Procurement of internal audit, risk and compliance management software with support for the national library of south africa

• Closing date for submission: 29 January 2026 (09:00 SAST).
• No other dates (briefings, site visits, clarification deadlines) are mentioned in the extracted text.

• Contact person: Kenny Netshiongolwe
• Email: [email protected]
• No phone number, department or physical address was provided in the document.

• Submit the bid package to the address/email specified by the National Library of South Africa (contact email provided below).
• Include all required returnable documents as listed in the tender (the current analysis only shows the heading “Returnable Documents:” – ensure the full list is attached as per the original tender document).
• Ensure the bid is signed, dated and sealed where required.
• Late submissions will be rejected.
• Incomplete or non‑conforming submissions may be disqualified.

• Stage 1 – Technical evaluation (100 points total). Minimum score to pass: 70 points.

– Demonstration of software functionality against the detailed feature checklist (audit, risk and compliance modules, security, cloud hosting, etc.).

– Compliance with functional requirements such as cloud‑based deployment, audit documentation templates, risk dashboards, segregation of duties, audit trail, etc.

• Stage 2 – Demonstration (as part of technical evaluation) where bidders meeting the 70‑point threshold must present the solution (physically or via Microsoft Teams) and show how each requirement is met.
• Stage 3 – Price evaluation (80 % of total points) based on the submitted price (VAT‑inclusive) using the formula provided in the tender.
• Preference points (20 % of total) awarded for B‑BEE ownership: 20 points for 100 % black ownership, 10 points for partial black ownership (affidavit or BEE certificate required).

Scope: Provide an Internal Audit, Risk and Compliance Management software tool with support.

Key deliverables and features:

– Audit planning, documentation templates, report generation, finding tracking, multi‑user collaboration, dashboards, continuous monitoring, data analytics, and integration with compliance processes.

– Risk management module with heatmaps, risk‑appetite monitoring, automated scoring, trend analysis, alerts, and linkage to KPIs and objectives.

– Compliance management module with legislation import, policy capture, issue tracking, dashboards and integration with audit/risk modules.

– Cloud‑based deployment (or self‑hosting on Microsoft Azure, cost borne by provider).

– Security: role‑based access control, authentication, audit logs, segregation of duties.

– Implementation services: installation, configuration, data migration, user onboarding, training for five users, testing (functional, integration, UAT), go‑live checklist, post‑implementation support and SLA.

– Ongoing maintenance, upgrades, security patches and online support.

• Pricing to be submitted in the format shown (Year 1‑3 cost breakdown for software licensing, implementation, training, support, maintenance and hosting). All prices must be VAT‑inclusive.
• No explicit requirement for performance bonds or guarantees is mentioned.
• Payment terms are not detailed in the extracted text; follow standard NLSA terms unless otherwise specified.
• Financial capacity evidence may be required as part of the compliance package (CSD, tax clearance, etc.).

• Provide up‑to‑date tax clearance certificate (CSD) and proof of registration with CIPC.
• Submit B‑BEE certificate or sworn affidavit indicating black ownership percentage (required for preference points).
• Demonstrate relevant professional registrations or CIDB qualifications if applicable to the implementation team.
• Meet any local content or South‑African ownership criteria as stipulated in the tender.
• Ensure all statutory compliance (tax, labor, etc.) is current.