Objectives

The primary objective of this tender is to appoint a qualified service provider to develop an Enterprise Risk Management (ERM) System for the City of Tshwane. The system aims to automate and enhance risk management processes across all organizational levels, providing comprehensive risk registers, assessment tools, incident reporting, and monitoring functionalities aligned with the City's Risk Management Framework. The goal is to improve governance, risk oversight, and proactive risk mitigation within the municipality.

Scope

The scope of the project includes:

• Design, development, and implementation of a comprehensive ERM system that supports risk registers at all levels, Key Risk Indicators, Risk Appetite, and Thresholds.
• Functionality for Control Self-Assessments, surveys, anonymous voting, incident reporting, and escalation functions.
• Features to display transversal risks, risk ratings, historic data, and system-wide risk views at strategic and operational levels.
• Integration capabilities with existing risk registers (e.g., Excel imports) and linking risks to objectives such as the SDBIP.
• Provision of dashboards for risk monitoring, combined assurance, and risk library management.
• Support for various assessment methods, including surveys and workshops, with offline and online capabilities.
• Support and maintenance services post-implementation.

Technical Requirements

The technical specifications for the ERM system include:

• Development of a flexible, configurable risk register system with risk categorization and escalation functions.
• Ability to display inherent and residual risk ratings with color indicators and thresholds.
• Historical data display and trend analysis features.
• Risk assessment tools supporting surveys, workshops, and other evaluation methods.
• Controls capture at all levels, linked to risks and contributing factors, with rating capabilities.
• Proactive monitoring features such as automated reminders, status tracking, and progress updates.
• Risk library management with actions, risks, and automatic feed into assurance processes.
• Linkage of risks to organizational objectives and import/export capabilities for existing risk data.
• Dashboards for risk monitoring by executive management and risk oversight functions.
• Compatibility with the City’s Risk Management Framework and strategies.

Skills Requirements

The successful service provider must demonstrate:

• Expertise in enterprise risk management system development and implementation.
• Experience with designing configurable risk registers, dashboards, and reporting tools.
• Technical proficiency in system integration, data import/export, and customization to align with municipal frameworks.
• Ability to provide offline and online system functionalities supporting surveys, assessments, and incident reporting.
• Proven track record in delivering similar enterprise-wide risk management solutions within government or large organizations.
• Capacity to provide ongoing support, training, and maintenance post-deployment.