The appointment of a servivce provider to provide internal audit services to the community schemes ombud service (csos) for a period of three (3) years.

Closing date: 08 September 2026 at 12:00 PM. Publication date: 14 August 2026. No briefing session or site visit is stated.

Bidding procedure enquiries: Ntokozo Hlangwane, (010) 593 0533, [email protected]. Technical enquiries: Comfort D. Nabane, (010) 593 0533, [email protected]. Submission address: Community Schemes Ombud Service, Ground Floor, Die Anker Building, 1279 Mike Crawford Road, Centurion, 0157.

Bids must be delivered to the CSOS bid box at the Community Schemes Ombud Service, Ground Floor, Die Anker Building, 1279 Mike Crawford Road, Centurion, 0157, before the closing time. Late bids will not be accepted. Bids must be submitted on the official forms provided and not re-typed. The bid remains binding and irrevocable for 120 days from submission. Bidders must not be involved in more than one bid for this RFP; material changes in control or composition after submission must be reported in writing to the CSOS SCM section. The CSOS may require a formal presentation at its discretion, at the bidder's expense. Returnable documents: SBD 1 (Invitation to Bid), SBD 3.3 (Pricing Schedule for professional services), SBD 4 (Declaration of Interest), SBD 6.1 (Preference Points Claim), proof of professional registration (SAICA, IIASA or IRBA), valid B-BBEE certificate or sworn affidavit, CSD report or number, and valid tax pin/letter. Proof of authority to sign (e.g., company resolution) must accompany the bid. Failure to provide or comply with any required particulars may render the bid invalid.

Bidders must comply with the following compliance requirements: valid B-BBEE certificate (SANAS accredited or sworn affidavit for EME or CIPC certificate), proof of CSD registration (detailed CSD report or CSD number), valid tax pin/letter, and fully completed SBD documents (SBD 1, 3.3, 4 & 6.1).

Evaluation uses the 80/20 preference point system. Stage 1: Mandatory compliance — bidders must provide proof of professional registration or a letter of good standing for at least one director or the company with SAICA, IIASA or IRBA; membership must remain valid for the contract duration. Failure disqualifies the bid. Stage 2: Functionality (minimum qualifying score of 70 points out of 100) — Company Experience (20 points): 4 to 8+ years of public sector internal audit experience scores 1 to 5 points; less than 4 years scores 0. References (20 points): 1 to 5+ reference letters or bidder assessment forms on client letterhead, signed and dated, detailing public sector internal audit work; non-public sector experience is not considered. Methodology (30 points): proposed approach must address activities in sections 5.1 to 5.15 of the scope of work; scoring from 0 to 5 points based on coverage. Experience of Team Leader/Director/Engagement Partner (10 points): CV must show public sector internal audit experience and be accompanied by an Honours/BTech in Accounting/Auditing, CA and CIA designations; 5 to 11+ years of experience scores 1 to 5 points. Experience of Project Team (10 points): CVs of five team members, each with 3+ years of public sector internal audit experience; 1 to 5 qualifying CVs score 1 to 5 points. Experience and Qualifications of IT Auditor (10 points): CV, Diploma/Degree in Information Systems/Computer Science or Accounting/Finance, and CISA certification; less than 1 year to 7+ years of IT audit public sector experience scores 1 to 5 points. Only one CV per role must be attached; more than one results in 0 points for that criterion. Stage 3: 80/20 preference points for price and B-BBEE. Bidders may be invited for presentations or interviews.

Scope of work: The successful bidder will support the CSOS internal audit unit under a co-sourced model. Duties include: reviewing and improving internal auditing methodology, approach, working papers and reporting templates; assisting with execution of the internal audit plan in line with IIA Standards; conducting follow-up audits on agreed action plans; performing quality assurance reviews; reporting progress to the Senior Manager: Internal Audit and/or Chief Audit Executive; performing financial audit assignments; conducting ad-hoc specialised audits (fraud investigations, IT research, process improvement) and advisory engagements; performing IT audits; reviewing Annual Financial Statements before submission to the Auditor-General; assisting in compiling the CSOS audit file for AGSA; advising management on AGSA audit queries; quarterly reporting to the Audit and Risk Committee on internal control, risk management and governance; contributing to a rolling three-year risk-based internal audit plan; writing and presenting audit reports; and preparing reports to the ARC. Work must comply with the National Treasury Internal Audit Framework and the Standards for Professional Practice of Internal Auditing. Each audit assignment must include: preliminary survey, audit planning memorandum, minutes of entrance meeting, risk assessment, control adequacy assessment, system descriptions, audit programmes, record of work performed, audit findings and recommendations, sampling methodology, follow-up mechanisms, working paper review, draft and final reports, and follow-up of previous findings. Reports must follow a set structure: introduction, audit objective and scope, background, executive summary, risk management status, compliance level, findings with management response and action plan, and conclusion. All audits must be conducted according to the approved Internal Audit Plan and methodology. Fraud and irregularities must be reported immediately to the CAE, CO and/or ARC, without disclosure to other staff. The bidder must demonstrate understanding of applicable standards and professional requirements.

The bidder must provide an internal audit approach and methodology detailing tasks and activities in line with sections 5.1 to 5.15 of the scope of work. The approach should bring a systematic and disciplined method to evaluating and improving risk management, internal control and governance processes. The methodology is scored out of 30 points in functionality evaluation.

Company experience: minimum 4 years of public sector internal audit experience required to score points; 8+ years scores maximum. References: 1 to 5+ reference letters or bidder assessment forms from public sector clients, on letterhead, signed and dated. Team Leader/Director/Engagement Partner: CV must show public sector internal audit experience and include Honours/BTech in Accounting/Auditing, CA and CIA designations; 5 to 11+ years of experience scores points. Project team: CVs of five team members, each with 3+ years of public sector internal audit experience. IT Auditor: CV, Diploma/Degree in Information Systems/Computer Science or Accounting/Finance, and CISA certification; 1 to 7+ years of IT audit public sector experience scores points. Only one CV per role must be attached; more than one results in 0 points for that criterion.

All work must conform to the Standards for the Professional Practice of Internal Auditing (Institute of Internal Auditors). Work may be subjected to external quality assurance reviews.

CSD registration is compulsory and must be maintained for the contract duration; a detailed CSD report or CSD number must be submitted. Bidders must be tax compliant at submission and for the contract duration, and provide a valid SARS tax pin or printed TCS certificate; each party in a consortium/JV/sub-contracting arrangement must submit a separate TCS certificate or CSD number. B-BBEE: a valid certificate from a SANAS-accredited verification agency, a sworn affidavit for EME/QSE attested by a Commissioner of Oaths, or a CIPC-issued certificate is required; a detailed CSD report reflecting EME or QSE with 51% or more black ownership is needed to qualify for preference points for specific goals. Mandatory professional registration: proof of registration or letter of good standing for at least one director or the company with SAICA, IIASA or IRBA, valid for the contract duration. Bids from persons in the service of the state, or companies with directors who are, will not be considered. Returnable forms: SBD 1 (Invitation to Bid), SBD 3.3 (Pricing Schedule), SBD 4 (Declaration of Interest), SBD 6.1 (Preference Points Claim).

The bid constitutes a binding offer for 120 days from submission. No contract is formed until a written contract is signed. The CSOS may amend, withdraw or terminate the RFP at any time without liability. Amendments will be communicated in writing; oral amendments are not considered. The CSOS may conduct site inspections or request supporting documentation to verify bid information. Bidders bear all costs of preparing and submitting bids. The CSOS may accept or reject any bid in whole or part and annul the process at any time before award. The successful bidder must sign a written contract form (SBD 7). The contract runs for three years from the date of signing; the annual audit plan runs for a full financial year regardless of award date.

The successful bidder's staff must maintain objectivity and independence from the activities they audit and must not be involved in the day-to-day operations of CSOS. Reports must be distributed to relevant Executives through the office of the CAE, with follow-up to ensure implementation of recommendations.

Mandatory requirement: proof of professional registration or letter of good standing for at least one director or the company with SAICA, IIASA or IRBA, valid for the contract duration. Failure to comply results in disqualification and no further evaluation of functionality.

Evaluation uses the 80/20 preference method. Stage 1: mandatory compliance (professional registration with SAICA, IIASA or IRBA). Stage 2: functionality with a minimum qualifying score of 70 points out of 100. Stage 3: 80/20 preference points. Bidders may be invited for presentations or interviews. Evaluation criteria include compliance with the RFP, demonstrated ability, qualifications and experience of staff, and reference checks.