Co-sourced internal audit services for high-value tender reviews

PRASA invites bids for Internal Audit Service Review of High-Value Tenders. The purpose is to select a qualified service provider to conduct high-value tender reviews for Group Internal Audit on an 'as and when' basis.

Closing date: 18 June 2026 at 12:00. Bid validity period: 60 working days from closing date. Bidders may be requested to extend validity if PRASA’s internal processes are not finalized.

Bidding procedure enquiries: Mahuna Mphela, Telephone: 011 013 1784, Email: [email protected]. Complaints: Email [email protected] (include bid description, reference number, closing date, supplier name, contact details, and detailed complaint). Submission address: No. 30 Wolmarans Street, Braamfontein, Johannesburg.

Submit bids by hand delivery to: No. 30 Wolmarans Street, Braamfontein, Johannesburg, on or before 18 June 2026 at 12:00. Sign the submission register upon delivery. Bids must be submitted on official forms provided (do not re-type). Late bids will not be accepted. Bids must be enclosed in a sealed envelope. Do not include documents or references relating to other quotations. Any additional conditions must be in an accompanying letter. Changes to submissions after the closing date/time will not be considered. Bidders may be disqualified for attempting to canvass PRASA employees between closing date and award. All mandatory returnable documents must be submitted; failure to do so will result in disqualification.

Mandatory returnable documents: Signed Joint Venture/Consortium Agreement (if applicable), copies of qualifications/professional registrations/CVs of key personnel, valid SARS PIN, CSD registration number, completed RFP documentation (including all declarations and SBD forms), consent letters for CVs (dated within 60 days of RFQ publication), and certified copies of qualifications/professional registrations (within last 6 months). Failure to submit mandatory documents by the closing date/time results in disqualification. PRASA may request missing Stage 1B documents within 5 working days; non-submission will disqualify the bid.

Evaluation follows a three-stage process: Stage 1A (Mandatory Requirements): Automatic disqualification if not met. Includes signed Joint Venture/Consortium Agreement (if applicable) and copies of qualifications, professional registration, and CVs of key personnel. Stage 1B (Other Mandatory Requirements): PRASA may request missing documents within 5 working days; failure to provide will disqualify. Includes: Valid SARS PIN, CSD registration number, completion of ALL RFP documentation (including declarations and SBD forms), consent letters for CVs (dated within 60 days of RFQ publication), and certified copies of qualifications/professional registrations (within last 6 months). Stage 2 (Technical/Functional): Minimum 70% threshold required to proceed. Criteria include: Company experience (25 points): 5+ reference letters (≤5 years old) for high-value tender audits (>R100m) in similar environments (5 points for 5+ letters, 4 for 3-4, 3 for 1-2, 0 for none). Key personnel CVs (20 points each for Project Director, Senior Manager, Manager, Senior Auditor): Points based on years of senior management/internal audit experience (e.g., >8 years = 5, 7-8 years = 4, etc.). Stage 3 (Price and Specific Goals): 80 points for price (using 80/20 preference system: Ps = 80(1 - (Pt-Pmin)/Pmin)), 20 points for B-BBEE specific goals (5 for 51%+ Black Youth, 5 for 51%+ Black Women, 10 for 51%+ Black People). PRASA reserves the right to award to a lower-scoring bidder based on objective criteria (e.g., track record, spreading awards, capacity).

Scope: Conduct High-Value Tender reviews for PRASA Group Internal Audit on an 'as and when' basis. Key deliverables: Final Internal Audit Report with management comments and action plans (aligned with PRASA Group Internal Audit Methodology), working papers and audit evidence captured on Teammate (access provided by PRASA), and a partner-signed letter confirming quality assurance conformance with IIA standards. Audit scope includes: Procurement Planning (alignment with budgets/strategic priorities), Tender Specification/Advertisement & Opening (compliance with SCM prescripts, RFP completeness), Governance & Oversight (BSC/BEC/BAC composition, segregation of duties, adherence to timelines), Bid Evaluation (consistent criteria application, compliance with SCM policy), Risk & Probity Oversight (risk identification/mitigation, integrity advisory), Concurrent Tender Evaluations (independent team controls), and Reporting (submission to BSC/BEC/BAC/FCIP/Board, IIA Standards alignment). Minimum resource allocation: 1x Project Director (5% hours), 1x Senior Manager (15%), 1x Manager (20%), 1x Senior Auditor (60%).

Bidder methodology must align with PRASA Group Internal Audit Methodology. Submit a structure showing proposed resources and their positions per bid category. Provide copies of certifications confirming qualifications (certified within 6 months of quotation issue date). Ensure compliance with IIA Standards and PRASA’s audit framework.

Key personnel qualifications and experience: Project Director: Certified Internal Auditor (CIA) or Chartered Accountant (CA), NQF Level 7 in Internal Auditing/Accounting/Risk Management, member of IIA/SAICA/ISACA in good standing, 5+ years management experience. Senior Manager: CIA/CA/CISA, NQF Level 7, 4+ years senior management experience. Manager: CIA/CA/CISA, NQF Level 7, 4+ years management experience. Senior Auditor: NQF Level 7 in Internal Auditing/Accounting, 3+ years internal audit experience. All personnel must submit comprehensive CVs with contactable references and certified copies of qualifications (within last 6 months). Bidders must provide PRASA with suitably qualified resources within 14 days of request. PRASA may request resource changes/replacements within 14 days if performance is inadequate. Replacement resources must meet the same qualifications/experience.

Quality requirements: Working papers and audit evidence must be captured on Teammate (access provided by PRASA). Submit a partner-signed letter confirming quality assurance conformance with IIA (Institute of Internal Auditors) standards. Final report must include management comments and action plans, aligned with PRASA Group Internal Audit Methodology.

Complete the attached Pricing Schedule (Section 7). Provide hourly rates (inclusive of 15% VAT) for each resource: Project Director (50 hours), Senior Manager (150 hours), Manager (200 hours), Senior Auditor (600 hours). Total hours: 1000. Include total cost (excl. VAT), VAT at 15%, and total project cost. Pricing must strictly follow the provided schedule; deviations may result in non-responsiveness. Discounts are considered only in the final evaluation stage on an unconditional basis. Cost breakdown and price escalation basis/formula must be indicated.

Pricing must be in South African Rand (ZAR), inclusive of all applicable taxes (e.g., 15% VAT). Submit hourly rates per resource (Project Director, Senior Manager, Manager, Senior Auditor) using the provided pricing schedule. Deviation from the prescribed format may result in non-responsiveness. Discounted prices will only be considered in the final evaluation stage on an unconditional basis. Cost breakdown and price escalation basis/formula must be indicated. PRASA may negotiate market-related prices with top bidders if the highest-scoring bid is not market-related. Payment terms: Within 30 days of receipt of a correct tax invoice.

Tax Compliance: Submit a valid SARS TCS PIN or CSD registration number. Apply for TCS PIN via SARS e-filing (www.sars.gov.za). Foreign suppliers with no RSA entity may be exempt from TCS PIN but must disclose RSA tax status. CSD Registration: Mandatory for all bidders (except foreign suppliers with no local entity). Register at https://secure.csd.gov.za/. Consortia/Joint Ventures: Each party must submit separate TCS/CSD documentation. B-BBEE: Preference points for 51%+ ownership by Black Youth (5 points), Black Women (5 points), or Black People (10 points). Submit certified copies of ID documents of owners. Other Compliance: No bids from persons in the service of the state or entities with such directors/members. Disclose Politically Exposed Persons (PEPs) or Prominent Influential Persons (PIPs) in your organization. Submit SBD forms (e.g., SBD4 for disclosure, SBD6.1 for preference points). Professional Registrations: Key personnel must have valid certifications (e.g., CIA, CA, CISA) and membership in good standing with relevant bodies (e.g., IIA, SAICA, ISACA).

Contract terms: Supplier warrants items meet PRASA requirements and are fit for purpose, remaining defect-free for 1 year from acceptance (unless otherwise stated). Supplier indemnifies PRASA against claims arising from negligence, intellectual/legal rights infringement, or breach of statutory duty. Subcontracting requires PRASA’s prior approval; the primary bidder remains liable for performance. Governing law: Republic of South Africa, with non-exclusive jurisdiction of South African courts. PRASA reserves the right to reject non-compliant bids, cancel contracts based on false information, and award to the highest-scoring bidder unless objective criteria justify otherwise. Contracts must be signed within 14 days of acceptance; failure may result in award to the next bidder. Validity period: 60 working days from closing date, extendable if requested by PRASA.

Special conditions: Bids must comply with the Preferential Procurement Policy Framework Act, 2000, and Preferential Procurement Regulations, 2022. PRASA reserves the right to modify the RFQ, reject non-conforming quotations, or reject late submissions. Bids must be submitted on official forms; re-typed forms are not accepted. PRASA may split the award among multiple providers if the nature of services allows. Objective criteria may justify awarding to a lower-scoring bidder (e.g., track record, spreading awards). PRASA may negotiate market-related prices with top bidders. Contracts are subject to legal review by PRASA’s Legal Counsel.

Supplier information required: Name of bidder, postal address, street address, telephone/fax numbers, email, VAT registration number, and tax compliance status (SARS PIN or CSD number). Foreign suppliers: Disclose if the entity is a RSA resident, has a branch/permanent establishment in RSA, has RSA income, or is liable for RSA taxation. If 'no' to all, TCS PIN registration is not required. Accredited representatives in SA must provide proof. Joint ventures/consortia must submit separate compliance documentation for each party.

Primary contact for bidding enquiries: Mahuna Mphela, Telephone: 011 013 1784, Email: [email protected]. Complaints: Email [email protected]. Submission address: No. 30 Wolmarans Street, Braamfontein, Johannesburg. Sign the submission register upon delivery.