Panel appointment: co-sourced internal audit services for dsti (36 months)

Enquiries: Supply Chain Management (Demand & Acquisition Management). Email: [email protected]. Submission address: Tender Box, Reception Area, Department of Science and Innovation (DSTI), CSIR Building no 41, Scientia Campus (CSIR, South Gate Entrance), 627 Meiring Naude Road, Brummeria, Pretoria, 0184. Post-bid communication: Only SCM Unit will contact bidders for clarity or validity extensions. Results published on www.dst.gov.za/tenders.

Submit proposals by 11:00 on 23 June 2026. Required formats: 1 original hard copy + 1 electronic version (USB). No email, fax, or telegram submissions accepted. Deposit bids in the Tender Box at: CSIR Building no 41, Scientia Campus (CSIR, South Gate Entrance), 627 Meiring Naude Road, Brummeria, Pretoria, 0184. Clearly mark the envelope with: Bid No (DSTI01A/2025-26), Description, Closing Date/Time, and Service Provider Name/Address. Late submissions (after 11:01) will be returned unopened. Proposals must follow this exact structure: Company Profile, Understanding of Scope, Methodology, Proposed Implementation Plan, Team Organogram, Team CVs, Project Experience (Reference Letters), Demonstration of Functionality Assessment. Non-compliance with this format will result in point deductions under functionality criteria.

Evaluation occurs in two stages: Screening for Compliance and Functional Evaluation. Screening for Compliance: Mandatory requirements (failure to meet any results in disqualification): CSD registration, compliant tax status (SARS/CSD e-filing), completed SBD forms (SBD 1, SBD 4, SBD 6.1), IIASA accreditation as an Internal Audit service provider, Project Leader must be a Certified Internal Auditor (CIA) with a valid certificate (expiry: 31 Dec 2026), detailed company profile, proven experience with reference letters (last 5 years). Functional Evaluation: Minimum threshold of 60% required to proceed. Scoring criteria: Team Qualifications and Experience (30%): Project Leader (>10 years = max points), Internal Audit Manager (CIA, >7 years = max points), Internal Auditors (NQF Level 7, >7 years = max points). Bidder’s Competency and Capacity (30%): Number of similar projects (>10 across all 3 categories = max points). Audit Methodology and Approach (20%): Alignment with IIA Standards, PFMA, Treasury Regulations, and modern techniques (AI/ML, continuous auditing). Skills Transfer Plan (20%): Must cover all 4 areas (IT Projects, Integration of IT Projects, Technical Science Projects, General Project Management) for max points. B-BBEE certificate or sworn affidavit (0 points if not submitted).

Scope: Provide co-sourced internal audit services (assurance and advisory) for 36 months across three categories. Category A (Assurance and Advisory Services): Operational audits (HR, supply chain, contract management), financial audits, enterprise risk management, compliance audits (PFMA/Treasury Regulations), governance/ethics audits, performance information reviews, combined assurance. Advisory Services: Policy/process/system design, risk/control facilitation. Category B (ICT Audits): Internal Audit Modernisation (AI/ML, foresight), Data Analytics Enablement (integrated audits for financial/procurement/leave management), ICT audit areas (Information Security, Cybersecurity, Business Continuity, IT General Controls, Infrastructure/Asset Management, IT Risk Management, Application Controls). Category C (Project Audits): Project Initiation (risk identification, scheduling, partners, SCM, stakeholders, oversight, milestones, funding), Project Execution (compliance with initiation terms), Project Reporting/Closing (compliance with governance frameworks). Deliverables: Report to Chief Audit Executive (CAE), prepare Audit Engagement Plans (budget, timeframes, objectives, scope, personnel), regular progress reports, final audit reports, working papers (submitted within 1 week of completion), Audit Committee reports. Methodology must align with IIA Standards, DSTI requirements, and public sector context (PFMA/Treasury Regulations).

Mandatory: CSD registration, compliant tax status (CSD/SARS e-filing), completed SBD forms (SBD 1, SBD 4, SBD 6.1). IIASA accreditation as an Internal Audit service provider. Project Leader must be a Certified Internal Auditor (CIA) with a valid certificate (expiry: 31 Dec 2026). B-BBEE certificate or sworn affidavit (0 points if not submitted). Security clearance: All appointed staff (including subcontractors) must obtain confidential-level security clearance. Non-Disclosure Agreement (NDA) required for confidentiality. Reference checks: Valid, contactable references for similar projects (last 5 years).