Request for information: post implementation review of integrated claims management system (project bokamoso) – road acc

Closing date: 13 December 2026

Closing time: 11:00

Compulsory briefing: none

Publication date: 06 November 2026

Expected engagement start: around January 2026

Final report and deliverables due to RAF: no later than December 2026

Enquiries: in writing before the submission date

Enquiries

• Email: [email protected]
• Attention: Demand Management

Submission

• Method: email
• Email: [email protected]

Submission method: email

Submission email: [email protected]

Attention: Demand Management

Required submissions:

• Bidder's proposal addressing the RAF requirements
• Bidder's pricing
• Bidder's proposed team supporting the RAF requirements
• Any additional information

Bidding structure: bidders must indicate whether they respond as an individual bidder, joint venture, consortium, with subcontractors, or other, and supply registration, VAT, contact and address details for each party.

Enquiries: submit in writing by email to [email protected] before the submission date, referencing the relevant paragraph numbers.

Note: RAF may reuse the proposal in another procurement method, which may lead to an award.

This is a request for information, not a scored bid. No preference point system, weighting or minimum qualifying score applies.

RAF will use responses to refine requirements, develop evaluation criteria and decide on the future procurement approach.

Information sought from respondents:

• Availability of suitably qualified service providers able to conduct an independent post-implementation review.
• Suitable methodologies, approaches and frameworks.
• Technical, audit, project management and specialist skills and resources required.
• Indicative timelines and level of effort.
• Indicative pricing and cost considerations.
• Relevant industry practices, standards and frameworks.
• Practicality, clarity and completeness of the proposed scope.
• Key risks, dependencies, assumptions and constraints.

Participation confers no preference or advantage in any future procurement.

Purpose: RAF Internal Audit requires an independent post-implementation review (PIR) of the Integrated Claims Management System (ICMS, Project Bokamoso) to establish whether the project met its objectives and is delivering expected business value.

Scope areas:

• Project governance: effectiveness of governance, compliance with approved business requirements, management of scope, budget and timelines, user adoption and change management, control weaknesses and improvement opportunities.
• System functionality: application controls covering user access management, role-based security, segregation of duties, input validation, processing controls, interface controls, data integrity, audit trail, approval workflows and exception reporting; integration with internal and external systems; operational performance and stability; security and access management.
• Data migration and governance: implementation of data governance policies, procedures and standards; adequacy and documentation of the migration strategy and plan; completeness, accuracy and validity of data migrated from legacy claims systems, with key fields and values identical to source records.
• Project financial and budget governance: formal approval, documentation, justification and communication of financial and budget changes in line with RAF delegations of authority, including the Master Service Agreement and Statement of Work.
• Benefits realisation: realisation of the optimised automated claims value chain; achievement of benefits in the RFP, business case, project charter and success criteria; post-go-live support arrangements for outstanding functionality, defects, workarounds, enhancements and deferred scope; effectiveness of training, user adoption and change management; impact of outstanding items on the claims value chain and statutory compliance; existence of an approved remediation roadmap and escalation mechanisms.

Deliverables:

• Audit Planning Memorandum (APM), updated as required.
• Opening planning meetings and minutes.
• Progress meetings with the auditee and minutes.
• System descriptions.
• Risk and Control Matrices (RACM).
• Audit programmes.
• Working papers and supporting evidence.
• Close-out meetings and minutes.
• Draft and final reports.
• All working papers and templates documented using RAF Internal Audit Methodology templates.

Execution requirements:

• Deliverables in the content prescribed by the Chief Internal Audit Officer or representative.
• Work begins immediately after formal engagement by RAF Internal Audit.
• The service provider manages and quality-controls its assigned staff.
• Deliverables must meet the stated requirements and may include additional best-practice elements within the quoted time and cost.
• The review follows the RAF Internal Audit Methodology and templates unless a deviation is agreed with RAF Internal Audit management; templates are provided at engagement start.
• The review must comply with the International Standards for the Professional Practice of Internal Audit.
• The provider must have capacity to complete the work within the prescribed time and under short notice.
• The review is also subject to the RAF master services agreement.
• All information, records, working papers and reports produced become RAF property and must be handed to the Chief Internal Audit Officer or representative on completion.
• Assigned resources must provide on-the-job training to RAF employees on the engagement.

The review must follow an internal audit approach in line with the RAF Internal Audit Methodology and templates, which are provided at engagement start; any deviation requires agreement from RAF Internal Audit management.

Work begins immediately after formal engagement by RAF Internal Audit, expected around January 2026, and the final report and deliverables are due no later than December 2026.

The provider must have sufficient capacity to complete the assignment within the prescribed time and under short notice.

All information, documents, records, working papers and reports, manual or electronic, become RAF property and must be handed to the Chief Internal Audit Officer or representative on completion.

The provider must field a multidisciplinary team with at least five years' relevant experience in IT audit, information systems assurance, business process review, data analytics and technology implementation.

Team roles and minimum requirements:

• Engagement Lead / IT Audit Manager: degree in IT, auditing, risk management, accounting or a related field; CISA certified; CIA, CRISC, CISM or CGEIT advantageous; 7 to 10+ years in IT audit, systems assurance, governance and major technology projects, including leading post-implementation reviews.
• IT Auditor – Application Controls: degree or diploma in IT, computer science or information systems; CISA certified; 3 to 5+ years auditing enterprise applications, including application controls, interfaces, user access, change management and system configuration.
• Business/Claims Process Specialist: degree in business management, risk management, finance, insurance or a related discipline; 5+ years in claims management or a comparable business environment; strong understanding of the end-to-end claims lifecycle, business rules, approvals, repudiations, payments and claims controls.
• Systems/Business Analyst: degree in information systems, computer science, business analysis or a related field; CBAP advantageous; 5+ years in requirements analysis, system implementation and business-process mapping; able to assess whether implemented functionality meets approved requirements.
• Data Analytics Specialist: degree in data analytics, computer science, statistics, information systems or a related field; 3 to 5+ years analysing large datasets using SQL, Python, Power BI, ACL/Arbutus or similar tools; experience identifying duplicate claims, unusual payments, processing anomalies and control exceptions.
• Project/Programme Management Specialist: degree in project management, IT or a related field; PMP or PRINCE2 advantageous; 5+ years managing or reviewing major IT implementations, including scope, requirements, budget, timelines, risks, change requests, testing and implementation governance.
• IT Infrastructure/Integration Specialist: degree or diploma in IT, computer science, engineering or a related field; 3 to 5+ years in enterprise infrastructure, databases, APIs, system interfaces, cloud and on-premises environments, backup, disaster recovery and system performance.

Team members must collectively cover application controls, cybersecurity, data analytics, business process assessment, systems integration, project governance and benefits realisation. Experience in claims management, insurance, financial services or other high-volume transactional environments is an advantage.

Assigned resources must provide on-the-job training to RAF employees on the engagement.

The review must comply with the International Standards for the Professional Practice of Internal Audit and be conducted with due diligence and professional care.

The service provider is fully responsible and accountable for managing and quality-controlling its assigned staff.

Deliverables must meet the stated requirements and may include additional best-practice elements at the provider's discretion within the quoted time and cost.

All working papers and audit templates must be documented using RAF Internal Audit Methodology templates.

Bidders must submit indicative pricing and cost considerations to support RAF budgeting and procurement planning.

No prescribed pricing form, bill of quantities or rate schedule is specified.

Pricing: bidders must submit indicative pricing and cost considerations to support RAF budgeting and procurement planning.

No bid security, guarantee, retention or payment terms are stated.

Eligibility:

• Registered as an eligible supplier on the National Treasury Central Supplier Database.
• Registered in accordance with applicable South African laws.
• Tax affairs in order at submission.

Disqualification:

• Listing on the National Treasury Register for Tender Defaulters or the Database of Restricted Suppliers results in automatic disqualification for the company or its directors.

No B-BBEE, CIDB or local content requirements are stated.

The RFI creates no contractual obligation and is not an offer, quotation, bid evaluation, pre-qualification, shortlisting or commitment to procure.

RAF may amend, withdraw or terminate the RFI at any time without liability to respondents.

Participation in the RFI or a demonstration confers no preferential right or advantage in any future procurement.

RAF may reuse a respondent's proposal in another procurement method, which may result in an award.

Any resulting engagement will be governed by the RAF master services agreement and the RAF Internal Audit Methodology.

No scoring, shortlisting or preference point system applies; the RFI is for information gathering only.

RAF will use responses to refine business and technical requirements, determine deployment and support models, develop evaluation criteria, compile specifications and decide whether further market engagement or a proof of concept is appropriate.

The RFI is not an offer, quotation, bid evaluation, pre-qualification, shortlisting or commitment to procure. Participation or a demonstration gives no preferential right or advantage in a future procurement. RAF may amend, withdraw or terminate the RFI at any time without liability.