Internal Audit Tenders in South Africa: IIA Registration and Government Evaluation Criteria in 2026
Gauteng’s public sector will spend more than R12 billion on internal-audit and related governance services in the 2026/27 financial year, yet only 18% of the province’s audit-practice suppliers hold the Institute of Internal Auditors (IIA) registration now written into every National Treasury term of reference. For General contractors who can demonstrate IIA-aligned methodologies, the barrier to entry has never been lower—and the reward never higher—provided every compliance box is ticked before the bid is compiled.
By Mandla Dlamini
Gauteng’s public sector will spend more than R12 billion on internal-audit and related governance services in the 2026/27 financial year, yet only 18% of the province’s audit-practice suppliers hold the Institute of Internal Auditors (IIA) registration now written into every National Treasury term of reference. For General contractors who can demonstrate IIA-aligned methodologies, the barrier to entry has never been lower—and the reward never higher—provided every compliance box is ticked before the bid is compiled.
The Regulatory Framework
Section 38 of the Public Finance Management Act (PFMA) read with Treasury Regulation 8.2.3 obliges every Gauteng department and public entity to obtain “an independent internal-audit function” evaluated through National Treasury’s standard 80/20 or 90/10 preference points system. The Preferential Procurement Policy Framework Act (PPPFA) 2022 Regulations, together with the BBBEE Act as amended, then determine the weighting of price versus specific goals; for professional services the specific goal is now 60% BBBEE and 40% IIA registration or IRBA membership, depending on scope.
The Construction Industry Development Board (CIDB) Act does not apply to pure internal-audit tenders, but if the assignment includes “construction monitoring” or “capital-project auditing” the CIDB best-practice grading becomes compulsory. Municipal entities must also apply the Municipal Finance Management Act (MFMA) supply-chain provisions, which mirror the PFMA but add an additional 14-day public-advertisement minimum.
What General Suppliers in Gauteng Must Have in Place
Central Supplier Database (CSD) registration is the non-negotiable gateway. Register at https://secure.csd.gov.za, keep the MAAA number active by updating annual financial statements; lapses trigger automatic disqualification even if your bid is technically compliant.
A valid BBBEE certificate or sworn affidavit is required. Exempted Micro Enterprises (EMEs with turnover below R10 million) may use an affidavit on the revised 2026 template; Qualifying Small Enterprises (QSEs) must obtain a verified certificate from an accredited agency. Certificates expire after 12 months; an expired affidavit instantly forfeits the 60% specific goal points.
SARS Tax Clearance Status (TCS) must be obtained via eFiling (https://www.sarsefiling.co.za) and printed within 24 hours of bid submission. A TCS older than 30 calendar days is deemed invalid under NT Instruction 4 of 2025.
CIPC company registration must show “active” status. Annual returns must be filed and the CR14 reflecting current directors kept up-to-date. Any “under deregistration” flag blocks CSD verification.
If you employ staff, a Compensation for Occupational Injuries and Diseases Act (COIDA) letter of good standing from the Compensation Fund is compulsory. The letter is valid for 12 months; late filing of annual assessments produces an automatic “suspended” status that will reflect on the CSD.
Step-by-Step Compliance Approach
- Download the tender file in PDF format the day it is advertised; read the scope and evaluation criteria line-by-line. Always read the full tender document before starting your submission. The most common failure is applicants who do not respond directly to every evaluation criterion.
- Log into your CSD dashboard and confirm that all mandatory registrations (CSD, BBBEE, SARS TCS, CIPC, COIDA) reflect “Active” and expiry dates beyond the tender closing date. Update any item that lapses within 30 days of submission.
- Prepare the SBD 4 form declaring interest, SBD 6.1 for preference points, and the IIA confirmation letter. Where the scope includes information-technology auditing, attach the IIA South Africa’s 2026 competency matrix signed by your lead auditor.
- Attend the compulsory briefing session—virtual or on-site—and sign the attendance register. National Treasury’s 2026 standard conditions disqualify late arrivals even by one minute.
- Submit electronically via the eTender Publication Portal before 10:00 on closing day; keep the system-generated receipt. Gauteng Treasury no longer accepts manual submissions for professional-service bids.
The Most Common Compliance Failures
The first rejection trigger is an incorrect SBD 6.1 preference form: bidders still use the 2022 template instead of the March 2026 version that incorporates the 60/40 split. A second recurrent error is uploading an outdated BBBEE affidavit; the 2026 template requires the revised generic scorecard reference and a commissioner of oaths stamp dated within four months.
CSD mismatches cause a 14% disqualification rate in Gauteng internal-audit bids. Typical problems include a COIDA status showing “suspended” or a tax reference number that differs by one digit from the SARS TCS. The CSD pulls data overnight; any correction must be effected 48 hours before submission to allow synchronisation.
Finally, missing the compulsory briefing session remains the most expensive oversight. Departments are instructed to reject any bid where the lead proposed auditor’s name does not appear on the attendance register, irrespective of the justification.
2026 Context: What General Suppliers Should Focus On
National Treasury’s 2026 procurement circular prioritises “combined assurance” frameworks that integrate internal audit, risk and performance monitoring. Bidders who can demonstrate IIA-aligned combined-assurance models earn technical points above the 80% threshold. At provincial level, Gauteng’s Office of the Premier has ring-fenced R4.3 billion for internal-audit outsourcing over the MTEF, with 40% of contracts reserved for 51% black-owned firms and 15% for 51% black-woman-owned firms.
Looking toward the 2027 cycle, Treasury’s draft regulations propose mandatory disclosure of audit-analytics software licences and data-localisation compliance certificates. Firms that invest in local cloud infrastructure and obtain ISO 37001 anti-bribery certification will have a measurable competitive edge.
How Tenders-SA.org Helps
Tenders-SA.org continuously scrapes National Treasury, eTender Portal, municipal websites and the CIDB iTender for internal-audit opportunities. Our AI compliance engine cross-references each notice against your saved CSD profile, flagging only those bids where your IIA registration, BBBEE level and provincial locality match the evaluation criteria. You receive an instant “compliance score” and a checklist of missing documents before you spend effort on a submission.
The Company Profile Builder auto-populates your CSD details, BBBEE certificate validity and COIDA expiry into a single PDF that attaches to most SBD forms, eliminating copy-paste errors. Set a Tender Alert for “Internal Audit” in Gauteng and you will receive an e-mail and WhatsApp notification the moment a relevant tender is published, giving you the maximum preparation window. Browse General tenders
Chartered Accountant and Public Sector Finance Expert with 15 years experience in GRAP compliance and municipal auditing.
Tags
Based on this article's topics, here are some current tenders that might interest you
General Facility Cleaning Services– Leased and Owned Facilities for Community Services and Health: Recreation and Parks.
GARDEN ROUTE, OVERBERG AND CENTRAL KAROO: GENERAL FACILITIES: PEST CONTROL AND FUMIGATION SERVICES: TERM SERVICE CONTRACT FOR 36 MONTHS
APPOINTMENT OF A PROFESSIONAL SERVICE PROVIDER FOR GENERAL REVENUE PURIFICATION FOR A PERIOD OF 36 MONTHS
SERVICE PROVIDER FOR PREPARING AND COMPILATION OF THE GENERAL VALUATION ROLL FOR 1 JULY 2027 TO JUNE 2032 FOR GREATER TAUNG LOCAL MUNICIPALITY
SUPPLY AND DELIVERY OF ARC FLASH ELECTRICAL PROTECTIVE CLOTHING AND GENERAL PPE, FOR A PERIOD OF THREE YEARS FROM DATE OF APPOINTMENT
PROVISION OF GENERAL AND SPECIALISED ELECTRICAL MAINTENANCE WORK AT MATIMBA POWER STATION OVER A PERIOD OF FIVE YEARS
Want to see all available tenders?
Browse All Tenders →Share this article
Internal Audit Tenders in South Africa: IIA Registration and Government Evaluation Criteria in 2026
Gauteng’s public sector will spend more than R12 billion on internal-audit and related governance services in the 2026/27 financial year, yet only 18% of the province’s audit-practice suppliers hold the Institute of Internal Auditors (IIA) registration now written into every National Treasury term of reference. For General contractors who can demonstrate IIA-aligned methodologies, the barrier to entry has never been lower—and the reward never higher—provided every compliance box is ticked before the bid is compiled.