Implementation of internal audit system with maintenance and support for icasa

Closing date: 2026-09-21T11:00:00.000Z. No briefing session will be held.

Dr. C Lewis, Supply Chain Management. Queries may be submitted in writing to the SCM unit within timelines provided in the bid advertisement.

Returnable forms: SBD 1 – Invitation to Bid, SBD 2 - Tax Clearance Certificate Requirements, SBD 3.1 - Pricing schedule, SBD 4 - Declaration of Interest, SBD 6.1 - Preference Points claim form, SBD 8 - Declaration of Bidder’s Past Supply Chain Management Practices, SBD 9 - Certificate of Independent Bid Determination. No briefing session will be held. Queries may be submitted in writing to the SCM unit within timelines provided in the bid advertisement.

Deliverables: a. Project Inception Report & Plan (timeline, milestones, resources, risk register). b. Configured, tested and usable IAS meeting functional/non-functional requirements and integration specifications. c. Data Migration (validated import of agreed datasets) and Go‐Live checklist. d. Training (materials, sessions, recordings) and Admin / Configuration Handbook. e. Operational Support SLAs and maintenance schedule for 5 years. f. Close-out handover pack with lessons learned and follow-up areas.

The bid will be evaluated in four phases: Phase 1 - Administrative compliance, Phase 2 - Functional evaluation, Phase 3 - Live demonstration, Phase 4 - Price and specific goals evaluation. Minimum Threshold for Phase 2: 70 points, Minimum Threshold for Phase 3: 30 points. Evaluation criteria include: Understanding of Scope and Objectives, Reference Letters, Bidder’s experience, Training, Management Reports.

ICASA seeks to implement an Internal Audit System (IAS) that aligns to fulfil the requirements of the Global Internal Auditing Standards (GIAS) and the International Professional Practices Framework (IPPF). The system must standardise risk-based planning, automate audit workflows, strengthen combined assurance, and enhance issue tracking and reporting.

Access to Role based user access, Single sign-on, Multifactor authentication, Cloud and on premises capability, Encryption of data, Annual audit planning.

Bidder’s experience in the implementation and use of the IAS. Less than two years of experience = 1, Two years of experience = 2, Three years of experience = 3, Four years of experience = 4, More than five years of experience = 5.

Activity Year 1 Year 2 Year 3 Year 4 Year 5 Total payment per annum.

No advance payments. Invoicing only upon delivery and acceptance of all deliverables. Payment within 30 working days of receiving acceptable invoice.

Bidders must ensure that they complete and sign documents as indicated. Access control over Internal Audit working papers and reports when sharing information across systems to protect the independence and sensitivity of information provided to Internal Audit.

Report on risk and control assessments per division, processes, assessment of inherent risk, coverage per line of assurance assessment, and residual risk assessment.

• Timely access to systems and documentation.
• Availability of relevant ICASA personnel.
• ICASA to assign a focal point for facilitation.
• Service provider to escalate access or timing risks early.

The objective is to: 1. Acquire and implement an IAS that supports the GIAS and IPPF in risk-based planning, fieldwork execution, reporting, issue remediation tracking, follow-up, and combined assurance across the organisation. 2. Ensure alignment with the IIA GIAS and good practice for audit workflows, quality assurance and independence. 3. Provide seamless integration with core systems (GRC / Risk and Compliance management systems) and secure data handling compliant with POPIA. 4. Deliver measurable value for money and transparent procurement outcomes per PFMA SCM frameworks.

supply of goods

or works or the rendering of a service

The closing date for the tender is 2026-09-21. No other important dates are specified in the tender documents.

The contact information for the tender is not specified in the tender documents.

Bidders must submit their bids to the address specified in the tender documents. The submission channel is not specified. The format of the bid is also not specified. A bid will be disqualified if it is received after the closing time, which is 11:00:00 on 2026-09-21.

Bidders must be registered on the CSD, have a valid tax clearance certificate, and meet the requirements of the Preferential Procurement Regulations, 2022. Bidders must also have the necessary expertise and experience in implementing internal audit systems.

The technical specifications for the tender are not specified in detail. However, the tender is for the implementation of an internal audit system with maintenance and support for a period of five years.

The supplier must ensure that the goods supplied conform to the standards mentioned in the bidding documents and specifications. The supplier must also ensure that the goods are new, unused, and of the most recent or current models.

The financial requirements for the tender are not specified in detail. However, the tender documents mention that the supplier may be required to provide performance security, which will be denominated in the currency of the contract or in a freely convertible currency acceptable to the purchaser.

Bidders must comply with the General Conditions of Contract, which include requirements for local content, imported content, and other conditions. Bidders must also comply with the Special Conditions of Contract, which are not specified in detail.

The supplier must ensure that the goods supplied do not pose any health or safety risks to the purchaser or its personnel. The supplier must also ensure that the goods are properly packaged and labeled to prevent any damage or deterioration during transit.

The contract will be governed by the General Conditions of Contract and the Special Conditions of Contract. The contract will be for a period of five years, and the supplier will be required to provide maintenance and support for the internal audit system.