Technical Clarification CORP 3315 Eskom OT-IT integration and convergence strategy

2016/07/032 Background The technology and integration requirement between Operational Technology (Telecommunication and Secondary Plant) and Information Technology environments are becoming increasingly complex and expose the utility to new service performance and cybersecurity risks.

2016/07/033 Technical Criteria NoTechnical/ Functionality Criteria Weigh ting Score (100) Weighted Score 1Project Delivery 1.1Detailed project plan to achieve the scope of works. Project plan should cover all activities as required by the scope of work, including, but not limited to the stakeholder engagement. Plan should detail how it will achieve the varied aspects over the required time frame of one and half months. 10% 2Consultant's Technical Experience and Track Record 2.1Provide project experience demonstrating knowledge in terms of Operational and Information Technology with an understanding of the latest world trends, technology developments, legal compliance, scarce resources, communications network planning and design capacity, architectural design and general ICT skills. Suppliers to provide short summary of the scope of each project in the last 3 years. 20% 2.2The service provider must provide evidence of previous project experience in terms of OT and IT strategy development in a power utility environment. Suppliers provide detail on where such integration and convergence strategies are implemented based on observation or project experience. Where these strategies were implemented what was the benefits released by these companies 20% 2.3Provide detailed methodologies of how each aspect of the strategy will be achieved (such as, but not limited to impact on Grid Operations). This should not be a duplication of the scope already provided to the supplier. Provide project experience of ETOM, ITIL, COBIT and TOGAF framework implementation as it is applied in OT and IT environments. 10%

2016/07/034 Technical Criteria NoTechnical/ Functionality Criteria Weigh ting Score (100) Weighted Score 3Project Manpower Allocation 3.1Manpower and diversification of project team dedicated to the project. Tenders are required to advise on full time and part time resources to the project. Man hours for each individual to be provided. Must fulfil all disciplines required - operational technology (SCADA, Substation Automation, Teleprotection, Telecommunications, Metering, Smart Grid) and IT (Voice, Video, Data Storage and Applications), SHEQ, legal and Financial. 10% 3.2Skills Assessment ( Based on short CVs)10% IT, Telecommunications and Smart Grid Chief Specialist (Qualification, Related/Relevant experience to Scope) Presentation Qualifier Subtotal70% (Tenderers must achieve weighted score of 50 points out of 70 points to qualify for presentation ) 4Proposal presentation30% Final Score100%

2016/07/035 Success Factors Operational service such as SCADA, Teleprotection, Substation and line monitoring and automation is not compromised by way of performance and cybersecurity risks. Ensure compliance to OT and IT standards and/or recommend mitigation measures to address risk profiles. All IT infrastructure services capacity and network performance is not compromised. Mission critical applications must not be compromised. Full stakeholder engagement. The recommended option is approved by Eskom’s Executive committee.

2016/07/036 Deliverables IT/OT integration and convergence strategy with findings, maturity assessment, recommendations (on mandates, governance, operating models etc.) and roadmap (with recommendations on optimal timelines), as a detailed report and a high level presentation that can be used to illustrate all scenarios for presentation to Eskom Exco for approval. The consultant is to meet with the relevant Eskom Stakeholders to ensure that no ambiguity exists in terms of what needs to be delivered. Proposed scope of work to be drafted and to be presented by the consultant after consultation with stakeholders and to be signed off by the Employer prior to the commencement of any work. Obtain signoff and support by the stakeholders of the operating model prior to executive committee approval.