture audits in government or PSU contexts
Central Board Of Excise And Customs (cbec)
MUMBAI, MAHARASHTRA
Central Water Commission (cwc)
PUNE, MAHARASHTRA
Office Of Special Court Mumbai
MUMBAI, MAHARASHTRA
Petroleum And Explosives Safety Organisation
NAGPUR, MAHARASHTRA
Directorate General Of Quality Assurance ( Dgqa)
PUNE, MAHARASHTRA
Tender Results
Loading results...
Discover companies most likely to bid on this tender
Certificate of Incorporation/registration (Company/LLP/Partnership)
3 years of financial existence documentation (as of tender date)
GST Registration Certificate
PAN Card
CERT-In registration and empanelment certificate
MSE registration documents (if applicable) with Udhyam registration and CA certificate
Cancelled cheque for bank details
Power of Attorney on letterhead
Work completion certificates and Purchase Orders with verification by TPIA
Any additional legal/entity documents requested in Terms and Conditions
Extended Deadline
12-Jan-2026, 11:00 am
Opening Date
12-Jan-2026, 11:30 am
Key insights about MAHARASHTRA tender market
To bid, ensure your entity is registered (Company/LLP/firm) with 3 years existence, provide CERT-In empanelment, GST, PAN, and bank details, plus work completion certificates showing relevant cyber security audits in govt/PSU contexts. Include POA and CN/COI. Prepare past-performance evidence and ensure you meet the 25% contract adjustment clause.
Submit incorporation certificate, 3-year existence proof, GST registration, PAN, CERT-In empanelment, Udhyam registration if applicable, bank details, POA, and work completion certificates verified by TPIA. Include relevant orders demonstrating cyber security/audit experience and organization details.
Bidders must demonstrate experience in cyber security audits and system audits with government scope and comply with CERT-In requirements. While IS/ISO standards are implied, ensure you present certificates and audit methodologies aligned to central/state govt expectations.
Exact submission dates are not provided here; monitor the tender portal for updates. Ensure readiness with all documents, including CERT-In empanelment, GST, and work certificates, before the stated deadline once posted.
The extract does not specify EMD amount; bidders should prepare typical government EMD as per portal guidelines, and align with bank guarantees or online payment methods when the bid notification is released.
Eligibility includes legal entity status (Company/LLP/firm), 3-year existence, GST and PAN registrations, CERT-In empanelment, Udhyam if applicable for MSEs, and evidence of 1–3 similar cyber security/IT audits in the last 3 years with work orders and completion certificates.
Provide work completion certificates and PO copies duly verified by a third-party agency (TPIA), showing contracts for cyber security/configuration/architecture audits within the last 3 years, including reference to related work orders and client details.
Scope includes configuration/implementation/data migration/architecture audits for IT systems and business applications within BPCL or similar govt/public sector contexts, with emphasis on governance, security controls, and audit evidence suitable for central/state government oversight.
Sign up now to access all documents
Main Document
BOQ
SCOPE_OF_WORK
OTHER
ATC
GEM_GENERAL_TERMS_AND_CONDITIONS