Supply Implementation and Service Level Agreement of Threat Intelligence and Incident Reporting Platform

The SBP Banking Services Corporation (SBP BSC) Karachi is procuring a comprehensive Threat Intelligence and Incident Reporting Platform. This centralized, automated solution will enable structured incident reporting and threat intelligence sharing across various stakeholders, including Regulated Entities under SBP's supervision. The platform aims to enhance sector-wide situational awareness, support supervisory monitoring, and strengthen coordinated responses to cyber threats and technology incidents. The technical scope includes two core modules: Incident Reporting and Threat Intelligence Sharing. The system will be deployed on-premises on virtualized platforms with scalable architecture. It will support automated and manual processes, role-based access control, multi-factor authentication, encryption standards (AES-256, TLS 1.3), and integration with external threat intelligence feeds and internal systems via APIs. The solution must support workflows, compliance monitoring, customizable reporting, and dashboards tailored to user roles. A resident engineer will provide application support for two years, with maintenance and technical support for five years. Eligibility requires bidders to be registered entities with verifiable operational offices in Pakistan, have completed at least three similar projects in the financial sector in the last ten years, and maintain certified cybersecurity and technical staff. Bidders must be registered with FBR and ATL and not blacklisted. Joint ventures of two firms are allowed with a lead firm authorized to conduct business and receive payments. Key dates include bid submission by 21 May 2026 at 11:00 AM via EPADS only, with bid opening at 11:30 AM the same day. Bid security of PKR 600,000 must be submitted in original by the closing date. The contract includes a 5% performance guarantee and a 140-day bid validity period. The contract will be awarded to the most advantageous compliant bidder offering the lowest evaluated cost. A practical tip for bidders: Ensure all technical and financial proposals are uploaded separately on EPADS and that the original bid security is submitted timely to avoid disqualification. Familiarize yourself with the detailed technical specifications and eligibility criteria, and prepare your documentation accordingly to meet the compliance-based evaluation criteria.