Procurement of Managed Cyber Security Operations Center (CSOC/SOC) Services

Pakistan Revenue Automation Pvt Limited (PRAL) invites bids for the procurement of Managed Cyber Security Operations Center (CSOC/SOC) Services under Tender No. 84/2026. This procurement is for comprehensive 24x7 CSOC services to be conducted at the PRAL site in Islamabad, covering all shifts including mornings, evenings, nights, and public holidays. The scope includes full management of the Security Operations Center encompassing continuous monitoring, incident detection, reporting, root cause analysis, forensic investigations, incident response, threat intelligence, and other essential SOC activities. Items being procured: - 3 x L1 resources during morning shifts - 2 x L1 resources during evening shifts - 2 x L1 resources during night shifts - 2 x L2 resources during morning shift - 1 x L2 resource during evening shifts - 1 x L2 resource during night shifts - 1 x SOC Manager onsite during any one shift in 24 hours The bidder is responsible for continuous monitoring, detection, and response to security incidents ensuring compliance with regulatory and industry standards such as ISO 27001, PCI-DSS, and NIST. The service includes threat intelligence ingestion, incident management playbooks on SOAR platform, digital forensic services on need basis, and imparting operational training to PRAL staff. The bidder must maintain minimum service capability level 2 and service maturity level 3 as per SOC Capability Maturity Model. Eligibility criteria include being a registered entity in Pakistan with at least five years of experience in information security solutions, active taxpayer status, presence in a major city with coordination office in Islamabad, audited sales volume of at least Rs. 50 Million in last two years, valid ISO 27001 certification, and relevant certifications among team members. Bid security in the form of Pay Order is required. Bids must be submitted online via EPADS v2.0 by 13 November 2026 at 03:00 PM. Manual submissions are not accepted. Technical bids will be evaluated on a Least Cost Based Selection (LCBS) basis. The contract duration is three years, extendable up to five years annually. Payment will be made quarterly based on resource availability and satisfactory performance. The procuring agency reserves the right to impose penalties for non-compliance with service levels and resource availability. Bidders are advised to carefully review the detailed terms, conditions, and specifications available on the EPADS portal and ensure compliance with all requirements. One practical tip for bidders is to ensure timely registration and submission on EPADS v2.0 to avoid disqualification due to late or manual submissions. This procurement offers a significant opportunity for qualified cybersecurity service providers to partner with a leading government entity in Islamabad and contribute to strengthening Pakistan's cyber defense capabilities.