The RAF wishes to appoint a service provider to perform Enterprise Risk Management Process Audit

Overview

The RAF seeks a service provider to perform an Enterprise Risk Management Process Audit. Bid by professional-services firms with Internal Audit/Risk Management expertise, able to meet mandatory personnel qualifications (Partner/Director with 10+ years in Internal Audit and experience in ERM/Risk reviews; Senior Manager with 8+ years and two ERM reviews; two Senior Auditors with 3+ years each) and to supply proof of qualifications, IIA/IRMSA/CIA credentials, CSD registration, and SARS tax compliance. The audit covers governance/framework design, risk identification/assessment, controls and monitoring, culture/tools, ERM maturity benchmarking, and compliance under King PFMA/Public Sector frameworks, with deliverables including ongoing progress reports and ownership of produced materials. Responses must meet RAF procurement rules and evaluation (80/20 price/points, with specific-goals considerations).

Requirements

• Mandatory personnel qualifications (Partner/Director, Senior Manager, two Senior Auditors) with specified years of Internal Audit and ERM experience and related certifications.
• Proof of qualifications and professional memberships (IIA South Africa or IRMSA) and CSD registration; SARS tax compliance.
• Completion of required forms and documents (e.g., pricing schedule, SBD4, SBD6.1, Annexure A Security Measures, and other Standard Bidding Documents).
• Compliance with RAF terms, confidentiality, data protection, and anti-collusion requirements; nondisclosure of bid details; no duplicate entities.
• Evaluation framework: 80/20 price vs specific goals (HDI ownership, women, disability) with supporting proofs.
• Delivery of a cost breakdown and VAT-compliant pricing; final award contingent on PO/letter.

How to Apply

• Submission deadline: 06 November 2026 at 11:00; electronic submission via email to rfq.procurement@raf.co.za; inquiries to tshilidzi Lithole (tshilidzil@raf.co.za).
• Documents to submit (as per RFQ package): completed RFQ documents and annexes, pricing schedule (Annex E), SBD4 Bid Disclosure, SBD6.1 for preference points, Annexure A Security Measures, copies of qualifications and professional memberships, CSD/tax clearances. The RFQ package includes the documents titled “RFQ Document PR10119098 for Enterprise Risk Management Audit.docx” and forms such as “SBD 6.1 IN TERMS OF PPR2022.docx” and “Standard Bidding Document (SDB) 4.doc.”
• Registrations/pre-qualifications: CSD registered suppliers; SARS tax clearance; proof of IIA/IRMSA/CIA membership.
• Briefing/site visit: N/A.
• Where to obtain bid documents: RFQ documents attached to this invitation (RFQ Document PR10119098 for Enterprise Risk Management Audit.docx); related forms available as listed (SBDs and Annexure A).