SSB Cyber Security Audit Tender for Infrastructure Audit in India 2026 ISO 27001/20000 CERT-IN

Bidders must be CERT-IN empanelled Information Security Auditors, provide ISO 27001/20000 credentials, and show two government cyber security audits in 3 years (one ≥ ₹2 lakh). Submit Incorporation, GST, PAN, empanelment proof, and CEH/CISA certifications. Ensure no blacklisting and attach client execution notes. Delivery terms follow ATC; payment terms to be confirmed.

Required documents include GST registration, PAN, Incorporation/Registration, CERT-IN empanelment proof, ISO 27001/ISO 20000 certificates, CEH/CISA/CPENT/CND AWS certifications, proof of two government cyber security audits (one ≥ ₹2 lakh), and client execution notes. Also attach invoices, contracts, and third-party inspection notes where available.

Mandatory certifications include CERT-IN empanelment, ISO 27001 and ISO 20000, and professional credentials CEH, CND AWS, CPENT, and CISA. These certifications validate technical capability for government cyber security audits and ensure compliance with security standards before bid submission.

The estimated value is ₹50,000.00 for a cyber security infrastructure audit. Scope centers on auditing security controls across government IT infrastructure, with emphasis on audit methodology, CERT-IN compliant practices, and verification of certifications rather than hardware deployment.

Yes, the contract permits a 25% increase or decrease in contract quantity or duration at the time of contract issue, and up to 25% adjustment after issuance. Bidder must accept revised quantities or durations as part of the award.

Bidder must have completed at least two government cyber security audits in the last three years, with one project valued over ₹2,00,000. Provide contract copies, client certificates, or execution notes as proof per ATC requirements.

ISO 27001 and ISO 20000 certifications must be held by the bidder at least six months before bid publication. Provide certificates and expiry dates; these ensure alignment with information security management and IT service management standards.

Submit CERT-IN empanelment proof with the bid. Ensure the empanelment covers information security auditing services and includes expiry dates. Cross-check that the bidder’s team includes personnel holding CERT-IN validated credentials.