Custom Bid for Services - To carry out the cyber security audit application security audit and vuln
N/a
GURGAON, HARYANA
Bid Publish Date
22-Nov-2025, 10:14 am
Bid End Date
14-Feb-2026, 2:00 pm
EMD
₹76,000
Value
₹76,13,171
Location
Progress
Quantity
1
Bid Type
Two Packet Bid
Chennai Petroleum Corporation Limited invites bids for a Cyber Security Audit of industrial OT network at CPCL Manali, Tiruvallur, Tamil Nadu. Estimated value is ₹7,613,171 with an EMD of ₹76,000. The contract allows a ±25% change in quantity or duration at issue time and post-award, with excess settlement for additive charges up to a defined percentage. The absence of BOQ items suggests a comprehensive audit scope, including risk assessment, vulnerability scanning, and compliance verification for OT assets. Bidders should align with the service nature of the engagement and deliver an auditable report package. This tender emphasizes technical rigor, cost control, and flexibility in service scope under the Buyer Added Terms.
Product/service: Cyber Security Audit of industrial OT network
Location: CPCL Manali, Tiruvallur, Tamil Nadu
Estimated value: ₹7,613,171; EMD: ₹76,000
Key deliverables: audit report with findings, risk scores, remediation plan
Standards/compliance: IS standards not specified; require audit rigor and CPCL-aligned methodologies
EMD of ₹76,000 required; vendor should provide bid security as per CPCL terms
Quantity/duration may adjust by up to 25% at contract issue and after award
Excess settlement allowed for addons with proper documentation and validity
EMD payment ₹76,000; service payment terms follow CPCL policy; include addon settlement documentation if applicable
Kick-off and milestone-based audit reporting; exact dates not provided; bidders to propose implementation plan
Not explicitly stated; expected to be in CPCL standard terms; bidders should seek clarification during bid submission
Experience in cyber security audits for industrial OT networks
Financial stability adequate for ₹7.6 million engagement
Compliance with CPCL procurement norms and GST registration
Main Document
SCOPE_OF_WORK
OTHER
PAYMENT
OTHER
OTHER
OTHER
GEM_GENERAL_TERMS_AND_CONDITIONS
N/a
GURGAON, HARYANA
Directorate General Of Quality Assurance ( Dgqa)
PUNE, MAHARASHTRA
Indian Institute Of Technology (iit)
HARIDWAR, UTTARAKHAND
Chennai Petroleum Corporation Limited
TIRUVALLUR, TAMIL NADU
Munitions India Limited
CHANDRAPUR, MAHARASHTRA
Tender Results
Loading results...
Discover companies most likely to bid on this tender
GST registration certificate
Permanent Account Number (PAN) card
Experience certificates for similar OT cyber security audits
Financial statements or turnover evidence
EMD transfer receipt or payment proof
Technical bid documents demonstrating audit methodology
OEM authorizations or vendor certifications (if applicable)
Extended Deadline
14-Feb-2026, 2:00 pm
Opening Date
14-Feb-2026, 2:30 pm
Extended Deadline
07-Feb-2026, 2:00 pm
Opening Date
07-Feb-2026, 2:30 pm
Extended Deadline
31-Jan-2026, 2:00 pm
Opening Date
31-Jan-2026, 2:30 pm
Extended Deadline
24-Jan-2026, 2:00 pm
Opening Date
24-Jan-2026, 2:30 pm
Extended Deadline
17-Jan-2026, 2:00 pm
Opening Date
17-Jan-2026, 2:30 pm
Extended Deadline
10-Jan-2026, 2:00 pm
Opening Date
10-Jan-2026, 2:30 pm
Extended Deadline
03-Jan-2026, 2:00 pm
Opening Date
03-Jan-2026, 2:30 pm
Extended Deadline
27-Dec-2025, 2:00 pm
Opening Date
27-Dec-2025, 2:30 pm
Extended Deadline
20-Dec-2025, 3:00 pm
Opening Date
20-Dec-2025, 3:30 pm
Extended Deadline
13-Dec-2025, 3:00 pm
Opening Date
13-Dec-2025, 3:30 pm
Extended Deadline
13-Dec-2025, 2:00 pm
Opening Date
13-Dec-2025, 2:30 pm
Key insights about TAMIL NADU tender market
Bidders must submit GST, PAN, experience credentials, financial statements, EMD ₹76,000, and technical bid detailing audit methodology for OT security. Include OEM authorizations if required and align with CPCL's excess settlement option and ±25% scope adjustments. Ensure CPCL governance compliance and project kickoff plan.
Required documents include GST certificate, PAN, experience certificates for OT cyber security audits, financial statements showing turnover, EMD payment proof, and technical bid with audit approach. OEM authorizations or vendor certifications should be provided if applicable per CPCL terms.
The audit should cover risk assessment, vulnerability scanning, configuration reviews, incident response readiness, and produce an auditable report with findings, risk scores, and remediation recommendations. While no standards are specified, bidders must present CPCL-aligned methodologies and reporting format.
The EMD amount is ₹76,000. This bid security supports bid validity, and payment should follow CPCL’s procurement guidelines. Include proof of transfer or payment with the bid submission as part of the technical envelope.
The tender lacks explicit delivery dates; bidders should propose a detailed kick-off plan with milestones in their technical proposal, including initial assessment, data collection, vulnerability assessment, remediation guidance, and final audit report delivery.
Contract scope may fluctuate by up to 25% at contract issue and post-award. Additionally, addons can be invoiced under the excess settlement option with required supporting documents, ensuring total invoice value remains within approved limits.
Bidders should demonstrate OT cyber security audit experience, financial stability, and availability of skilled personnel. Certifications or OEM authorizations are favorable; ensure alignment with CPCL governance and provide audit methodology, tooling, and reporting standards in the bid.
Submit a detailed audit methodology, milestones, and deliverable templates for the final report. Include remediation recommendations aligned to CPCL network architecture, and provide a compliance map to CPCL standards; use milestone-based reporting for timely approval.
Sign up now to access all documents
Main Document
SCOPE_OF_WORK
OTHER
PAYMENT
OTHER
OTHER
OTHER
GEM_GENERAL_TERMS_AND_CONDITIONS