Enterprise risk management services – 6-Month contract (water research commission)

Closing date: 27 October 2026 at 11:00

Advertisement date: 20 October 2026

No briefing or site visit is stated.

Enquiries (technical and commercial):

• Contact: Supply Chain Management
• Telephone: 012 761 9300
• Email: [email protected]

Submission:

• Email: [email protected]

Fraud hotline (report suspicious RFQs, purchase orders or award letters):

• Telephone: 0800 214 777
• Email: [email protected]

Submission method: email only

Submission email: [email protected]

Closing time: 27 October 2026 at 11:00

• Quotations must reach the WRC before the closing time; late bids are not considered.
• Hand-delivered quotations or those sent to a different email address will not be accepted.
• Bids must be submitted on the official forms provided (not re-typed) and be fully completed and dated.
• The successful bidder must sign a written contract form (SBD 7).
• Returnable documents (all must be completed and submitted):
• SBD 1 (Invitation to Bid): bidder and contact details, signed as the offer cover page.
• SBD 4 (Declaration of Interest): discloses whether any director or shareholder is employed by the state or connected to anyone at the WRC; false declarations disqualify the bid.
• SBD 6.1 (Preference Points Claim): claims preference points for specific goals.
• Valid SARS Tax Clearance Certificate and SARS Tax Compliance Status PIN (or CSD number if no TCS is available).
• Original or certified B-BBEE Status Level Verification Certificate, or original B-BBEE Sworn Affidavit for EMEs and QSEs.
• Central Supplier Database (CSD) Compliance History Report.
• Proof of authority to sign (e.g. company resolution).
• Bidders must be registered on the CSD; provide the CSD number.
• Consortia, joint ventures and subcontractors must each submit a separate tax compliance certificate, PIN and CSD number.
• Bids from persons in the service of the state, companies with such directors, or close corporations with such members will not be considered.

Evaluation phases:

1. Phase One – Screening of minimum requirements documents (compliance and completeness).
2. Phase Two – Mandatory requirements and technical evaluation.
3. Phase Three – Price and preference (specific goals).

Phase One – Screening (compliance):

• All required documents must be present and properly completed.
• Tax matters must be in order; bidders with outstanding tax issues are excluded.

Phase Two – Mandatory requirements (failure to comply eliminates the bid):

• Minimum 5 years' experience in Enterprise Risk Management, evidenced by a company profile and signed letter on company letterhead.
• Relevant qualification in Risk Management, Internal Audit, Governance, Finance or related field for the proposed resource (certified copies).
• Membership of IRMSA and/or equivalent professional body.
• At least three signed reference letters for similar projects within the last five years.
• CV of the proposed resource.

Phase Two – Technical evaluation (maximum 100 points):

• Experience of the service provider in similar assignments: 40 points
• Schedule 3A public entity experience >5 years and internal audit experience >8 years: 40 points
• Schedule 3A experience >4 years and internal audit 6-7 years: 30 points
• Schedule 3A experience =3 years and internal audit =5 years: 15 points
• Less than the above: 0 points
• Relevant project reference letters: 15 points
• More than 5 contactable references: 15 points
• 5 contactable references: 10 points
• Less than 5: 0 points
• Expertise of the team: 40 points
• Key resources with 10+ years' experience, professional certification, postgraduate qualification, IRMSA membership: 40 points
• 7-9 years' experience, postgraduate qualification, IRMSA membership: 30 points
• 5-6 years' experience, degree, professional certification, IRMSA membership: 20 points
• 2-5 years' experience, less than a degree, IRMSA membership: 10 points
• Little or no evidence: 0 points
• Analysis of reference performance: 20 points
• More than three exceptional references: 20 points
• Three average references: 10 points
• Less than three below average: 5 points
• No reference: 0 points
• Minimum qualifying score: 70% (70/100) on technical capacity to proceed to price and preference evaluation.

Phase Three – Price and Preference (80/20 system):

• Price: 80 points (benchmarked against lowest acceptable quote)
• Specific goals: 20 points
• Woman-owned businesses (30% and above ownership): 10 points
• B-BBEE status level: Level 1: 10, Level 2: 8, Level 3: 6, Level 4: 4, Level 5: 2, Non-compliant: 0
• The 80/20 preference point system applies (for requirements up to R50 million).

Scope of work – Enterprise Risk Management services for the Water Research Commission (WRC), including but not limited to:

• Develop or review the WRC Risk Management Framework.
• Communicate the framework to all stakeholders and monitor implementation.
• Continuously improve the WRC's risk management maturity level.
• Assist management with risk identification, assessment, mitigation strategies and monitoring.
• Collate, aggregate, interpret and analyse risk assessment results to extract risk intelligence.
• Report risk intelligence to EXCO, Risk Management Committee, Audit Committee and the Board.
• Continuously review and update the Business Continuity Management Plan (BCMP).
• Keep up to date with developments in the risk management environment.
• Provide general administrative management and support.
• Provide strategic human resources risk advisory.
• Assist the Office of the CEO in implementing the risk management strategy and reporting.
• Develop the risk management implementation plan.
• Provide risk management support to branches (monthly risk review meetings and advice as required).
• Train branches on risk management.
• Coordinate and train risk champions.
• Establish and support the functioning of the risk committee.

Deliverables (not limited to):

• Updated Risk Management Framework.
• Updated Strategic and Operational Risk Registers.
• Quarterly Risk Reports.
• EXCO, Risk Management Committee, Audit Committee and Board Risk Reports.
• Updated Business Continuity Management Plan.
• Risk Maturity Assessment Report.
• Monthly Progress Reports.

The service provider is expected to follow a structured approach to enterprise risk management, including developing or reviewing the Risk Management Framework, communicating it to stakeholders, monitoring implementation, conducting risk identification and assessment workshops, developing and updating risk registers, monitoring mitigation measures, performing risk maturity assessments, preparing risk intelligence reports for EXCO and other committees, reviewing and updating the Business Continuity Management Plan, providing risk management training, coordinating risk champions, and supporting the risk committee. The provider must also keep abreast of developments in the risk management environment and provide general administrative support.

Mandatory requirements:

• Minimum 5 years' experience in providing Enterprise Risk Management services, supported by a company profile and signed confirmation on company letterhead.
• The proposed resource must hold a relevant qualification in Risk Management, Internal Audit, Governance, Finance or a related field (certified copies required).
• Membership of IRMSA and/or equivalent professional body.
• At least three signed reference letters for similar projects undertaken within the last five years.
• CV of the proposed resource.

Technical evaluation of experience:

• Experience of the service provider in similar assignments (40 points):
• Schedule 3A public entity experience >5 years and internal audit experience >8 years: 40 points
• Schedule 3A experience >4 years and internal audit 6-7 years: 30 points
• Schedule 3A experience =3 years and internal audit =5 years: 15 points
• Less than the above: 0 points
• Relevant project reference letters (15 points):
• More than 5 contactable references: 15 points
• 5 contactable references: 10 points
• Less than 5: 0 points
• Expertise of the team (40 points):
• Key resources with 10+ years' experience, professional certification, postgraduate qualification, IRMSA membership: 40 points
• 7-9 years' experience, postgraduate qualification, IRMSA membership: 30 points
• 5-6 years' experience, degree, professional certification, IRMSA membership: 20 points
• 2-5 years' experience, less than a degree, IRMSA membership: 10 points
• Little or no evidence: 0 points
• Analysis of reference performance (20 points):
• More than three exceptional references: 20 points
• Three average references: 10 points
• Less than three below average: 5 points
• No reference: 0 points

Pricing must be quoted in South African Rand and remain fixed for the duration of the contract. The total amount must be inclusive of VAT and all disbursements and operational costs. No additional charges will be accepted. The pricing schedule requires a monthly rate and total amount for six months of enterprise risk management services, with sub-total, VAT at 15%, and total contract value. A detailed cost breakdown must be submitted, including professional fees, hourly rates, resource allocation and disbursements. Payment will be made monthly at a fixed amount, 30 days from invoice date.

Pricing format:

• Fees must be quoted in South African Rand (ZAR).
• Prices must be firm and all-inclusive, including VAT where applicable.
• The total quoted amount must remain fixed for the duration of the contract.
• The total project amount must include all disbursements and normal operational costs (telephone, printing, administration, travelling, accommodation, etc.).
• No additional disbursements or extra charges will be accepted.
• The WRC reserves the right to negotiate pricing where rates are deemed unreasonably high.
• Abnormally low or high pricing may be subject to clarification or risk assessment.
• Bidders must submit a detailed cost breakdown showing professional fees, hourly rates (where applicable), anticipated resource allocation and any disbursements.

Pricing schedule:

• Item: Provision of Enterprise Risk Management Services, including all services in the scope of work.
• Unit: Month, Quantity: 6
• Monthly rate (excl. VAT) and total amount (excl. VAT) to be provided.
• Sub-total, VAT @ 15%, and total contract value (VAT inclusive) to be calculated.

Payment terms:

• The WRC will be invoiced at a fixed monthly amount for six months.
• Payment will be made 30 days from the date of the invoice.

Contract period: Six (06) months.

No bid security, guarantees, retention or financial capacity thresholds are stated.

Tax compliance:

• Bidders must be tax compliant and submit a valid SARS Tax Clearance Certificate and a SARS Tax Compliance Status PIN for verification on eFiling.
• Where no TCS is available, a CSD number must be provided.
• Consortia, joint ventures and subcontractors must each submit separate tax compliance certificates, PINs and CSD numbers.
• Bidders with tax matters not in order will not be considered.

Central Supplier Database (CSD):

• Bidders must be registered on the CSD and submit a CSD Compliance History Report.

B-bbee:

• B-BBEE Status Level Verification Certificate (original or certified copy) or B-BBEE Sworn Affidavit (for EMEs and QSEs) must be submitted to qualify for preference points.
• B-BBEE points are awarded as follows: Level 1: 10, Level 2: 8, Level 3: 6, Level 4: 4, Level 5: 2, Non-compliant: 0.

Other:

• No bids from persons in the service of the state, companies with such directors, or close corporations with such members.
• Bidders must not be listed on the Register for Tender Defaulters or the List of Restricted Suppliers.
• Foreign suppliers must complete the questionnaire in Part B:3 if applicable.
• Bidders who have been declared insolvent must be rehabilitated and provide proof.

The contract will be for a fixed period of six months. The WRC reserves the right to terminate the contract early if operational requirements change, subject to contractual, labour and governance requirements. The WRC may also terminate the contract if the service provider's performance is unsatisfactory. The National Treasury General Conditions of Contract apply. A service level agreement will be entered into with the successful bidder. The WRC reserves the right to award, cancel or partially award the contract. Any change of information that may affect delivery must be brought to the WRC's attention promptly; failure may result in termination. The successful bidder must sign a written contract form (SBD 7).

The evaluation follows three phases: screening of minimum requirements, mandatory requirements and technical evaluation, and price and preference evaluation. The 80/20 preference point system applies. Technical evaluation awards up to 100 points across experience of the service provider (40), relevant project references (15), expertise of the team (40), and analysis of reference performance (20). A minimum of 70% on technical capacity is required to proceed to price and preference evaluation. Price is allocated 80 points and specific goals 20 points, with specific goals covering woman-owned businesses (10 points) and B-BBEE status level (up to 10 points).