Loading…
Re-tenderAppointment for auditor for comprehensive forensic services and incident investigation
Agriculture Insurance Company of India Limited · New Delhi, Delhi2026_AICIL_847919_1
Written by TenderKart AI from the documents published when it was generated. Check the tender for later corrigenda before you bid.
11 Aug 2026
24 Aug 2026
₹2 L
All important dates as they stand after corrigenda: publication, pre-bid/clarification deadline, bid submission deadline, bid opening, and bid validity period.
Document Download Start Date is 10.08.2026 from GeM, AIC website and CPPP.
Last date for submission of queries is 14.08.2026 by 16:00 Hours on the GeM portal; pre-bid meeting date will be communicated later.
Last date and time for online bid submission is 24.08.2026 till 19:00 Hours on GeM.
Eligibility/Technical bid opening, commercial bid opening and L1 declaration dates are not fixed in the RFP and will be communicated via AIC website, CPPP and GeM.
Bid validity is 180 days from the last date of bid submission, extendable by a further 90 days on the same terms if AIC so requests.
Contract duration is 3 years from Work Order/PO; selected bidder must sign NDA/contract within 30 days of PO and submit Performance Security within 15 days of PO.
Tender value or estimated cost, EMD/bid security (amount, acceptable forms, validity), tender document fees, performance security, and key payment terms.
No estimated tender cost or fixed tender value is stated; commercial evaluation is on Total Cost of Ownership (TCO) quoted on GeM under Annexure E.
Tender Processing Fee is NA (not applicable).
EMD is ₹ 2,00,000 (Rupees Two Lakhs Only), payable online by NEFT/RTGS/IMPS or by Insurance Surety Bond, Account Payee Demand Draft, Fixed Deposit, Banker's Cheque, Bank Guarantee or e-bank guarantee.
Selected bidder must furnish Performance Security of 5% of the Contract Value within 15 days of PO, valid for 60 days beyond completion of all contractual obligations including warranty; released within 60 days after completion; no interest payable.
Pre-incident assessment is paid on completion and report submission (within 90 days of PO); forensic man-day payment is defined per assignment in the PO; prices are INR inclusive of GST with travel/boarding/lodging to be factored into the quote.
Every pass/fail eligibility and qualification requirement: experience and past performance, turnover/net worth, registrations and certifications, consortium/JV rules, and debarment or blacklisting conditions.
Bidder must be a Central/State Government entity, PSE, or Partnership firm / Public or Private Limited Company duly incorporated/registered in India, actively engaged in business for at least five (5) years as on RFP publish date.
Bidder must be registered with GST authority and have filed GST returns as per regulations; GST Certificate required.
Average annual turnover from India operations in cyber security services must not be less than ₹20 lakhs in the preceding 3 years (2023-24, 2024-25, 2025-26); positive net worth required in all those 3 years.
Bidder must be empaneled with CERT-In for providing Forensic Services as on bid publication date and during the entire contract period; Certificate of Empanelment required.
Bidder must have Cyber forensic audit experience in Government/Regulatory/PSE/BFSI, meeting one of three billing thresholds over FY 2021-22 to FY 2025-26.
Bidder should not have been blacklisted by AIC or any Government department/PSE/Banks/Insurance Company in India as on date of the RFP; self-declaration required.
Bidder firm must not be owned/controlled by any AIC Director/Employee (or relatives); related group entities must not also participate; bidder must not currently be involved in AIC’s SOC, attack-surface monitoring, red teaming, annual assurance audit, or other cybersecurity services.
Consortium is not allowed; bidder may not subcontract or form a consortium for any work under the RFP scope.
Only Class-I and Class-II local suppliers under the Make in India order dated 04.06.2020 are eligible to bid; non-local suppliers are not eligible (MSEs exception as stated).
Eligibility bid must include authorization letter and Annexures A–D, F–M and O as listed in eligibility SL 8 and 12–24; non-compliance to any eligibility clause leads to disqualification.
What is being procured: the work, supplies or services, deliverables and quantities, locations, phases, completion or delivery timelines, applicable standards, and notable exclusions.
Appointment of a CERT-In empaneled auditor/vendor for comprehensive forensic services and incident investigation for Agriculture Insurance Company of India Ltd (AIC), under a 3-year service contract.
Vendor must assess AIC incident-response readiness and deliver an Incident Response Readiness Guide/plan and playbooks within 90 days of PO, meeting CISA/NIST and IRDAI/CERT-In style standards.
On AIC intimation of a cyber incident, vendor must provide 24x7x365 domestic incident-response support with strict response SLAs and full forensic lifecycle through containment, analysis, eradication, recovery, reporting and post-incident review.
Work supports AIC IT ecosystem (including cloud) with onsite presence at AIC offices when required; AIC may implement or drop listed commercial items and alter requirements.
The complete checklist of documents to submit — mandatory vs conditional, with any prescribed formats, proformas or annexures — plus how to submit: portal and mode, envelope/cover structure, digital signature requirements, signing and attestation rules, and physical originals with their deadline.
Single-stage two-bid (Eligibility Bid + Commercial Bid) must be submitted online only on GeM (https://gem.gov.in); no speed post/fax/email bid accepted.
If EMD is paid by Insurance Surety Bond, Account Payee DD, Banker's Cheque or Bank Guarantee, the original instrument must be submitted physically at AIC Head Office.
Documents must be stamped and signed by an authorized official; Letter of Authorization required; Integrity Pact pages all signed by the same authority.
Every corrigendum/addendum in order — what changed (original vs amended value), its impact, and the action for the bidder — ending with the values that finally apply.
The AI found nothing to report for this question.
Genuine conflicts within and across the documents (original vs corrigenda, clause vs annexure, tender document vs BOQ): both sides with citations, and which value prevails.
Key Dates and clause 3.8 require queries on GeM portal, but Bid Submission Information on page 7 says prospective bidders may mail queries by e-mail.
Eligibility criteria SL 17 and Annexure O checklist list Annexure G (Performance Security) among bid submission items, while clauses 5.11/5.12 require Performance Security only from the selected bidder within 15 days of PO.
Annexure L NDA is listed in eligibility SL 22, but clauses 3.11 and 5.27 require the selected bidder to sign NDA after/within 30 days of Purchase Order.
Key Dates require physical originals of non-online EMD instruments at AIC HO, but clause 5.11 also says the process is completely online and hard copies only if demanded.
Only critical, tender-specific pre-bid queries that could materially change bid/no-bid, pricing, eligibility or contractual risk. Skip generic or obvious questions the documents already answer clearly.
Ask AIC to confirm whether pre-bid queries must be only on GeM, or whether email to [email protected] is also accepted by 14.08.2026 16:00.
Seek written deadline and address confirmation for physical EMD originals, and whether NEFT/RTGS/IMPS alone (with UTR proof online) avoids physical submission.
Clarify if blank/signed Annexure G (PBG proforma) and Annexure L NDA are mandatory eligibility uploads or only post-award execution documents.
Confirm whether the ₹50L/₹30L/₹25L thresholds are per-customer cumulative billing for cyber forensic audits only, and how the note limiting eligibility to 'implementation/consultancy experience in India' interacts with forensic audit credentials.
Ask AIC to define 'other cybersecurity services' and whether any existing AIC engagement (even non-SOC) automatically disqualifies a bidder under eligibility SL 11.
Seek confirmation whether the evaluated 30 man-days is a minimum commitment/order guarantee over 3 years, or only an evaluation quantity, while 24x7 T+2/T+4/T+10 SLAs still apply for unlimited incidents.
Ask how 'Contract Value' is computed for PBG and 10% LD cap—TCO of Annexure E (assessment + 30 days), actual call-off value, or estimated 3-year value including additional man-days.
Commercial, legal and execution risks a bidder should weigh: liquidated damages and penalties, unusual or one-sided clauses, tight timelines, and payment or security risks.
24x7x365 support with T+2h initial response, T+4h start of work, and T+10h onsite at AIC offices—while all travel/boarding must be absorbed in the quoted rates—creates high execution and cost risk.
LD of 0.5% of total cost of services per week (or part) for late or unacceptable deliverables, capped at 10% of total contract value; AIC may also terminate and invoke Performance Security.
Bidder must indemnify AIC against third-party IP and other claims, employee/third-party injury claims, and losses from trade-law violations, with AIC rights to withhold payments; indemnity survives termination.
Forensic man-day payment is only as defined per assignment PO; AIC may drop listed projects; readiness assessment payment only after completion/report within 90 days—creating cash-flow and utilization risk against standing 24x7 capability costs.
With document download from 10.08.2026, queries due 14.08.2026 and bids due 24.08.2026 19:00 on GeM only, there is limited time for clarifications; internet/GeM account issues are expressly non-excusable.
Current involvement in AIC SOC, attack-surface monitoring, red teaming, annual assurance audit or other cybersecurity services is a pass/fail bar—creating bid/no-bid and future business-conflict risk for multi-service cyber firms.
The inviting authority and relevant contacts: office, person, designation, address, phone and email — and which address receives physical submissions, if any.
Deputy General Manager (IT), Information Technology Department, Agriculture Insurance Company of India Limited.
Physical originals (EMD instruments where applicable) and any hard copies demanded are to AIC Head Office / address for communication at Plate B&C, Fifth Floor, Block 1, East Kidwai Nagar, New Delhi – 110023.