The Bank of Mauritius has published bidder clarifications for its banking sector Threat Intelligence Sharing Platform tender, launched on Oct. 20, 2026, specifying access requirements, security controls and pricing coverage. Earlier procurement material identified the difficulty of consolidating, analysing and using threat data from disparate sources as the operational challenge the platform should address.
The solution must provide at least five named users per participating institution and 10 for the Bank, with analyst access for at least one user per institution and five at the Bank. Restricted institutional data must remain logically segregated, while designated intelligence can be shared with authorised participants under defined permissions and approval workflows. Both attributed and anonymised sharing must be supported. Dissemination to integrated security controls must allow either automation or analyst approval, with configurable safeguards and audit trails. Integration must accommodate different institutions’ security technologies through industry standards and application programming interfaces.
Financial proposals must include subscription and licensing costs for six years, covering the first year under warranty and five subsequent years of maintenance. Bidders must identify the threat intelligence feeds required by their solution and disclose associated costs, licensing limits and charges for additional users or integrations. Digital risk protection and compromised credentials capabilities remain optional and must be priced separately from mandatory requirements. Deployment may be on premises or use a hybrid or cloud model, but bidders must disclose hosting and data locations and comply with applicable Mauritian legal, regulatory and information security requirements.