State Bank of India IT Audit Consultancy Tender for OCRA/OCA Implementation in India 2026
Bid Publish Date
05-Sep-2026, 11:40 am
Bid End Date
25-Sep-2026, 4:00 pm
Value
₹1
Progress
Key Highlights
- • - 25% bid quantity/duration flex allowed at contract issuance and during execution
- • - Office of Service Provider must be located in the state of the consignee with documentary proof
- • - Dedicated toll-free service number and formal Escalation Matrix required
- • - Past Experience proof may include contract copies with invoices or execution certificates
- • - Milestone/deliverable-based contracting for OCRA and OCA IT audit implementation
- • - No explicit EMD amount specified in available data; verify in bid documents
Tender Overview
- State Bank of India (SBI) seeks consultants for the implementation of Offsite Continuous Risk Assessment (OCRA) and Offsite Continuous Audit (OCA), covering Governance, Risk, and Compliance (IT Audit) with onsite deployment. The estimated value is ₹1.0 (units unspecified). The contract allows a 25% increase/decrease in scope or duration at issuance or during execution, subject to bidder consent. A service office must be located within the state of the consignee, and bidders must provide documentary evidence. The opportunity targets firms with proven IT audit and risk assessment capabilities, including post-implementation support and escalation mechanisms. Unique aspects include a milestone/deliverable-based structure and a focus on governance and compliance in IT environments.
Technical Specifications & Requirements
- Scope: Implementation of OCRA and OCA, focusing on governance, risk and compliance within an IT audit context.
- Delivery model: Milestone/deliverable-based consultancy with a potential 25% scope adjustment.
- Site requirements: Office of service provider must be in the consignee’s state; provide proof of presence.
- Support commitments: Dedicated toll-free service number and a formal escalation matrix must be provided by the bidder/OEM.
- Past experience evidence: Acceptable proofs include contract copies with invoices, execution certificates, or client release notes; multiple formats accepted.
- Documentation: Ensure upload of all requested certificates, documents, and references per terms.
Terms, Conditions & Eligibility
- EMD/financial terms: Not explicitly specified in the data; bidders should verify exact amount in the tender documents.
- Experience criteria: Demonstrated capability in IT risk assessment and governance frameworks; the buyer allows various evidence formats for past work.
- Delivery timeline: Onsite implementation with milestone-based delivery; exact schedules to be confirmed in the bid.
- Payment terms: Not specified in the available data; bidders must consult the terms for milestones and settlement timelines.
- Penalties/LDs: Not detailed here; standard procurement practice to be reviewed in the full bid package.
- Submission requirements: Upload all required certificates, OEM authorizations, and evidence of past projects; failure to provide may lead to rejection.
Key Specifications
-
OCRA and OCA implementation in IT governance context
-
Milestone/deliverable-based consultancy model
-
50-200 man-days or equivalent milestone units (as per bid details)
-
Proof of past IT risk assessment/delivery experience
-
Service office location proof in consignee state
-
Dedicated toll-free service line and escalation matrix
Terms & Conditions
-
25% scope quantity/duration adjustment allowed
-
Office must be in consignee state with proof
-
Dedicated support number and escalation matrix required
-
Past project evidence accepted in multiple formats
-
Milestone-based delivery for OCRA/OCA IT audit
-
Submit all certificates and OEM authorizations as requested
Important Clauses
Payment Terms
Not explicitly defined in available data; verify in full bid documents for milestone-based payments.
Delivery Schedule
Onsite implementation with milestone deliverables; schedule to be finalized post-award.
Penalties/Liquidated Damages
Not detailed in data; refer to contract terms in the bid package for LDs and performance bonds.
Bidder Eligibility
-
Proven IT governance, risk, and compliance audit experience
-
Demonstrated OCRA/OCA implementation capability or similar risk assessment projects
-
Presence of an office in the consignee state with verifiable address
Tender Data
Bid Details
Quantity
1
Bid Type
Single Packet Bid
Bid Validity
30 (Days)
Bid Type
Service
Evaluation
Total value wise evaluation
Tech Clarification Time
15 Days
Preference & Exemptions
EMD Required
No
MII Compliance
Yes
MSE Purchase Preference
Yes
MSE Preference Band
L1+15%
Bid Splitting Applied
No
Requirements
Experience Required
5 Year (s)
Arbitration Clause
No
Mediation Clause
No
Additional Tender Data
Commercial Details
Tender Category
Service
Bid To RA
No
Bid To RA Enabled
No
Item Category
Hiring of Consultants - Milestone/Deliverable Based - hiring of Consultant for Implementation of Offsite Continuous Risk Assessment (OCRA) and Offsite Continuous Audit (OCA); Governance, Risk and Compliance (IT Audit); No; Onsite
Payment Timelines
Payments shall be made to the Seller within 45 days of issue of service delivery acceptance certificate (SDAC) and on-line submission of bills (This is in supersession of 10 days time as provided in clause 12 of GeM GTC)
Delivery Details
Delivery Locations
1
Delivery Cities
Ranga Reddy
Delivery Pincodes
500019
Delivery Locations
| Consignee | Address | City | State | Pincode | Quantity | Delivery Days | Additional Requirement |
|---|---|---|---|---|---|---|---|
| Neetin Kumar | 500019,Opp Hyderabad Central University Neerekshan Bhavan State Bank of India Internal Audit Department Seri Lingampally Hyderabad | Ranga Reddy | Telangana | 500019 | Project / Lumpsum Based | - | - |
Authority Records
BID & GeM Expert Consultancy
End-to-end support — bid preparation, GeM registration, document filing & compliance by industry experts.
Free consultation · 24h response
Documents 5
GeM-Bidding-9850036.pdf
Main Document
Other Documents
OTHER
Other Documents
OTHER
GEM General Terms and Conditions Document
GEM_GENERAL_TERMS_AND_CONDITIONS
GEM General Terms and Conditions Document
GEM_GENERAL_TERMS_AND_CONDITIONS
Categories
22
🤖 AI-Powered Bidder Prediction
Discover companies most likely to bid on this tender
Required Documents
GST registration certificate
PAN card
Experience certificates from similar IT audit/OCRA-OCA projects
Financial statements or solvency documents
EMD/Security deposit details (as per bid terms)
Technical bid documents and bid compliance sheets
OEM authorizations or partner agreements (if applicable)
Proof of local presence in consignee state (office address) and escalation matrix
Any certificates requested in Buyer Added Terms and Conditions
Frequently Asked Questions
How to bid on SBI OCRA OCA consultancy tender in India 2026
This SBI procurement requires milestone-based IT audit consultancy for OCRA and OCA. Prepare past project evidence, proof of local presence, and complete documentation per AtC. Ensure your office in the consignee state and provide a dedicated support line; confirm the 25% scope flexibility during issuance and execution.
What documents are required for SBI OCRA OCA tender submission
Submit GST, PAN, experience certificates for IT risk assessment, financial statements, EMD details, technical bid, OEM authorizations, and proof of local service presence. Include escalation matrix and dedicated support contact. Upload all certificates requested in Buyer Added Terms and Conditions to avoid rejection.
What are the eligibility criteria for SBI IT audit consultancy
Eligibility requires demonstrated IT governance and risk/complaint audit capability, plus past OCRA/OCA-like project experience or certified equivalents. Provide contract copies, client certificates, or execution notes as proof. A state-based service office and a formal escalation matrix strengthen eligibility.
What is the delivery model for SBI OCRA OCA services
The contract adopts a milestone/deliverable-based model with potential 25% scope changes at issuance and during execution. Deliverables will align with IT governance, risk assessment, and continuous audit objectives, with onsite deployment and client acceptance at each milestone.
What are the key payment terms for SBI procurement of IT audit
Payment terms are not explicitly stated in the available data; bidders should review the full bid package. Expect milestone-based payments linked to acceptance of deliverables, with standard governance procurement terms applying and potential advance against milestones as per contract.
How to demonstrate past experience for SBI OCRA OCA tender
Provide contract copies with invoices and self-certification, client execution certificates, or third-party inspection notes. Each document should show scope, value, and delivery outcomes, clearly tying to IT risk assessment, governance, and OCRA/OCA-type engagements.
What standards or certifications are required for SBI IT audit
While exact standards aren’t listed, expect IS/ISO-compliance for IT audit and risk assessment, along with evidence of prior ISMS or ITGC testing experience. Prepare certifications and client references aligned to GRC, security controls, and continual audit practices.
Where will SBI require the service office to be located
The service office must be located within the consignee state, with documentary evidence to support the claim. This requirement ensures accessibility for onsite coordination and support throughout the contract duration.