N/A Audit Services Tender Mumbai Maharashtra IT System Audit Cyber Audit ISO 27001:2022 Audits 2026-29
Bid Publish Date
14-Aug-2026, 7:05 pm
Bid End Date
07-Sep-2026, 3:00 pm
EMD
₹7,50,000
Value
₹1,50,00,000
Location
Progress
Tender Overview
The opportunity targets procurement of audit services in Mumbai, Maharashtra for IT System Audit, Cyber Audit, and ISO 27001:2022 audits covering the period 2026-27 to 2028-29. Estimated contract value is ₹15,000,000 with an EMD of ₹750,000. The tender scope appears to be non-BOQ as no items are listed. The procuring entity is currently identified as N/a, with the procurement framed under a Custom Bid for Services category. The absence of product/category specifics suggests bidders must align capabilities to generic IT and information security audits while meeting ISO 27001:2022 audit standards. Unique aspects include multi-year services spanning three financial years and a focus on IT governance, risk management, and cyber security assurance.
Technical Specifications & Requirements
- Primary audit scope includes IT System Audit, Cyber Audit, and ISO 27001:2022 audits for 2026-27 to 2028-29.
- No BOQ items or technical specifications are provided; bidders should rely on standard audit deliverables, risk assessment reports, and audit planning aligned to ISO 27001:2022.
- Estimated value and EMD are specified: ₹15,000,000 and ₹750,000 respectively, signaling a mid-large scale engagement requiring proven IT audit capability.
- No explicit delivery milestones or reporting formats are listed; bidders should prepare for quarterly or annual audit deliverables and formal reporting.
- Compliance expectations may be drawn from the ATC terms; bidders should verify whether any OEM or certification prerequisites apply to IT and cyber audit work.
Terms, Conditions & Eligibility
- EMD: ₹750,000 as security deposit; ensure submission in the prescribed mode alongside bid.
- Period of Contract: 2026-27 to 2028-29; three-year service commitment required.
- Audits Covered: IT System Audit, Cyber Audit, and ISO 27001:2022 audits; ensure team competencies across these domains.
- Organization: Tender issued by an entity with unspecified name; bidders must rely on ATC and formal notification for final eligibility checks.
- Documentation: Prepare standard bid documents including financials, technical capabilities, and evidence of ISO 27001:2022 audit experience; verify OEM/authorship requirements in ATC.
- Delivery & Reporting: Align with probable multi-year delivery schedule; expect formal audit reports and management responses.
- Ensure readiness to comply with any additional clauses in the Buyer Added ATC document.
Key Specifications
-
Audit service category: IT System Audit, Cyber Audit, ISO 27001:2022 audits
-
Estimated contract value: ₹15,000,000
-
EMD: ₹750,000
-
Contract tenure: 2026-27 to 2028-29
-
No BOQ items or explicit technical specs provided
-
Standards referenced: ISO 27001:2022 (per audit scope)
Terms & Conditions
-
EMD of ₹750,000 required with bid submission
-
Three-year service period: 2026-27 to 2028-29
-
Audits include IT System, Cyber, and ISO 27001:2022
-
No explicit technical specifications; rely on ATC for compliance
-
Prepare standard bid documents: financials, experience, certifications
Important Clauses
Payment Terms
Not disclosed in provided data; await ATC for milestone or acceptance-based payments
Delivery Schedule
Three-year engagement with periodic audit deliverables; exact milestones undefined in data
Penalties/Liquidated Damages
Not specified in current data; refer to ATC for LD/penalties if any
Bidder Eligibility
-
Proven experience in IT System and Cyber audits
-
Demonstrated ISO 27001:2022 audit engagements
-
Financial capacity to support ₹15,000,000 contract value
Tender Data
Bid Details
Quantity
1
Similar Category
Cyber Security Audit Hiring Of Agency For ISO Certification Service
Bid Type
Two Packet Bid
Bid Validity
120 (Days)
Bid Type
Service
Evaluation
Total value wise evaluation
Tech Clarification Time
5 Days
Preference & Exemptions
EMD Required
Yes
MSE Purchase Preference
No
Startup Exemption/Relaxation
No
Bid Splitting Applied
No
Requirements
Min. Avg. Annual Turnover
45
Experience Required
7 Year (s)
Arbitration Clause
No
Mediation Clause
No
Additional Tender Data
Commercial Details
Tender Category
Service
Bid To RA
No
Bid To RA Enabled
No
Item Category
Custom Bid for Services - Procurement of Audit Services for IT System Audit, Cyber Audit and ISO 27001:2022 audits from 2026-27 to 2028-29
Advisory Bank
Bank of India
Pre-Bid & Qualification
Pre-Bid Date
24-08-2026 11:00:00
Pre-Bid Venue
SEBI Premises
Delivery Details
Delivery Locations
1
Delivery Cities
Mumbai Suburban
Delivery Pincodes
400051
Delivery Locations
| Consignee | Address | City | State | Pincode | Quantity | Delivery Days | Additional Requirement |
|---|---|---|---|---|---|---|---|
| K Pavan Kumar | 400051,SEBI Bhavan, Plot No.: C4-A, G-Block, Bandra Kurla Complex, Bandra (E), Mumbai | Mumbai Suburban | Maharashtra | 400051 | Project / Lumpsum Based | - | - |
Authority Records
BID & GeM Expert Consultancy
End-to-end support — bid preparation, GeM registration, document filing & compliance by industry experts.
Free consultation · 24h response
Documents 17
GeM-Bidding-9758222.pdf
Main Document
Other Documents
OTHER
Other Documents
OTHER
Other Documents
OTHER
Other Documents
OTHER
Other Documents
OTHER
Other Documents
OTHER
Other Documents
OTHER
Other Documents
OTHER
Other Documents
OTHER
Other Documents
OTHER
Other Documents
OTHER
Technical Specification/Buyer Specification Document
TECHNICAL
Technical Specification/Buyer Specification Document
TECHNICAL
Other Documents
OTHER
GEM General Terms and Conditions Document
GEM_GENERAL_TERMS_AND_CONDITIONS
GEM General Terms and Conditions Document
GEM_GENERAL_TERMS_AND_CONDITIONS
Categories
5
Corrigendum Updates
1 Update Update
Required Documents
GST registration certificate
PAN card
Experience certificates for IT System Audit, Cyber Audit, ISO 27001:2022 audits
Financial statements for the last 3 years
EMD submission proof (₹750,000)
Technical bid documents establishing audit capabilities
OEM authorizations or certifications (if required by ATC)
Any existing ISO/IS0 27001:2022 audit engagement letters or similar
Auditor/consultant team bios and relevant project references
Frequently Asked Questions
Key insights about MAHARASHTRA tender market
How to bid for IT system audit tender in Mumbai 2026?
Bidders should review ATC details, submit GST, PAN, and experience certificates, plus an EMD of ₹750,000. Provide evidence of ISO 27001:2022 audit capability and IT/cyber auditing experience. Ensure technical bid aligns with IT system, cyber, and ISO 27001 audits for 2026-29.
What documents are required for audit services tender in Mumbai?
Required documents include GST certificate, PAN card, three years of financial statements, experience certificates for IT/cyber audits, ISO 27001:2022 audit references, EMD proof of ₹750,000, and technical bid detailing audit methodologies and team qualifications.
What are the key technical standards for ISO 27001 audits in this tender?
The scope includes ISO 27001:2022 audits; bidders must demonstrate proficiency in ISMS assessment, risk treatment, control implementations, and ISMS certification readiness aligned with the 2022 revision and applicable ISMS controls.
When is the contract period for IT audit procurement in Mumbai 2026-29?
The contract spans 2026-27 to 2028-29, covering three financial years; bidders should prepare multi-year engagement plans, resource allocation, and phased audit deliverables to fit a three-year schedule.
What is the EMD amount for the Mumbai audit bid?
The Bid Security Deposit is ₹750,000, to be submitted in the required mode with the technical bid; ensure availability of funds and proper submission format as per ATC.
What experiences strengthen eligibility for IT/cyber audit bids in Mumbai?
Strong eligibility requires documented IT system and cyber auditing engagements, ISO 27001:2022 audit projects, client references, and demonstrable team qualifications, including lead auditors with relevant certifications and project delivery histories.