This Tender Has Expired

RFP Release Date: 06 February 2026 at 10:00. Compulsory Briefing Session: 16 February 2026 at 11:30 (Microsoft Teams; late joiners after 11:40 disqualified). Written Clarification Questions Close: 24 February 2026 at 16:00. Written Responses to Clarifications: 27 February 2026 at 16:00. Proposal Submission Deadline: 06 March 2026 at 11:00. Bid Validity Period: 120 days from closing date. Anticipated Letter of Award: 12 June 2026 at 16:00. Commencement Date: 01 July 2026 at 09:00.

SCM/Procurement Enquiries: Supply Chain Management Unit, Email: [email protected], Tel: 031 372 3720 (Sijabulile Ntshangase). Technical Enquiries: Sphiwe Dlomo, Email: [email protected], Tel: 031 372 3720. Submission Address: Email to [email protected]. All correspondence must quote Bid No. KZNGFA - RFP 2025/04.

Submit proposals via email to [email protected] or the eTenders portal by 11:00 on 06 March 2026. Late submissions will not be accepted. Use original tender documentation issued by KZNGFA, written in black ink. Bids must be submitted on official forms provided (not re-typed). All bids will be examined for compliance with bidding requirements; obvious deviations will result in elimination. Technical and administrative queries must be submitted in writing only to [email protected], quoting the Bid No. Telephonic queries are not accepted. Returnable documents include: SBD 1, SBD 4, SBD 6.1, CSD report, B-BBEE certificate/affidavit, Certificate of Authority to Sign a Bid, and joint venture/consortium agreement (if applicable).

Evaluation occurs in two stages: Stage 1 (Administrative Compliance) and Stage 2 (Functionality). Stage 1: Mandatory compliance checks include CSD registration, fully completed and signed SBD 1, SBD 4, and SBD 6.1. Non-compliance results in disqualification. Stage 2: Functionality evaluation (100 points total, minimum 70% required to proceed). Criteria and weightings: Company Experience (10 points: <5 years=0, 5-10 years=5, 10-15 years=8, >15 years=10). Reference Letters (40 points: 4 letters=40, 3=30, 2=20, 1=10; must be on letterhead, signed, dated, <5 years old). Team Experience: Project Leader (12 points: PM certification=6, CV with 5+ years=6), Technical Resource (9 points: IT qualification + certifications=5, CV with 3+ years=4), Trainer (9 points: training qualification=4, CV with 3+ years=5). Methodology and Approach (20 points: 0=non-submission or major gaps, 10=partial, 15=clear, 20=comprehensive/innovative). Bidders scoring ≥70 in Stage 2 proceed to demo presentation. Final award is at KZNGFA’s sole discretion; lowest bid not guaranteed.

Scope: Provide an integrated GRC solution, legislative library, and background verification platform with maintenance, updates, and support for 38 months. Objectives: Streamline governance, risk, and compliance processes; enable risk identification/assessment; enhance monitoring/reporting; track mitigation plans; integrate with existing systems; link risk to strategy; standardise reporting; improve workflows. Required Components: GRC platform (enterprise risk/compliance management), Online Legislative Library (national/provincial legislation, gazettes, law reports, judgments, legal encyclopaedia, updates), Background Verification Module (identity/registration verification via DHA/CIPC, sanctions/PEP/adverse media screening, AML/KYC/FICA compliance, credit/legal/financial checks, reporting/audit logs). Technical Requirements: Cloud-based/SaaS/hybrid, web-accessible, multi-device/browser compatible, offline capability, API integration (ERP, CRM, HR, CIPC, DHA, credit bureaus), POPIA/PAIA/PFMA/FICA/King IV compliance, encryption (data at rest/in transit), role-based access control, immutable logs. Additional Requirements: High-level implementation plan, onboarding/training, skills transfer for internal IT, data migration/handover on termination. Team Requirements: Project Leader (PMP/PRINCE2/PMBOK/Agile, 5+ years GRC implementation), Technical Resource (IT diploma + GRC certifications, 3+ years experience), Trainer (training qualification, 3+ years GRC training experience). Users: ~28 internal users with varying permissions.

Pricing must include VAT (KZNGFA is a VAT vendor). Invoices must comply with VAT Act Section 20. Payment terms: 30 days after receipt of valid invoice. Banking details must be submitted upon award. KZNGFA reserves the right to request VAT registration if award exceeds R1m over 12 months. Pricing schedule must be submitted as part of the bid (Form C15).

Mandatory: CSD registration (verified via National Treasury CSD portal). Bidders must submit: CSD report, Tax Clearance Certificate (TCS PIN) or CSD number, SBD 1 (Invitation to Bid), SBD 4 (Bidders Disclosure), SBD 6.1 (Preferential Points). B-BBEE: Submit SANAS-accredited verification certificate or sworn affidavit (for EMEs/QSEs). Joint ventures/consortia: Each member must submit separate CSD/TCS compliance; consolidated B-BBEE scorecard required if unincorporated. Foreign suppliers: Must confirm RSA residency/branch/permanent establishment or income/tax liability; if none, no CSD/TCS PIN required. Additional: Certificate of Authority to Sign a Bid, proof of company registration (CIPC), VAT registration number, Workman’s Compensation number. Joint ventures must submit a copy of the joint venture/consortium agreement. All directors/members must not be listed on the Register of Tender Defaulters.