Re-advertisement: appointment of a service provider to offer professional and technical training for group audit and risk (information technology auditors and risk practitioners) based on pre-selected training courses for the coming 12 months as aligned to the work skills plan

Closing date: 3 September 2026 at 10:00.

Compulsory briefing: 27 August 2026 at 10:00, venue: 3rd floor, west wing, Risk division, Sammy Marks building. Attendance is mandatory; failure to attend disqualifies the bid.

Validity period: 90 days from closing date.

Technical enquiries: Lebogang Dichaba, (012) 358 5066, [email protected].

Supply Chain enquiries: Josia Masenya, (012) 358 0658, [email protected].

Department: Group Audit and Risk.

Municipality address: Tshwane House, 320 Madiba Street, Pretoria (for reference; submissions are online).

Submit online via the City of Tshwane e-tender portal by 10:00 on 3 September 2026. Do not deposit in the tender box.

Returnable forms (all must be completed in black ink, signed, and submitted):

• MBD 1 (Invitation to Bid): bidder and contact details.
• MBD 4 (Declaration of Interest): discloses any connection to state employees.
• MBD 6.1 (Preference Points Claim): claims B-BBEE and specific goal points.
• MBD 7.2 (Contract Form – Rendering of Services): commits to execute the contract.
• MBD 8 (Declaration of Past SCM Practices): declares no abuse of supply chain.
• MBD 9 (Certificate of Independent Bid Determination): certifies no collusion.
• Company Registration Certificate.
• Tax Clearance Certificate or SARS TCS PIN.
• B-BBEE Certificate or sworn affidavit (for EME/QSE).
• Municipal account statement (not in arrears >90 days) for the company and its owners/directors.
• CSD summary report.
• Pricing schedule (all items must be quoted).
• Audited financial statements for the last 3 years (if applicable, for tenders above R10m).
• Joint Venture agreement if bidding as a JV.
• Proof of attendance at the compulsory briefing session.

Disqualification risks:

• Late submission.
• Incomplete or unsigned forms.
• Use of correction fluid (Tippex) on any document.
• Price alterations not initialled.
• Missing compulsory briefing attendance.
• Failure to declare interest in related companies (MBD 4 question 3.14).

Returnable documents include: Company Registration Certificate, Tax Clearance Certificate or Unique PIN, BBBEE Certificate or sworn affidavit, Municipal Account Statement (or lease agreement/letter from councillor) for the company and its owners/directors, CSD summary report, and all MBD forms (MBD 1, 4, 6.1, 7.2, 8, 9).

Three-stage evaluation:

1. Administrative Compliance: All compulsory returnable documents must be submitted correctly. Missing or incomplete documents disqualify the bid.
2. Mandatory Requirements:

• Provide at least three contactable reference letters for completed training in each category.
• Training material must be certified/endorsed: Category A (IT) by ISACA; Category B (Risk) by IRMSA, IIA, or BCI. SAQA or SETA accreditation required.
• Submit CVs of training team members with certified copies of qualifications (SAQA verification if foreign). Maximum 5 years training experience.
• Provide proof of current membership in good standing with relevant professional bodies.
• For IT courses: CISA, CRISC, CISM, COBIT certificates (from ISACA).
• For Risk courses: IRMSA, IIA, BCI membership; assessor/moderator registered with ETQA.

3. Preference Point System (80/20):

• 80 points for price (lowest acceptable price gets 80, others pro-rata).
• 20 points for specific goals:

• B-BBEE level: Level 1 (8 pts) to Non-compliant (0 pts).

• EME/QSE: 2 pts.

• 51% Women-owned: 2 pts.

• 51% People with disability: 2 pts.

• 51% Youth: 2 pts.

• Local Economic Participation: City of Tshwane (4 pts), Gauteng (2 pts), National (1 pt).

Proof documents required for each claim.

Scope: Provide professional and technical training for Group Audit and Risk (IT auditors and risk practitioners) over 12 months, aligned to the work skills plan.

Two categories:

• Category A (IT Training): Courses – Certified Information Systems Auditor (CISA), Certified in Risk and Information Systems Control (CRISC), Certified Information Security Manager (CISM), COBIT Framework Training. 12 candidates per course.
• Category B (Risk Management Training): Courses – Project Risk Management, Business Continuity Management, Risk Appetite and Tolerance. 14 candidates per course.

Delivery: Workshops (physical or virtual), practical case studies, interactive sessions.

Deliverables per category:

• Customized training material aligned to audit/risk functions.
• CPD points for each course.
• Training manuals and materials.
• Attendance registers and training evaluation reports.
• Certificates of completion.
• Training presentation slides.
• Cost outline (for IT) or quotation inclusive of VAT (for Risk).
• Vendor number for City of Tshwane.

Training may be conducted online, physically, or face-to-face.

Training delivery: workshops (physical or virtual), practical case studies, interactive sessions. The bidder must develop customized training material, provide CPD points, training manuals, attendance registers, evaluation reports, and certificates of completion. For IT category, also provide training presentation slides and cost outline. For Risk category, provide number of days and confirmation of IIA endorsement.

Bidders must provide CVs of training team members with certified copies of qualifications. Foreign qualifications require SAQA verification. Team members must have a maximum of 5 years training experience and current membership in good standing with relevant professional bodies (ISACA for IT, IRMSA/IIA/BCI for Risk).

Training material must be certified/endorsed by ISACA for IT courses and by IRMSA, IIA, or BCI for Risk courses. SAQA accreditation or SETA accreditation required. Assessors and moderators must be registered with Education and Training Quality Assurance (ETQA).

Pricing must be submitted on the provided schedule for each category. Category A (IT): 4 courses (CISA, CRISC, CISM, COBIT), 12 candidates each. Category B (Risk): 3 courses (Project Risk Management, Business Continuity Management, Risk Appetite and Tolerance), 14 candidates each. Unit price and total excl. VAT, plus 15% VAT. The city may increase or decrease quantities subject to budget availability.

Pricing format: Unit price and total amount exclusive of VAT, plus 15% VAT, total inclusive of VAT. Submit on the provided pricing schedule for each category.

Category A (IT): 4 courses, 12 candidates each.

Category B (Risk): 3 courses, 14 candidates each.

The city reserves the right to increase or decrease quantities subject to budget availability.

Bids must remain valid for 90 days after closing.

Payment terms: Within 30 days after receipt of invoice (per MBD 7.2).

No bonds or guarantees specified.

Market analysis: City may conduct market analysis and negotiate a market-related price with the highest-scoring bidder.

Mandatory registrations and documents:

• Central Supplier Database (CSD) registration – compulsory; provide CSD number.
• Tax Compliance Status PIN or CSD number.
• Municipal account statement (not older than 3 months) showing no arrears >90 days for the bidding company and its owners/directors/major shareholders. If in informal settlement, a letter from the local councillor.
• B-BBEE certificate or sworn affidavit (for EME/QSE) to claim preference points.
• Company Registration Certificate (CIPC).
• Professional certifications: For IT courses, trainers must hold ISACA certifications (CISA, CRISC, CISM, COBIT). For Risk courses, trainers must be members of IRMSA, IIA, or BCI. SAQA or SETA accreditation for training material. Assessors and moderators registered with ETQA.
• Audited financial statements for the last 3 years (if required by law; if not, provide proof of exemption).
• Joint Venture agreement if applicable.
• No CIDB grading required.

MBD 7.2 (Contract Form – Rendering of Services): commits the bidder to execute the contract as per bid documents. MBD 9 (Certificate of Independent Bid Determination): certifies no collusion. General Conditions of Contract (GCC) and any special conditions apply. The successful bidder must sign a written contract (MBD 7.2).

Only bidders registered on the Central Supplier Database (CSD) with a valid CSD number will be considered, as required by National Treasury.

Evaluation is in three stages: Administrative Compliance, Mandatory Requirements, and Preference Point System (80/20). Administrative compliance requires all returnable documents (MBD forms, tax compliance, CSD, municipal account, financials, etc.) to be correctly submitted. Mandatory requirements include experience (3 reference letters), certification/endorsement of training material (ISACA for IT, IRMSA/IIA/BCI for Risk), SAQA/SETA accreditation, CVs with certified qualifications (max 5 years experience), and professional membership. Preference points: 80 for price, 20 for specific goals (B-BBEE level, EME/QSE, women/disabled/youth ownership, local economic participation).