Post-Implementation Review of Integrated Claims System NEW

The Road Accident Fund (RAF), a Schedule 3A public entity, has issued a Request for Information (RFI, reference RAF/2026/00064) to gather market input for an independent Post-Implementation Review (PIR) of its Integrated Claims Management System (ICMS), known as Project Bokamoso. The RFI does not commit the RAF to procurement. It is intended to help the RAF refine requirements, scope, methodologies, indicative timelines, level of effort and budget considerations before a future competitive tender. Respondents may also be asked to comment on risks, dependencies, assumptions and industry frameworks. The RFI states that responses must be emailed to bacsecretariat@raf.co.za, marked for the attention of Demand Management.

The RAF Internal Audit function requires an independent assessment of whether the ICMS was implemented in line with approved project requirements, whether business case benefits have been achieved, whether governance and project management were effective, and whether system controls adequately protect the confidentiality, integrity and availability of claims information. The review covers project governance, including scope, budget and timeline management and user adoption; system functionality, including user access, segregation of duties, input validation, processing and interface controls, audit trails, approval workflows, security and system stability; data migration from legacy claims systems, including completeness, accuracy and governance; project financial and budget governance against the Delegation of Authority; and benefits realisation, including post-go-live support, outstanding defects and enhancements, training effectiveness and remediation roadmaps. The service provider must follow the RAF Internal Audit Methodology and templates, comply with the International Standards for the Professional Practice of Internal Audit, and deliver outputs such as an Audit Planning Memorandum, risk and control matrices, audit programmes, working papers, meeting minutes, and draft and final reports. The provider must also provide on-the-job training to RAF staff. All working papers and records become the property of the RAF.

The RFI sets out demanding resourcing requirements. The engagement lead must hold a relevant degree and CISA certification, with at least seven years of IT audit experience, including leading post-implementation reviews. The wider multidisciplinary team should include an application controls auditor, a business and claims process specialist, a systems analyst, a data analytics specialist, a project management specialist and an infrastructure and integration specialist, each with at least three to five years of relevant experience. Experience in claims management, insurance or high-volume transactional environments is an advantage. Respondents must be registered on the National Treasury Central Supplier Database, have their tax affairs in order, and must not be listed on the Register for Tender Defaulters or the Database of Restricted Suppliers. Note: the metadata lists a closing date of 13 November 2026, while the RFI document states 13 December 2026 at 11:00. The document also states that the engagement is expected to start in January 2026 and finish by December 2026, which appears inconsistent with the 2026 publication date. Interested parties should verify these dates directly with the RAF before responding.