Terms Of Reference: Risk Assessment and Risk Report for MGCA

1. Background

The Mpumalanga Green Cluster Agency (MGCA) is a non-profit company mandated to drive the development of a sustainable and inclusive green economy in Mpumalanga. MGCA supports the implementation of the Mpumalanga Green Economy Development Plan and plays a central role in facilitating collaboration between government, industry, academia, and civil society to unlock green economic opportunities in the Mpumalanga province.

As MGCA scales its operations and deepens its programme delivery, it is essential to identify, assess, and mitigate potential risks that may affect the agency’s operational, financial, legal, reputational, and strategic objectives. A comprehensive risk assessment will strengthen the agency’s governance and support evidence-based decision-making and compliance with funder and regulatory requirements.

2. Purpose of the Assignment

The purpose of this assignment is to appoint a qualified service provider to undertake a thorough risk assessment of MGCA’s operations, programmes, and governance, and to develop a detailed Strategic Risk Register, Operational Risk Register, and a comprehensive Risk Report.

3. Objectives

• Identify internal and external risks facing MGCA.
• Assess the likelihood and potential impact of each risk.
• Develop separate prioritised strategic and operational risk registers with clear categorisation.
• Recommend practical mitigation measures and internal controls.
• Propose a monitoring and review framework to manage risks on an ongoing basis.

4. Scope of Work

The scope of the assignment shall include, but not be limited to:

• Review of MGCA’s strategic and operational documents.
• Conduct stakeholder interviews (Board, management, staff, funders, key partners).
• Identify risk exposure areas across all business functions and thematic programmes.
• Develop a comprehensive risk matrix/risk register.
• Assess existing internal controls and governance processes.
• Recommend improvements aligned with King IV principles and applicable legislation.
• Prepare and present a final Risk Assessment Report and implementation roadmap.

5. Deliverables

• Inception Report with methodology, timeline, and stakeholder engagement plan.
• Risk Identification and Assessment Matrix (draft and final).
• Comprehensive Risk Report including:
  • Risk classification and prioritisation
  • Distinct analysis and recommendations for Strategic Risks
  • Distinct analysis and recommendations for Operational Risks
  • Mitigation and response strategies
  • Recommendations for institutionalising risk management
  • Strategic Risk Register (in Excel and PDF formats).
  • Operational Risk Register (in Excel and PDF formats)
  • Presentation of findings to MGCA Executive Team and Board.

6. Duration and Timelines

The assignment is expected to take no more than 8 weeks from the date of contracting, with the following indicative timeline:

7. Expertise Required

The appointed service provider should demonstrate:

• Proven experience in enterprise risk management, internal controls, and governance in the public or non-profit sector.
• Understanding of green economy and climate-related risks.
• Experience with King IV, PFMA, and related legislative frameworks.
• Strong analytical and facilitation skills.
• Ability to work with executive and board-level stakeholders.

8. Reporting

The service provider will report to the Chief Executive Officer of MGCA or their designated representative.

9. Submission Requirements

Interested service providers must submit:

• Company profile and relevant experience.
• CVs of key personnel.
• Technical proposal outlining the approach and methodology.
• Project plan with timelines and budget.
• References from similar assignments.

7. Submission and Enquiries

All proposals and inquiries must be directed to procurement@thegca.co.za, subject: Appointment of a Service Provider to Undertake Risk Assessment and to Develop a Risk Report for the Mpumalanga Green Cluster Agency (MGCA) by 12 September 2025.