Objectives

The primary objectives of this tender are to facilitate a two-day risk management workshop, assess Iziko's current risk management maturity and risk tolerance, and develop a comprehensive risk management and assurance framework. The services aim to produce practical, governance-ready documents and tools that support strategic planning, operational decision-making, compliance, and governance oversight.

Scope

The scope of work includes:

• Conducting an independent assessment of Iziko’s risk management maturity and risk tolerance levels.
• Facilitating a two-day risk management workshop with relevant Iziko management and officials.
• Reviewing, updating, and finalising key risk management documents such as risk registers, risk appetite and tolerance statements, and governance frameworks.
• Providing technical support for reporting outcomes to governance structures like EXCO, Audit and Risk Committee, and Council.
• Delivering an improvement roadmap based on the assessment findings.

Technical Requirements

The technical requirements include:

• Preparation of a detailed project plan, including timelines, roles, and responsibilities.
• Development of workshop materials, agendas, and facilitation of the two-day risk management workshop.
• Review and update of strategic and operational risk registers aligned to Iziko’s strategic objectives.
• Assessment of risk maturity using a recognised framework, including gaps and target maturity levels.
• Development of a risk appetite and tolerance statement that is practical and aligned with Iziko’s mandate.
• Creation of a combined assurance framework and plan, including assurance matrices linked to key risks.
• Design of risk heat maps, dashboards, and reporting templates for governance reporting.
• Provision of presentation materials for reporting to senior governance structures.

Skills Requirements

The successful service provider must demonstrate:

• Extensive experience in enterprise risk management, risk governance reviews, and maturity assessments.
• Proven facilitation skills for conducting risk workshops with senior management and governance bodies.
• Strong technical expertise in developing risk frameworks, risk registers, and assurance plans.
• Ability to assess and document risk appetite and tolerance levels effectively.
• Experience in preparing governance reporting templates and dashboards.
• Qualified personnel with relevant certifications such as CA(SA), CIA, CRMA, RIMS-CRMP, IRM qualifications, or equivalent.
• Demonstrated capacity to deliver practical, governance-ready risk management documentation and tools.