The road accident fund (raf) wishes to appoint a suitable service provider for external investigation of ethics and unethical misconduct cases.

Returnable Documents:

• You must complete and submit the SBD 4 declaration form.
• The bid will be disqualified if the declaration is found to be false or incomplete.
• Bidders listed on the Register for Tender Defaulters or List of Restricted Suppliers are automatically disqualified.

Bidders must not be listed on the Register for Tender Defaulters or the List of Restricted Suppliers. They must fully and truthfully complete the disclosure declaration regarding state employment, conflicts of interest, and collusion. The bid must be prepared independently.

Any person (natural or juristic) may make an offer or offers in terms of this invitation to bid. In line with the principles of transparency, accountability, impartiality, and ethics as enshrined in the Constitution of the Republic of South Africa and further expressed in various pieces of legislation, it is required for the bidder to make this declaration in respect of the details required hereunder.

No specific requirements found

• Closing Date and Time: 08 July 2026 at 11:00.
• RFQ Validity Period: 30 days from the closing date.
• Expected Service Start: As soon as the Purchase Order is issued.
• Compulsory Briefing Session: Not applicable.

• Submission and General Enquiries: Email quotations and enquiries to [email protected].
• Technical Enquiries: Contact Jonathan Matjila via email at [email protected] or phone 012 621 1962.
• Delivery Address for Services: RAF, 420 Witch-Hazel Avenue, Eco-glades 2, Centurion.

• Submit your quotation via email to [email protected].
• Use the reference number PR10116456 in all correspondence.
• Late submissions will not be accepted.
• Ensure all required Annexures (Standard Bidding Documents and Mandatory Evaluation documents) are completed and signed.
• Failure to follow submission instructions will result in disqualification.

1) Must be CSD registered supplier; 2) Tax matters must be in order with SARS; 3) Must not be involved in collusive behavior (multiple submissions from related companies prohibited); 4) Team must meet mandatory qualification requirements: Senior Investigator (NQF 7 qualification in Law, Policing, Forensic Investigation or Industrial Psychology, CFE/ICFP/IET certification, 5+ years experience) and Senior Manager/Investigations Lead (NQF 8 qualification in same fields, CFE/ICFP/IET certification, 10+ years experience); 5) Must submit valid certificates/CVs before closing date; 6) Late submissions will not be considered.

• Scope: Conduct ethics and unethical misconduct investigations for the RAF Ethics Unit.
• Key tasks include developing an investigation plan, collecting and analysing evidence, conducting interviews, preparing reports, and testifying if required.
• The service provider must commence work within three working days of written instruction.
• Final investigation reports must be submitted within 30 calendar days from commencement, unless otherwise agreed.
• All work must be confidential and comply with POPIA and other relevant legislation.
• Team Composition Requirements:
• Senior Investigator: Relevant investigation qualification (NQF 7), Certified Fraud Examiner/ICFP accreditation, and minimum 5 years' experience.
• Senior Manager/Investigations Lead: Relevant investigation qualification (NQF 8), Certified Fraud Examiner/ICFP accreditation, and minimum 10 years' experience.
• Valid certificates, qualifications, and CVs must be submitted by the closing date.

• All prices must be VAT inclusive (if VAT registered) and quoted in South African Rand (ZAR).
• Non-VAT registered suppliers charging VAT will be disqualified.
• Prices must be completed in the provided cost breakdown table; failure to do so leads to disqualification.
• No price changes are accepted after the official Award Letter/Purchase Order is issued.
• Travel and accommodation must be at government-approved rates; travel is economy class only.

• Suppliers must be registered on the Central Supplier Database (CSD). RAF will only conduct business with CSD-registered suppliers.
• Tax matters must be declared in order by SARS.
• Points claimed for Preferential Procurement Specific Goals will be verified through CSD.
• Suppliers with a disability must provide a valid medical certificate as proof.
• Collusive behaviour or submitting multiple proposals through different entities with common directors/shareholders will result in disqualification.
• Prohibition of Gifts & Hospitality: Suppliers must not offer gifts to RAF officials and must report any solicitation via the fraud line 0800 005919.

Service providers must demonstrate: 1) Compliance with POPIA and data protection regulations; 2) Implementation of physical security measures (secure premises, access control, surveillance); 3) Robust cybersecurity protocols; 4) Policies for document handling, transportation, and storage; 5) Ability to maintain detailed access and retrieval records; 6) Incident reporting capabilities; 7) Willingness to undergo RAF security screening of directors and resources; 8) Adherence to subcontractor and third-party oversight requirements.

The service provider will handle RAF's confidential, private, personal, or sensitive information (files, data, documents). You must comply with the Protection of Personal Information Act (POPIA) and implement the following security measures:

• Document Handling and Transportation: Have protocols for secure handling and transport. Use a lockable, secure transportation system.
• Security Measures: Keep files in lockable containers during handling/transport to prevent loss, theft, or damage.
• Record Keeping: Maintain accurate records for each document, including location, access history, and retention schedule, organised for easy tracking.
• Document Retrieval and Handling: Use secure protocols for retrieval, verify requester identity, and ensure secure transport.
• Secure Storage: Store physical documents in lockable cabinets to prevent unauthorised access or tampering.
• Access Control: Ensure only authorised personnel can access documents. Have policies to control and monitor access.
• Fire Suppression: Premises must have a fire suppression system or similar (e.g., carbon dioxide fire extinguishers) to prevent document loss in a fire.
• Physical Security: Premises must have a secure perimeter with controlled access and/or surveillance systems, secure doors, locks, and alarms. Implement measures like controlled access points, surveillance cameras, and/or 24/7 monitoring. Report any physical security breaches to RAF and provide evidence (CCTV, police reports, alarm records).
• Network Security: Digital storage systems must have technical measures like firewalls, intrusion detection, and encryption.
• Cybersecurity Standards: Implement robust cybersecurity against threats (malware, phishing, unauthorised access). Use encryption for data in transit and at rest, complying with industry standards. Regularly update and patch systems.
• Incident Reporting and Response: Have a documented incident response plan. Report security incidents or data breaches to RAF promptly.
• Subcontractors and Third-Party Oversight: Ensure subcontractors adhere to the same data protection and cybersecurity standards. You are responsible for their compliance.
• Audit and Monitoring: RAF reserves the right to audit your compliance. You must cooperate with audits.

You must comply with data protection laws, including the Protection of Personal Information Act (POPIA). Key requirements:

• Data Protection: Handle personal and sensitive data in compliance with applicable laws. Safeguard against unauthorised access, disclosure, alteration, and destruction. Report data breaches to RAF immediately.
• Confidentiality: Implement measures to ensure confidentiality of personal, confidential, and sensitive data, including imposing confidentiality obligations on agents, subcontractors, or third parties.
• Third-Party Screening: Third-party service providers handling PII must be vetted for data protection policies and sign a data protection agreement.
• Security Screening: RAF reserves the right to conduct security screening or vetting for company directors and resources provided.

Fire Safety: Your premises must have a fire suppression system or similar (e.g., carbon dioxide fire extinguishers) to prevent damage or loss of documents and records in a fire.

You will handle RAF's confidential, private, personal, or sensitive information (files, data, documents). Key obligations:

• Physical Security: Ensure physical security of documents with controlled access points, surveillance cameras, and/or 24/7 monitoring. Protect storage facilities against unauthorised access. Report any physical security breaches to RAF and provide evidence (CCTV, police reports, alarm records).
• Access Control: Grant access on a need-to-know basis. Use strong authentication methods. Regularly review and update access permissions.
• Data Protection: Handle personal and sensitive data in compliance with data protection laws. Safeguard against unauthorised access, disclosure, alteration, and destruction. Report data breaches to RAF immediately. Ensure confidentiality by imposing obligations on agents, subcontractors, or third parties.
• Third-Party Screening: Third-party service providers handling PII must be vetted and sign a data protection agreement.
• Security Screening: RAF reserves the right to conduct security screening for company directors and resources.
• Cybersecurity: Implement robust cybersecurity measures against threats (malware, phishing, unauthorised access). Use encryption for data in transit and at rest, complying with industry standards. Regularly update and patch systems.
• Incident Response: Have a documented incident response plan. Report security incidents or data breaches to RAF promptly.
• Subcontractors: Ensure subcontractors adhere to the same data protection and cybersecurity standards. You are responsible for their compliance.
• Audit and Monitoring: RAF reserves the right to audit your compliance. You must cooperate with audits.
• Document Handling and Transportation: Have protocols for secure handling and transport. Use a lockable, secure transportation system.
• Security Measures: Keep files in lockable containers during handling/transport to prevent loss, theft, or damage.
• Record Keeping: Maintain accurate records for each document, including location, access history, and retention schedule.
• Document Retrieval and Handling: Use secure protocols for retrieval, verify requester identity, and ensure secure transport.
• Secure Storage: Store physical documents in lockable cabinets to prevent unauthorised access or tampering.
• Access Control: Ensure only authorised personnel can access documents. Have policies to control and monitor access.
• Fire Suppression: Premises must have a fire suppression system or similar (e.g., carbon dioxide fire extinguishers) to prevent document loss in a fire.
• Physical Security: Premises must have a secure perimeter with controlled access and/or surveillance systems, secure doors, locks, and alarms.
• Network Security: Digital storage systems must have technical measures like firewalls, intrusion detection, and encryption.