Objectives

The primary objective of this tender is to procure and implement an off-the-shelf Governance, Risk, and Compliance (GRC) software solution for the South African Civil Aviation Authority (SACAA). The solution aims to modernize and consolidate existing internal audit and risk management processes, enhance efficiency, accuracy, transparency, and enable proactive decision-making across various functional areas such as governance, risk management, compliance, audit, quality assurance, occupational health and safety, performance monitoring, and business continuity. The contract includes support and maintenance for a period of five years.

Scope

The scope encompasses:

• Provision and implementation of a modular, off-the-shelf GRC software platform.
• Customization, configuration, and testing of the software to meet SACAA’s core business requirements.
• Migration of existing data and information into the new system.
• Training of personnel, including 'Train the Trainer' sessions.
• Support and maintenance over five years.
• Deployment of modules covering:
• Legal compliance management
• Internal audit (including data analytics)
• Risk management (full lifecycle)
• Legal compliance management (full lifecycle)
• Quality assurance
• Forensic investigations
• Occupational health and safety
• Operational performance management
• Business continuity
• Vendor resilience and resilience management
• Reporting and dashboards

Technical Requirements

The solution must:

• Be a modular, off-the-shelf platform with configurable modules.
• Support multi-level hierarchies, workflows, and role-based access control.
• Enable tracking and management of incidents, risks, compliance, audits, and investigations.
• Support full lifecycle management for legal compliance, risk, audit, OHS, and business continuity.
• Provide real-time analytics, dashboards, and customizable reports.
• Support data migration from existing systems.
• Integrate with MS Outlook and other relevant tools.
• Be scalable and adaptable to future organizational needs.
• Include support for user licenses, including admin, power users, and read-only licenses.
• Meet specified software compliance and performance standards.

Skills Requirements

The successful bidder must demonstrate:

• Experience in deploying Commercial Off-the-Shelf (COTS) GRC software solutions, with at least three reference letters from recent clients (not older than three years).
• Proven expertise in implementing modular GRC platforms covering the specified functionalities.
• Strong project management skills, with project leaders holding recognized certifications such as PMP or Prince2, and detailed CVs indicating relevant experience.
• Experience in data migration, system customization, and integration.
• Capability to support and train end-users, including 'Train the Trainer' programs.
• Ability to provide ongoing support, maintenance, and technical assistance over the contract period.
• Demonstrated understanding of legislative and regulatory frameworks relevant to SACAA’s operations, including compliance with South African laws and standards.