Appointment of a professional service provider for internal audit services (36-Month contract)

Primary contact: Ms. Mandy Batyi, Phone: 012 848 5300, Email: [email protected]. Technical enquiries: Tlhoriso Thobileng, Phone: (012) 848 5300, Email: [email protected]. Submission address: MISA Offices, Letaba House, 1303 Heuwel Road, Riverside Office Park, Centurion, 0046. Postal address: 1303 Heuwel Avenue, Riverside Office Park, Letaba House, Centurion, 0046.

Submit proposals in a sealed envelope to MISA Reception, tender box at Letaba House, 1303 Heuwel Road, Riverside Office Park, Centurion, 0046 by 18 June 2026 at 11:00. Include a soft copy (Memory Stick, all in PDF format). Late submissions will not be accepted. Clearly mark the bid reference number (MISA/IAF/IA/003/2026/2027) on the envelope. Use official forms provided; do not re-type. Bids must remain valid for 90 days after closing. Written queries may be directed to Ms. Mandy Batyi ([email protected]) up to 5 working days before closing (13 June 2026). Non-compulsory virtual briefing session on 03 June 2026 at 10:00 via Microsoft Teams (Meeting ID: 346 669 144 073 30, Passcode: iy3A3DR2, Link: https://teams.microsoft.com/meet/34666914407330?p=F8uWqaPcBJBb7YmmkR).

Evaluation occurs in three stages: Mandatory Requirements, Functionality, and Price/Specific Goals. Mandatory: Proof of professional body membership (IIA SA, ISACA, SAICA, etc.) for all four resources (Manager, Senior Auditor/Supervisor, Auditor, IT Auditor); Contract Manager must be a CA registered with SAICA; Joint Venture/Consortium must submit a signed agreement. Non-mandatory but required before award: CSD registration; tax compliance (verified via CSD); SAQA verification for foreign qualifications. Functionality (max 100 points, min 75 to proceed): Company experience (7-10 years: 15-25 points), Contract Manager qualifications (NQF 8-9: 10-15 points) and experience (5-10+ years: 6-10 points), Manager/Senior Auditor/Auditor/IT Auditor qualifications (NQF 6-8: 3-5 points) and experience (3-5+ years: 3-5 points), Methodology/Approach Paper (project knowledge, milestones, risk mitigation: up to 10 points). Price and Specific Goals (80/20 system): Price (80 points) + Specific Goals (20 points). Specific Goals: Women-owned (51%+, 10 points), Youth-owned (51%+, 5 points), B-BBEE Level 1-2 QSE/EME (5 points).

Scope: Provide internal audit function for 36 months, compliant with PFMA and Global International Auditing Standards. Key deliverables: Develop audit strategy based on MISA’s risk management strategy and fraud prevention plan; prepare annual Internal Audit Plan (scope, cost, timelines); submit audit progress reports to Audit Committee; conduct audits covering internal controls, IT/cybersecurity, financial/performance information, operations, asset safeguarding, resource efficiency, compliance, fraud detection, risk management, corporate governance, and ad-hoc requests; coordinate with other assurance providers to avoid duplication; assist Accounting Officer in maintaining/improving controls and achieving objectives. Each assignment must include: preliminary survey, engagement letter, risk assessment, audit programmes, sampling methods, follow-up mechanisms, working paper reviews, findings/recommendations, and final reports. Reports must follow structure: introduction, objectives/scope, background, executive summary, findings/recommendations/management response, conclusion. Final audit files (hard and electronic) must comply with Global International Auditing Standards. Conduct quality assurance reviews; prepare for external quality assessments. Quarterly progress reports to Audit Committee; weekly reports to CAE; monthly progress meetings. Ensure independence/objectivity: no executive powers, no involvement in MISA’s day-to-day operations, no system development/implementation. Tools/technologies must enhance efficiency/effectiveness; align with Global International Auditing Standards. Contract duration: 3 years (extendable at MISA’s discretion).

Complete SBD 3.3 Pricing Schedule with all costs (specialists, logistics, discounts, conditions). Include: Hourly rates (actual or average) per resource category (Contract Manager, Manager, Senior Auditor/Supervisor, Auditor, IT Auditor) for Years 1-3, excluding VAT; total bid price for 3 years (excl. VAT), VAT amount, and total bid price (incl. VAT); typical time distribution for audit team (percentages of total person-hours). Payment terms: No advance payments. Submit original signed invoices; payment within 30 days via EFT after service delivery and satisfaction. Financial proposals compared on hourly rates. Indicate whether quoting/invoicing is based on actual or average rates.

Mandatory: Professional memberships (IIA SA, ISACA, SAICA, or equivalent) for all four resources (Manager, Senior Auditor/Supervisor, Auditor, IT Auditor); Contract Manager must be a CA registered with SAICA; Tax Compliance: Submit TCS PIN (via SARS e-filing) or CSD number; each party in a Joint Venture/Consortium must submit separate TCS/CSD proof; no bids accepted from state employees or entities with state-employed directors/members; B-BBEE: Submit valid B-BBEE certificate or sworn affidavit (for EMEs/QSEs) to qualify for preference points; CSD Registration: Required prior to award; tax status verified via CSD; SAQA Verification: Required for foreign qualifications of key personnel; Joint Venture Agreement: Signed by all parties if applicable; SBD Forms: Submit SBD 3.3 (Pricing Schedule), SBD 4 (Service Provider’s Disclosure), SBD 6.1 (Preference Points Claim); Confidentiality: Sign non-disclosure agreement due to sensitive information handling. Non-compliance with any mandatory requirement may disqualify the bid.