Objectives

The primary objective of this tender is to procure a comprehensive Information Technology (IT) Audit for Makhuduthamaga Local Municipality. The audit aims to evaluate the design and effectiveness of the municipality’s internal controls over IT systems, including general and application controls, to ensure data integrity, system safeguarding, and operational effectiveness aligned with organizational goals.

Scope

The scope of work encompasses:

• Assessment of IT General Controls (ITGC), including control environment, change management, source code/version control, software development standards, logical access policies, incident and problem management, technical support, hardware/software configuration, and disaster recovery procedures.
• Evaluation of application controls related to input, output, and processing.
• Cybersecurity controls review.
• Provision of recommendations to address inherent risks and enhance the control environment.

Technical Requirements

The technical requirements include:

• Conducting an IT audit focusing on general and application controls.
• Testing and evaluating the effectiveness of controls across various IT domains.
• Providing detailed findings, risk assessments, and actionable recommendations.
• Delivering a comprehensive audit report that demonstrates system safeguarding, data integrity, and operational effectiveness.
• Adherence to relevant standards such as COBIT, ISO/IEC 27001, or equivalent frameworks.

Skills Requirements

The bidder must demonstrate the following skills and qualifications:

• Project Leadership: Experience in leading IT audit projects within local government or similar sectors, with a proven track record (CV with contactable references, relevant certifications such as CISA).
• Technical Expertise: Qualifications in computer science, information technology, management information systems, or related fields.
• Company Experience: At least 10 years of experience in IT audits, with documented successful projects in local government or comparable organizations.
• Staff Competence: Skilled personnel with relevant certifications, qualifications, and experience in IT controls, cybersecurity, and audit methodologies.
• Methodological Skills: Ability to apply recognized frameworks and standards, conduct thorough testing, and produce detailed reports with actionable insights.