Panel of service providers for internal audit services – 36 months

Closing date: 24 November 2026 at 11:00 SAST

No briefing or site visit is stated in the document.

Bidding procedure enquiries:

• Contact: SCM Contact Person
• Email: [email protected]
• Telephone: 012 947 2800

Technical enquiries:

• Contact: SCM Contact Person
• Email: [email protected]
• Telephone: 012 947 2741

Submission address: NMISA, CSIR Campus, Building 5, Brummeria, 0182

Submission method: email, hand delivery, or courier. Original proposals only.

• Email: [email protected]
• Hand delivery / courier: NMISA, CSIR Campus, Building 5, Brummeria, 0182
• Closing time: 11:00 SAST on 24 November 2026. Late bids not considered.
• Bids must be on official forms (not retyped) and must be complete.

Returnable forms (all to be completed, signed, and submitted):

• SBD 1 (Invitation to Bid) Part A and B: bidder details and acceptance of terms.
• SBD 4 (Bidder's Disclosure): discloses any state employment, relationships with the institution, or interests in related enterprises; a false declaration disqualifies the bid.
• SBD 6.1 (Preference Points Claim): claims preference points for specific goals; supporting documents required for each claim.
• SBD 7 (Contract Form): successful bidder must complete and sign the written contract.
• Proof of authority to sign, e.g. company resolution.
• Last page: declare that the bidder has read and understood the full document.

Disqualification risks:

• Late or incomplete submissions.
• Failure to provide any required particulars or comply with terms.
• Any false declaration in SBD 4.

Evaluation applies the 80/20 preference point system (for contracts valued up to R50 million including VAT).

• Price: maximum 80 points.
• Specific goals: maximum 20 points.

Specific goals and evidence with points:

• Procurement from black women owned entities (at least 30% ownership): 5 points. Proof: company document from CIPC and a valid B-BBEE certificate or sworn affidavit.
• Procurement from black owned entities (at least 51% ownership): 8 points. Proof: valid B-BBEE certificate or sworn affidavit.
• Procurement from youth owned entities (at least 51% owned by youth): 5 points. Proof: company document from CIPC.
• Procurement from entities owned by persons with disabilities (at least 51% owned by persons with disabilities): 2 points. Proof: letter from a medical doctor confirming disability, not older than six months.

Total specific goals points: 20.

Points for price are calculated using the prescribed 80/20 formula: Ps = 80 (1 - (Pt - Pmin)/Pmin).

Bidders must indicate on the form how they claim each specific goal and submit supporting documentation; failure to do so means those points are not claimed.

NMISA, a Type 3A public entity, requires a panel of experienced service providers for internal audit services.

Scope of services (on a rotational and as-needed basis):

• ICT audits
• Fraud and forensic investigations
• Quality Assurance and Improvement Program (QAIP) review (review of the internal audit function in terms of the IIA and periodic self-assessment)
• Any ad-hoc work NMISA deems suitable

Required expertise and skills:

• Practical and technical expertise in the Global Internal Audit Standards (GIAS).
• Planning audit engagements: notification and engagement letters, team briefings, opening meetings, resource allocation plans, pre-surveys, declarations of interest, system descriptions, process flow diagrams, walkthroughs, risk and control matrices, and audit programmes.
• Executing audits: working papers, supporting appendices, closing meeting minutes, and a comprehensive Portfolio of Evidence (POE).
• Reporting: draft and final internal audit reports with findings, recommendations, management responses, agreed action plans, and client satisfaction surveys.
• Present reports to Management, EXCO, and the Audit and Risk Committee (ARC) as required.
• Provide a signed Quality Assurance Report or confirmation by the Project Lead, Director, or Partner, with a quality assurance checklist for each engagement.
• Prepare or assist with ARC meeting reports and presentations.
• Attend strategic workshops, ARC meetings, and other governance forums as required.
• Conduct follow-up reviews on management action plans.
• Submit a complete, quality-assured audit file to NMISA within two weeks of issuing the final audit report. All audit documentation remains NMISA property.

Conflict of interest: service providers must declare any possible conflict of interest.

Commitment period: appointment for three years (36 months), commencing per an SLA. Work performed as and when required in line with a three-year rolling and annual operational audit plan.

Bid validity: proposals must be valid for 90 days from closing date.

The service provider must demonstrate practical and technical expertise in:

• Application of the Global Internal Audit Standards (GIAS).
• Planning, execution, and reporting of audit engagements.
• Presenting to management, EXCO, and the Audit and Risk Committee.
• The scope is for an experienced internal audit services provider; specific years of experience are not stated.

Scope includes Quality Assurance and Improvement Program (QAIP) review.

• Service provider must provide a signed Quality Assurance Report or confirmation by the Project Lead, Director, or Partner, with a quality assurance checklist for each audit engagement.
• All audit documentation, working papers, and deliverables remain NMISA property.
• Audit files must be submitted within two weeks of the final report.

Tax compliance:

• Must be tax compliant and submit a SARS TCS PIN; or a printed TCS certificate; or a CSD number if registered on the Central Supplier Database.
• No award to a bidder whose tax matters are not in order.

State employment disqualification:

• No bids from persons in the service of the state, companies with directors who are in the service of the state, or close corporations with members who are in the service of the state.

B-bbee:

• To claim preference points, bidder must submit a B-BBEE status level verification certificate, or a sworn affidavit for EMEs and QSEs.
• Specific goal claims require supporting documents as listed in the evaluation criteria.

Foreign suppliers:

• Must complete the questionnaire to determine if they are resident in the RSA, have a branch, permanent establishment, source of income, or tax liability in the RSA.
• If not liable for RSA taxation, registration for a TCS PIN is not required.

Register for Tender Defaulters / Restricted Suppliers: automatic disqualification if listed.

The contract is governed by the General Conditions of Contract (GCC) and any Special Conditions. Key GCC provisions:

• Performance security: the successful bidder must provide a performance security within 30 days of award, in a form acceptable to the purchaser, for the amount specified in the SCC.
• Warranty: goods/services must be new and defect-free for 12 months after delivery or 18 months from shipment, whichever is earlier, unless otherwise specified.
• Payment: payments within 30 days after invoice submission, in Rand unless specified.
• Prices: firm, no variation except authorised in SCC or contract amendments.
• Delays and penalties: penalties per GCC clause 22 (calculated at the current prime interest rate per day of delay) unless force majeure.
• Termination for default: purchaser may terminate for breach, non-performance, corrupt or fraudulent practices.
• Restriction: supplier may be prohibited from public sector business for up to 10 years for default or fraudulent practice.
• Disputes: amicable resolution, then mediation, then South African courts.
• Prohibition of restrictive practices: collusive bidding is prohibited; may be referred to the Competition Commission.

The evaluation uses the 80/20 system: price is worth 80 points, specific goals 20 points. Points for price are calculated using the formula Ps = 80(1 - (Pt - Pmin)/Pmin). Specific goals are as detailed in the main evaluation criteria. No other functionality or technical scoring is stated beyond the specific goals.