Provision of GRC Software Solution and Support.
Ntombizodwa Duma
In plain English
The South African Civil Aviation Authority is procuring an off-the-shelf Governance Risk and Compliance (GRC) software solution with support and maintenance for five years. Bidders must ensure compliance with tax obligations and submit a B-BBEE status level verification certificate or sworn affidavit.
Always check the official documentDescription
The South African Civil Aviation Authority (SACAA) is seeking a service provider to supply and implement an off-the-shelf Governance, Risk, and Compliance (GRC) software solution. The project, based in Centurion, includes a five-year support and maintenance contract. Key deliverables involve a web-based, modular system capable of managing enterprise risk, internal audits, legal compliance, and quality assurance. The solution must integrate with existing databases and allow for data migration from the current BarnOwl system. The provider must also supply 129 user licenses and conduct comprehensive staff training. Bidders are required to demonstrate at least five years of experience in GRC software deployment and provide three contactable references. The project team leader must hold a recognized project management certification and possess five years of relevant implementation experience.
What you need to qualify
- CSD registration — Registration on the Central Supplier Database — required to do business with government.
- Tax clearance — A valid SARS tax compliance status (PIN) showing your tax affairs are in order.
- Other registration — An industry registration the tender requires (e.g. PSIRA, NHBRC, a professional or trade licence).
Full requirements
- Registered on National Treasury Central Supplier Database (CSD)
- Valid SARS Tax Compliance Status (TCS) PIN
- Valid OEM or reseller partnership agreement
- Certified Project Management qualification (PMP, Prince2, or equivalent)
- Minimum 5 years experience in deploying proposed software
- Three client reference letters not older than 3 years
- Minimum 65/100 technical score and 30/50 system demonstration score
Contact & how to apply
Name: Ntombizodwa Duma
Email: tenders@caa.co.za
Phone: 011-545-1262
How to apply: Submit your bid using a three-envelope system. Deliver the documents to the bid box marked 1 at the SACAA head office, Byls Bridge Office Park, Centurion, by 11:00 on 11 September 2026. Ensure you arrange for a security access code via WhatsApp before arrival.
Related tenders
Third-Party Risk Management Solution Implementation.
Sasria SOC Limited seeks proposals for implementing and supporting a Third-Party Risk Management solution over three years. The project includes deploying a cloud-hosted SaaS platform for vendor risk management, covering onboarding, monitoring, and reporting. It involves initial configuration, system integration, staff training, and ongoing technical support. Deliverables include a risk management dashboard, API integrations, and a support service level agreement, aiming to enhance governance and data security.
Travel Management Services for SACAA.
The South African Civil Aviation Authority (SACAA) seeks a service provider for travel management services over three years. The provider will manage domestic and international travel, accommodation, car hire, and conference bookings. Key requirements include a dedicated on-site consultant, 24/7 emergency support, and compliance with National Treasury cost rules. Integration with SACAA's SharePoint and monthly reports are necessary. The project involves approximately 9,030 transactions annually.
Provision of software development services.
The Border Management Authority seeks a service provider to supply a software development team for three years. The work includes web, mobile, and enterprise system development, database management, cloud solutions, AI integration, and cybersecurity. Responsibilities include testing, quality assurance, system maintenance, and staff training. Deliverables are functional software, source code, technical documentation, and project reports. The team must include a Project Manager, Senior Developer, and Database Administrator meeting specific qualifications and experience standards. Work will be on an as-needed basis.
Verification of qualifications and background checks for SACAA.
The South African Civil Aviation Authority (SACAA) seeks a service provider for qualification verification and background screening services over three years. Tasks include credit, criminal, driver license, identity, and educational checks, both locally and internationally, along with social media and fingerprint screening. Reports are due within 5-10 days for local and 4-6 weeks for international checks, based at SACAA offices in Centurion.
Procurement of Password Management Solution.
The Road Accident Fund (RAF) seeks a service provider to supply, implement, and maintain an enterprise Password Management Solution for five years at RAF offices in Centurion. The solution should be a SaaS model supporting at least 3,600 users across platforms like Windows, Linux, and mobile devices. Key deliverables include secure password generation and storage, integration with Microsoft Entra ID, and ongoing professional support services. The system must provide auditing, reporting, and integration with security information systems.
Supply and Support of Enterprise Architecture Tool.
The Trans Caledon Tunnel Authority (TCTA) seeks a service provider for the supply, implementation, and support of an Enterprise Architecture tool in Centurion over 60 months. The provider must deliver a centralized repository for business processes, application portfolios, and technology lifecycle management. Key deliverables include software installation, five core user licenses, staff training, and technical support. The tool should have AI-assisted modeling, automated reporting, and security features like Active Directory and multi-factor authentication. Bidders must provide a fixed-price proposal covering all costs for five years.