Directorate General Of Quality Assurance Cyber Security Audit Tender 2026 Ahilya Nagar ISO 27001 ISMS 55000
Bid Publish Date
29-Sep-2026, 11:59 am
Bid End Date
15-Oct-2026, 12:00 pm
Value
₹55,000
Location
Progress
Key Highlights
- • ISO 27001 ISMS audit focus with security and compliance scope
- • ATC clause allowing 25% variation in quantity or duration
- • OEM authorization/documentation requirement for resellers
- • No BOQ items; audit-oriented procurement by DGQA
- • Mandatory acceptance of all terms including ATC for security audit
- • Distinct emphasis on governance, risk and controls in government context
Tender Overview
The Directorate General Of Quality Assurance (DGQA), under the Department Of Defence Production, invites bidders for a Cyber Security Audit – Security and Compliance Audit. Estimated value is ₹55,000.00. The procurement relates to the scope of ISO 27001: Information Security Management System (ISMS) and related security auditing requirements in Ahilya Nagar area. The tender emphasizes compliance with ATC terms and supplier authenticity, including OEM authorization where applicable. The absence of BOQ items suggests a focused, standards-driven assessment rather than material supply. The bid appears to target firms with proven ISMS and cyber security audit capabilities to verify governance, risk, and controls. Unique aspects include acceptance of ATC terms and potential quantity/scope adjustments under the 25% variation clause.
Technical Specifications & Requirements
- Product/Service: Cyber security audit and ISMS compliance verification (ISO 27001: Information Security Management System).
- Standards/Certifications: Emphasis on ISO 27001 compliance, ISMS implementation review, with potential ISMS-related scope of work.
- Scope Indicators: Security and compliance auditing services for government-defence aligned processes; no physical BOQ items.
- Delivery/Outcome: Audit report detailing conformance with ISMS controls, risk assessment findings, and remediation recommendations.
- Experience/Eligibility: Bidders should demonstrate capability in conducting ISMS audits and familiarity with government procurement security standards.
- Documentation: OEM authorization where applicable, and certificates proving audit capabilities.
Terms, Conditions & Eligibility
- EMD/Financials: No explicit EMD amount listed in the data; ensure readiness to meet standard bid security requirements.
- ATC Clauses: 25% variation in quantity or contract duration allowed; acceptance of ATC terms required.
- Authorization: Manufacturer/OEM authorization may be required for distributors or service providers.
- Documentation: Upload certificates/documents specified in the bid document and ATCs; ensure non-liquidation proof and financial stability undertakings where requested.
- Acceptance: Bidders must accept all terms, including ISO 27001 ISMS scope and associated ATC.
- Penalties/Compliance: Adhere to standard bid terms and any late delivery or non-conformance penalties outlined in ATC.
Key Specifications
-
Product/service names: Cyber security audit, ISMS compliance verification
-
Quantities/values: Estimated value ₹55,000.00
-
Experience: Demonstrated ISMS/audit capability for government/defence sectors
-
Quality/standards: ISO 27001 ISMS, security governance and controls audit
-
Delivery: Audit report with remediation recommendations; no BOQ items
Terms & Conditions
-
25% variation allowed in quantity or duration at contract issue
-
ATC acceptance required; OEM authorization when applicable
-
ISMS/ISO 27001 audit scope; compliance with government security standards
Important Clauses
Payment Terms
No explicit payment terms provided; bidders should align with standard government bid payment upon acceptance of audit report and deliverables
Delivery Schedule
Delivery is framed as audit activity with a final ISMS compliance report; exact timeline not specified in data
Penalties/Liquidated Damages
Penalties likely aligned with ATC and standard security audit contracts; specifics not provided
Bidder Eligibility
-
Proven ISMS/ISO 27001 audit experience
-
Demonstrated capability in cyber security compliance assessments
-
No explicit liquidation or bankruptcy proceedings; financial stability undertakings typical
Tender Data
Bid Details
Quantity
1
Bid Type
Two Packet Bid
Bid Validity
90 (Days)
Bid Type
Service
Evaluation
Total value wise evaluation
Tech Clarification Time
2 Days
Preference & Exemptions
EMD Required
No
MII Compliance
Yes
MSE Purchase Preference
Yes
MSE Preference Band
L1+15%
MSE Exemption/Relaxation
Yes
Startup Exemption/Relaxation
Yes
Bid Splitting Applied
No
Requirements
Experience Required
1 Year (s)
Arbitration Clause
No
Mediation Clause
No
Additional Tender Data
Commercial Details
Tender Category
Service
Bid To RA
No
Bid To RA Enabled
No
Item Category
Cyber Security Audit - Security and Compliance Audit
Delivery Details
Delivery Locations
1
Delivery Cities
Ahmednagar
Delivery Locations
| Consignee | Address | City | State | Pincode | Quantity | Delivery Days | Additional Requirement |
|---|---|---|---|---|---|---|---|
| - | Ahmednagar | Ahmednagar | - | - | Project / Lumpsum Based | - | - |
Authority Records
BID & GeM Expert Consultancy
End-to-end support — bid preparation, GeM registration, document filing & compliance by industry experts.
Free consultation · 24h response
Documents 5
GeM-Bidding-9913183.pdf
Main Document
Other Documents
OTHER
Buyer uploaded ATC document
ATC
GEM General Terms and Conditions Document
GEM_GENERAL_TERMS_AND_CONDITIONS
GEM General Terms and Conditions Document
GEM_GENERAL_TERMS_AND_CONDITIONS
Categories
9
🤖 AI-Powered Bidder Prediction
Discover companies most likely to bid on this tender
Required Documents
GST registration certificate
Permanent Account Number (PAN) card
Experience certificates in ISMS/IS auditing
Financial statements / solvency undertaking
EMD documents (if applicable per tender terms)
Technical bid documents demonstrating ISMS audit capability
OEM authorization / manufacturer authorization where applicable
Any ISO 27001 / ISMS certification certificates
Frequently Asked Questions
How to bid for the cyber security audit tender in Ahilya Nagar?
To bid, confirm ISMS audit capability, submit OEM authorization if applicable, attach GST and PAN, provide ISMS audit experience certificates, and ensure acceptance of ATC terms including 25% scope variation. Ensure documentation aligns with government procurement standards.
What documents are required for ISMS audit bid in DGQA?
Submit GST certificate, PAN card, experience certificates in ISMS audits, financial statements, OEM authorization, technical bid detailing audit methodology, and any ISO 27001 certifications. Include bid security if mandated by the tender terms.
What standards are required for the security audit bid?
Bidders must demonstrate ISO 27001 ISMS audit capability and provide related certifications or audit engagement proofs. The scope centers on governance, risk management, and controls assessment per ISO 27001 guidelines.
When is the bid submission deadline for the DGQA audit?
The tender data does not specify a deadline here; bidders should monitor GeM portal updates for the exact submission date and ensure readiness of all mandatory documents and OEM authorizations prior to the deadline.
What are the EMD requirements for this DGQA security audit?
The data does not list an explicit EMD amount; bidders must be prepared to provide standard bid security as per GeM terms and the specific security audit contract guidelines, if invoked.
What is the payment terms for the ISMS audit contract?
Payment terms are not detailed in the tender data; typical government audits use milestone-based payments upon delivery of the ISMS audit report and conformance verification, subject to contract terms.
What delivery outcomes are expected from the ISMS audit?
Deliverables include a comprehensive ISMS audit report detailing conformity to ISO 27001 controls, risk assessment findings, remediation recommendations, and an executive summary for DGQA governance and compliance.