ISACA KAMPALA CHAPTER - REQUEST FOR PROPOSALS (RFP) FOR EXTERNAL AUDIT SERVICES
ISSUE DATE: MARCH 30TH, 2026
PROPOSAL SUBMISSION DEADLINE: APRIL 10TH, 2026
ISACA Kampala Chapter
UICT Building, Sat-Com Block 2
Plot 19-21 Portbell Road, Nakawa
Kampala Uganda
P.O. Box 33361
Uganda
Phone: +256392893965
email: administrator@isaca.or.ug
1. Introduction
1.1 Purpose of this Request for Proposals
With this Request for Proposals (RFP), ISACA Kampala Chapter (ISACA) seeks to invite proposals from licensed qualified accounting firms to provide External Audit Services (Services). This audit is required to be conducted in accordance with the International Standards on Auditing (ISA) and International Financial Reporting Standards (IFRS) that will result in an Independent Auditor’s Report, Report on Internal Controls and Compliance, and other requests as per the scope of work. This Request for Proposals (RFP) represents ISACA’s good faith and effort to detail our specifications and requirements for the External Audit Services that will best meet ISACA’s needs.
The RFP provides vendors a means to present their qualifications and abilities for an objective review.
Any firm interested in providing the External Audit Services requested in this RFP must respond to this RFP.
1.2 Background
The ISACA Kampala Chapter is one of the chapters of ISACA (formerly the Information Systems Audit and Control Association), a global professional body established in 1969. The Kampala Chapter, the first in Uganda, was founded on 16 May 2008 and officially launched in July 2010. Its founding leadership included Mr. Steven Turyahikayo (CISA) as the first President, alongside Mr. Sam Kabayo and Mrs. Keto N. Kayemba. Since its inception, the Chapter has been led by successive presidents serving two-year terms and has grown to over 433 active members drawn from both public and private sector organizations across Uganda.
ISACA is a leading authority in information systems auditing, IT governance, risk management, and cybersecurity. For over five decades, it has supported organizations in building a skilled digital workforce by providing globally recognized frameworks, standards, certifications, and training. Notably, ISACA developed the COBIT framework for effective governance and management of enterprise IT, and offers globally respected certifications such as CISA (Certified Information Systems Auditor), CISM (Certified Information Security Manager), CRISC (Certified in Risk and Information Systems Control), CGEIT (Certified in the Governance of Enterprise IT), and CDPSE (Certified Data Privacy Solutions Engineer). Through its Cybersecurity Nexus (CSX), ISACA also strengthens cybersecurity capabilities, promotes knowledge sharing, and supports continuous professional development for individuals and organizations worldwide.
2. Selection process
2.1 Proposals must be submitted in accordance with the requirements of this RFP.
2.2 The ISACA Audit Committee will evaluate and assess the proposals in accordance with the criteria and scoring table identified in section 4 of this RFP. The selection of the successful offeror is also subject to the approval of the Board of Directors
2.3 Following the selection process, the successful offeror will be invited to enter a three-year contract for the Services with a one-time option for renewal at the end of the three-year term.
2.4 The Services will commence with auditing of the fiscal year ending December 31st, 2026 and expected to continue for the subsequent two fiscal years, for a contract of three years, with a one-time three-year renewable contract subject to the approval of the Board of Directors.
3. Scope of Services
The selected firm shall deliver an audit of ISACA’s financial statements commencing for the fiscal year ending December 31st, 2026. The selected firm will provide financial statements, the related statements of activities and cash flows, and the related notes to the financial statements, for the purpose of expressing an opinion as to whether the financial statements are presented fairly, in all material respects, in accordance with all applicable International Financial Reporting Standards and International Standards on Auditing.
3.1 The selected firm will:
· Plan an effective auditing process.
· Audit financial statements and assess accounts for accuracy and regulatory compliance.
· Inspect internal systems and controls.
· Perform audits of other non‐financial areas impacting the financial statement
· Report systematic errors or fraud indicators.
· Investigate specific issues regulatory bodies bring forward (i.e., any new applicable accounting announcements).
· Prepare audited financial statements, independent auditor’s report and management report.
4. Evaluation criteria
Proposals will be evaluated in accordance with the cost to quality criteria (40/60) as indicated in the table below.
|
Evaluation Criteria
|
Detailed Description
|
Maximum Points
|
|
Approach & Quality Assurance
|
· Demonstrated understanding of the Scope of work.
· Demonstrated experience and expertise in auditing professional and not-for-profit sectors and organizations.
· Past performance of the firm, including timely completion of projects, compliance with the scope of work performed within budgetary limitations, and user satisfaction.
· Composition of adequate personnel assigned to the performance of these services and their qualifications and experience with relevant services such as that being proposed.
· Statement summarizing the benefits to client for selecting your firm and display of added value to the audit.
· References both provided and discovered.
· Proof of compliance with Tax, NSSF payments and licensing requirements in Uganda.
|
60
|
|
Cost
|
· Provide a competitive fee quote to complete the general audit of financial statements for the first financial year and the subsequent two years.
· General overview of the schedule and timing of billings for each fiscal year audit services.
|
40
|
|
Total Points
|
|
100
|
5. Deliverables
5.1 Statutory Audit Report and Comprehensive Financial Reports
5.2 Management Letter including.
· Comments and observations on the accounting records, procedures, systems, and controls that were examined during the audit.
· Identification of specific deficiencies and areas of weakness in systems and controls with recommendations for improvement
· Implementation status of recommendations from previous period audit reports
· Potential matters that might have a significant impact on the sustainability of the organization
6. Notification of award
A written notice to the successful offeror will be the only valid form of notification of award.
7. Organization of Proposal (in the following order)
7.1 Title Page and/or Letter from Respondent
7.2 Firm’s Qualifications,
7.3 Staff Qualifications
7.4 Scope of Work
7.5 Cost of services
7.6 Previous Experience Examples
7.7 References
7.8 Certifications and licenses (including Valid TCC, Certificate of Registration, CPA License, NSSF certificate)
Failure to include all the documents may render the proposal non‐responsive and the offer may be rejected.
7.1 Title Page and/or Cover Letter (Maximum of 2 pages if including both)
At a minimum, the title page shall be on company letterhead and shall include the name and working address of the firm submitting the proposal, the name and telephone number of the primary company representative to be contacted with reference to the proposal, email address for said contact and the date of submission. In addition, the page should contain the following statement: “RFP – External Audit Services for ISACA Kampala Chapter”.
7.2 Firm’s Qualifications (Maximum of 2 pages)
Describe your organization and organizational structure. Specify the number of years the firm has been in business, history of the firm, and capabilities. Please note experience and knowledge performing audits for other organizations like ISACA (professional, non‐profit organizations). Demonstrate capacity in building objective, independent and transparent working relationships with clients. Provide examples of how the firm accomplished high quality projects with challenging schedules.
7.3 Staff Qualifications (Maximum of 2 pages)
a. Designate who will be the primary liaison with ISACA including name, contact information and position with the firm.
b. Include a description of the qualifications and experience of the lead auditor and any other staff on the team. Information shall include position with the firm, educational background, certifications, and work experience.
c. The auditors should clearly demonstrate experience comparable to that required to successfully execute the work described in this RFP.
d. Describe the availability and size of partners and other staff for inquiries and meetings to meet ISACA’s needs including availability and involvement of experts on specific subject matters.
e. Describe your firm’s staff continuity, i.e., staff turnover.
f. Include resumes as an attachment.
7.4 Scope of Work (Maximum of 3 pages)
Include a scope of work and work plan which addresses these elements, but not limited to:
a. Description of the methodology to be used by the auditor.
b. Areas that will receive primary emphasis and the audit approach in those areas.
c. Comprehensive work plan to ensure adequate coverage.
d. Innovative ideas such as use of technology, etc.
e. Include a timeline for your planning activities and scope of services.
7.5 Cost of Services
a. Provide a competitive fee quote to complete the general audit of financial statements for the first financial year and the subsequent two years.
b. General overview of the schedule and timing of billings for each fiscal year audit services
7.6 Previous Experience Examples (Maximum of 2 pages)
a. Describe experience the respondent has in providing similar audit services that also demonstrates respondent’s knowledge of similar services. Experience should contain information that describes the experience respondent has working with professional entities and not-for-profit sectors and organizations. Information should include the range of experience, areas of particular expertise, and relevance of types of audits performed.
b. Also describe how the audit process and outcomes were perceived from clients to the best of your knowledge.
c. Proposal should contain information on respondent’s ability to successfully complete the audit services (per the scope of work) on time and within budget.
7.7 References
a. Provide information about the organizations for which you have provided similar services.
b. Provide contact name, title, company, address, phone number and email address for three (3) references with whom the firm has done business with in the last three (3) years.
c. References will be questioned about such items as the firm’s overall performance, organization, cooperation, timeliness, and quality. The firm shall ensure that contact information is current.
7.8 Certifications and Licenses
a. Attach all relevant certifications and licenses
b. Attach up to date TCC and NSSF Certificate
8. Preparation and Submission of Proposals
8.1 Cost of preparation
ISACA will not refund any respondent’s costs associated with the preparation and submission, and presentation response to this RFP.
8.2 Submission instructions
All proposals are considered final after the date and time of receipt. Submitted proposals may not be recalled by the respondent for alteration.
ISACA reserves the right to contact any and/or all firms to verify the information included in their proposals and to clarify on any questions regarding the information submitted in the proposal, in order to ascertain whether the proposal received is both responsive and responsible. ISACA also reserves the right to waive any formalities, informalities and technicalities in evaluation and analysis of the proposals as are deemed appropriate, necessary and in ISACA’s best interest.
Proposals should be valid for at least 60 days from date of close of submission.
Proposals submitted shall be received by The Chairman Audit Committee, ISACA Kampala, electronic submissions only in a PDF file format to administrator@isaca.or.ug with a carbon copy to kakembopaul@gmail.com by April 10th, 2026, 5:30PM EAT. Compressed or zip files are allowed. No hard copies and late submissions will be accepted.
Any questions and inquiries about this RFP may be sent to The Chairman Audit Committee, ISACA Kampala on e-mail only until April 10th, 2026.