# FOR THE PROVISION AND IMPLEMENTATION OF AN OFF-THE-SHELF GOVERNANCE RISK AND COMPLIANCE (GRC) SOFTWARE SOLUTION INCLUDING SUPPORT AND MAINTENANCE FOR A PERIOD OF FIVE (5) YEARS.

> This tender closed on 2026-09-11.

- **Reference:** SACAA/GRC/00011/2026 - 2027
- **Issuer:** [South African Civil Aviation Authority](https://za.bidwunder.com/tenders/issuer/south-african-civil-aviation-authority.md)
- **Region:** Gauteng
- **Type:** Open tender
- **Published:** 2026-08-18
- **Closing date:** 2026-09-11 13:00 SAST

## Summary

#### Overview
**Provision and implementation of an off-the-shelf GRC software solution including support and maintenance for five years.** SACAA invites qualified software service providers with GRC/COTS deployment experience to bid, with modular pricing and the ability to migrate data from BarnOwl, integrate with Active Directory/Windows SQL, and deliver 129 full licenses plus 50 roaming licenses across multiple GRC modules (BCM, ERM, Legal Compliance, Internal Audit, QA, OHS, Forensics, Incident Logs, etc.).

#### Requirements
- Off-the-shelf, modular GRC platform covering lifecycle modules (Combined Assurance, Risk Management, Legal Compliance, Internal Audit, Quality Assurance, Forensic Investigations, OHS, OPM, BCM) and data migration from BarnOwl.
- Licenses: 129 full access + 50 roaming (Read & View) licenses; role-based access; web-based with reporting and analytics.
- Technical: AD/HC integration; SQL SQL Server on Windows; migration of existing information; training and knowledge transfer; 5-year maintenance and support (as-needed, hourly rates).
- Compliance/administrative: CSD registration; SARS Tax PIN/TCS; SBD 1/3/4/6.1; B-BBEE compliance; OEM/reseller status; no late submissions; potential JV/empowerment considerations.
- Qualifications: Project Lead with PM certification (PMP/Prince2 or equivalent); minimum three dated reference letters; minimum five years’ GRC deployment experience.

#### How to Apply
- Submission deadline: 11 September 2026 at 11:00. (Tender documents specify 3-envelope submission; one original and one copy; sealed in BID Box 1 at SACAA Byls Bridge Office Park, Centurion.)
- Submission method: Physical bid delivery in three envelopes; no electronic submissions accepted.
- Documents to submit (Phase 1 mandatory and Phase 2 technical): SBD 1, SBD 3, SBD 4, SBD 6.1; CSD proof; OEM/reseller letter; PM Certification for project lead; CVs; at least three reference letters; project plan.
- Pre-qualifications: Central Supplier Database (CSD) registration; SARS Tax PIN/TCS; compliance with PFMA/PPPFA; B-BBEE status verification.
- Briefing: No briefing session; questions due by 28 August 2026 via tenders@caa.co.za.
- Where to obtain documents: Tender documents (GRC Software August 2026) via SACAA’s procurement portal (see attached document for details). Access to the office park requires prior access code arrangements with Betty Monyeki or Cynthia Motaung (082 885 4270 / 083 461 6534). (Tender Document - GRC Software - August 2026.pdf)

## Description

FOR THE PROVISION AND IMPLEMENTATION OF AN OFF-THE-SHELF GOVERNANCE RISK AND COMPLIANCE (GRC) SOFTWARE SOLUTION INCLUDING SUPPORT AND MAINTENANCE FOR A PERIOD OF FIVE (5) YEARS.

FOR THE PROVISION AND IMPLEMENTATION OF AN OFF-THE-SHELF GOVERNANCE RISK AND COMPLIANCE (GRC) SOFTWARE SOLUTION INCLUDING SUPPORT AND MAINTENANCE FOR A PERIOD OF FIVE (5) YEARS.

Conditions: BIDDERS ARE REQUIRED TO SUBMIT THEIR BIDS ON TIME TO AVOID BEING LATE. OUR NEW OFFICE PARK HAS STRIGENT SECURITY MEASURES THEREFORE EACH BIDDER WILL BE REQUIRED TO MAKE A PRIOR ACCESS CODE ARRANGEMENT WITH BETTY MONYEKI ON 082 885 4270 OR CYNTHIA MOTAUNG ON 083 461 6534.

## Documents

- Tender Document - GRC Software - August 2026.pdf..pdf

Documents download with a free BidWunder account.

## Published on

- [eTenders.gov.za](https://www.etenders.gov.za)

More open tenders: https://za.bidwunder.com/tenders.md

---

> Source: https://za.bidwunder.com/tenders/for-the-provision-and-implementation-of-an-off-the-shelf-governance-risk-and-com-8b069f98