External quality assurance (eqar) review of the directorate internal audit

Administrative and technical enquiries:

• Name: Mr David Ntuli
• Role: Directorate: Supply Chain Management
• Email: [email protected]
• Telephone: not provided

Submission email: [email protected]

Delivery address for services (DHET): 117-123 Francis Baard Street, Department of Higher Education and Training, Pretoria

Submission method: email to [email protected]. Put 'RFQ363/2026' in the subject line. Quotation must be signed, dated, on company letterhead, and include the validity period. All attached SBD forms must be completed and signed. Late responses are not considered.

Returnable forms (complete and sign all):

• SBD 1 (Invitation to Bid): bidder and contact details.
• SBD 3.1 (Pricing Schedule): detailed pricing breakdown.
• SBD 4 (Declaration of Interest): disclose state employment or connections; list all related companies (failure may disqualify).
• SBD 6.1 (Preference Points Claim): claims specific goal points; must supply supporting evidence.
• POPIA consent form: authorises DHET to use bid information for procurement.
• SBD 6.2 and Annexure C: required where local production and content applies.

Disqualification risks:

• Missing, unsigned, or incomplete returnable forms.
• Quotation not dated/signed, wrong subject line, or not submitted via email.
• Submissions after the closing time.

Evaluation in three phases:

Phase 0 – Administrative compliance:

• CSD registration with proof.
• All completed and signed bidding documents (SBD 1, SBD 3.1, SBD 4, SBD 6.1, POPIA consent).
• Tax status: written confirmation that SARS may disclose tax compliance during the contract, or a tax pin/reference. CSD verification takes precedence over a hard-copy tax certificate.
• Fully detailed pricing proposal.

Phase 1 – Technical/functionality (minimum qualifying score: 70/100):

• Relevant experience of partner/Director at management level in Internal Audit QAR: 0 projects (0), 1 (5), 2-3 (20), 4-5 (25), 6+ (30). Weight: 30.
• Team members Certified Internal Audit Professionals and completed IIA quality assessment course: Yes (15), No (0). Weight: 15.
• Track record of successful and timely similar assignments with credible references: 0 (0), 1 (5), 2-3 (10), 4-5 (15), 6+ (25). Weight: 25.
• Approach and methodology covering Planning, Data Collection, Analysis and Reporting: No methodology (0); documented but not detailed (20); documented and detailed explained (30). Weight: 30.
• Total: 100. Bidders scoring less than 70 are disqualified (non-responsive).

Phase 2 – Price and Specific Goals:

• 80/20 system: 80 points for price, 20 points for specific goals (as claimed on SBD 6.1).
• Specific goal points require valid supporting evidence; failure to submit proof forfeits points for that category.

Appointment of an independent quality assurance assessor to perform an External Quality Assurance Review (EQAR) of the Directorate Internal Audit of the Department of Higher Education and Training (DHET).

Purpose and scope:

• Review compliance with the International Professional Practices Framework (IPPF): Core principles, International Standards for the Professional Practice of Internal Auditing, Code of Ethics, and the Definition of Internal Auditing.
• Evaluate the Directorate's efficiency and effectiveness in achieving its mission as set out in the Internal Audit Charter.

Context:

• The review is required under IIA Standard 1300 and Treasury Regulation 3.2.6.
• External quality assessments must be conducted at least once every five years.
• The Directorate has 7 occupied posts, is located in the Office of the Director General, and reports administratively to the Accounting Officer and functionally to the Audit Committee.

Deliverables:

• Draft report with preliminary conclusions and recommendations.
• Exit meeting with the Director: Internal Audit within two weeks of the draft report.
• Final written report to the Director: Internal Audit and Chairperson of the Audit Committee, issued one week after the exit meeting.
• Follow-up audit to verify implementation of action plans for any non-conformant or partially conformant standards; this follow-up must be included in the costing.

The review must be completed within four months of contract signature, followed by the follow-up audit.

Proposal content (mandatory elements):

• Company background and organisational structure.
• Relevant work experience with contactable references and confirmation letters.
• CVs of assigned officials.
• A costed plan and methodology with clear deliverables and reporting frequency.

Team requirements:

• At least three years of recent internal audit experience at management level.
• Team members may be subject to security vetting.
• The assessor must hold a Certified Quality Assessor qualification (or equivalent) and have a minimum of three references of practical experience in external quality assessment.

Staff availability must be guaranteed for the full engagement.

All prices must be VAT inclusive; bidders not registered for VAT must state this clearly on the quotation.

Pricing must be submitted on SBD 3.1 as a fully detailed pricing proposal with a clear breakdown.

The costing must include the follow-up audit.

Fees are capped: DHET will not pay tariffs above the published hourly rates for consultants as per the Auditor-General South Africa or the DPSA 'Guide on Hourly Fee Rates for Consultants'.

No bid security, performance bond, or retention is specified in the solicitation.

Company registration on the Central Supplier Database (CSD) is mandatory; proof of registration must be submitted. If not yet registered, complete registration before submission at https://secure.csd.gov.za/.

Tax compliance:

• Provide written confirmation that SARS may disclose tax compliance status during the contract, or provide a tax pin/reference.
• If a hard-copy tax clearance certificate is submitted, the CSD verification outcome takes precedence.

B-BBEE / Specific Goals (claimed on SBD 6.1):

• Up to 20 points for specific goals (80/20 system).
• Categories include black ownership, women ownership, disability ownership, youth ownership (35 years and younger), and SMME/EME/QSE status.
• Required evidence: CIPC shareholder registration, copies of IDs, CSD report; for disability a certified medical certificate or substantive proof; for SMME a B-BBEE certificate or sworn affidavit (EME/QSE).
• Points are only awarded where evidence is provided; invalid or missing evidence results in zero points for that category.

CIDB registration: not required for this service (only for construction/maintenance/alterations).

POPIA compliance: signed consent form required.

Declarations: SBD 4 (Declaration of Interest) – must list all related companies; false declaration disqualifies. SBD 6.2 and Annexure C if local production and content applies.

No professional registration beyond the assessor qualifications is otherwise specified.