Third-Party Risk Management Solution Implementation.
Thandeka Ngozi
In plain English
Sasria SOC Limited is procuring a Third-Party Risk Management solution for a period of three years. Eligible bidders must be tax compliant and provide a valid B-BBEE certificate or sworn affidavit.
Always check the official documentDescription
Sasria SOC Limited invites proposals for the implementation and support of a Third-Party Risk Management (TPRM) solution. The project involves deploying a cloud-hosted SaaS platform to manage vendor risks, including onboarding, continuous monitoring, and reporting. The contract spans 36 months, covering initial configuration, system integration, staff training, and ongoing technical support. The work will be performed remotely or at Sasria offices as required. Key deliverables include a fully functional risk management dashboard, API integrations with existing enterprise systems, and a dedicated support service level agreement. The project aims to enhance Sasria's governance and data security over a three-year period.
What you need to qualify
- CSD registration — Registration on the Central Supplier Database — required to do business with government.
- Tax clearance — A valid SARS tax compliance status (PIN) showing your tax affairs are in order.
- B-BBEE certificate — A B-BBEE certificate or sworn affidavit confirming your contribution level.
- Other registration — An industry registration the tender requires (e.g. PSIRA, NHBRC, a professional or trade licence).
Full requirements
- Must be registered on the CSD and be tax compliant
- Must provide valid B-BBEE certificate or sworn affidavit
- Technical team must hold relevant cybersecurity certifications
- Must provide OEM authorization letter or proof of solution ownership
Contact & how to apply
Name: Thandeka Ngozi
Email: Thandekan@sasria.co.za
Phone: 011-214-0800
How to apply: Interested bidders must register and submit their proposals via the Sasria Online Tender Portal at https://procurement.sasria.co.za/ before the closing date of 11 September 2026 at 12:00 pm. No email, fax, or physical submissions will be accepted.
Related tenders
Third-Party Risk Management Solution for RAF.
The Road Accident Fund (RAF) seeks a service provider to implement and support a Third-Party Risk Management solution. The project includes designing a risk framework, providing a SaaS-based platform, and managing third-party vendor lifecycles. Deliverables include governance policies, automated risk scoring, data migration, and staff training. The contract is for three years, based at RAF offices in Centurion, requiring a team with a Project Manager, TPRM Lead, and Change Management Specialist.
Provision of GRC Software Solution and Support.
The South African Civil Aviation Authority (SACAA) seeks a service provider for an off-the-shelf Governance, Risk, and Compliance (GRC) software solution, including a five-year support and maintenance contract. The project requires a web-based, modular system for managing enterprise risk, internal audits, legal compliance, and quality assurance, with integration capabilities and data migration from the current BarnOwl system. The provider must supply 129 user licenses, conduct staff training, and have at least five years of GRC software deployment experience with three contactable references. The project team leader must have a recognized project management certification and five years of relevant experience.
Travel Management Services for Sasria SOC Limited.
Sasria SOC Limited seeks a Travel Management Company to provide comprehensive travel services for five years. Services include managing flights, accommodation, car rentals, shuttle services, visa applications, and event coordination. The provider must offer a cloud-based booking tool with mobile functionality, 24/7 support, risk management, traveller tracking, and financial reporting. The contract aims to streamline corporate travel and ensure cost-effective, policy-compliant arrangements.
Supply and Implementation of Safety Data Analytics Solution
The Railway Safety Regulator (RSR) seeks bids for the supply, configuration, and implementation of an Advanced Safety Data Analytics Solution. This involves integrating new software with the National Integrated Information Management System to enhance safety reporting, predictive analytics, and risk management. Deliverables include an analytics platform, data integration, machine learning models, user manuals, and staff training. Ongoing support and maintenance are required. Bidders must show technical expertise and provide a skilled team. Submission deadline is 10 September 2026 at 15:00.
Risk Management Workshops and Mapping Services.
CEF (SOC) Ltd seeks a service provider for risk management workshops and risk mapping services over 36 months. The project includes facilitating workshops for CEF and its subsidiaries, mapping strategic risks, developing risk registers, and drafting risk reports. The aim is to enhance Enterprise Risk Management and integrate strategic risks into corporate plans. Proposals must remain valid for 120 days.
Provision of Security Services for Sasria SOC Ltd.
Sasria SOC Ltd seeks bids for physical security services at their Illovo, Sandton office for three years. The contract includes Grade D security guards for 24-hour access control, a Grade B supervisor, and 24-hour armed response services. Deliverables include hourly patrols, monthly site visits, and detailed monthly reporting. Bidders must supply security equipment and ensure staff are trained in first aid and fire safety. A control room must respond to emergencies within 10 minutes. Closing date: 22 September 2026.