Objectives

The primary objective of this tender is to appoint a reputable and experienced ICT Audit Consultant for a 36-month contract to conduct comprehensive ICT audits for uMzimkhulu Municipality. The audit aims to evaluate the effectiveness of ICT controls, ensure data confidentiality, integrity, availability, and support the municipality's compliance with relevant standards and policies.

Scope

The scope of work includes:

• Conducting ICT audits across the municipality's systems and operations.
• Assessing the overall IT control environment and identifying inherent IT risks.
• Testing control policies, procedures, and objectives to verify operational effectiveness.
• Developing audit reports with findings, conclusions, and recommendations.
• Creating and maintaining an audit file documenting all project-related information from engagement to final report.

Technical Requirements

The technical requirements for the tender include:

• Proof of registration on the Central Suppliers Database (CSD).
• Submission of relevant statutory documents such as municipal rates certificates, lease agreements, affidavits, marriage certificates, and certificates of authority.
• Adherence to the 80/20 preference point system, considering functionality and local content goals.
• Minimum threshold of 40 points (53.33%) for evaluation, with specific emphasis on relevant ICT audit experience, methodology, and expertise.
• Demonstration of a clear methodology and structured approach to the audit process, including planning, testing, and reporting phases.
• Provision of qualified key personnel, including project managers and internal auditors with relevant certifications (CIA, CISA, internal audit qualifications) and experience.
• Accreditation with recognized professional bodies (IIASA, SAICA, SAIGA) is mandatory.

Skills Requirements

The skills and qualifications required for key personnel are:

• Project Manager: B-degree in Internal Auditing/Accounting, CIA/CISA certification, minimum 7 years’ experience in internal auditing, registered with a professional body (IIASA, SAICA, SAIGA).
• Internal Auditor (ICT): National Diploma in ICT, 2-3 years’ experience in ICT auditing, with accreditation from recognized professional bodies.

Additional skills include:

• Strong understanding of ICT controls, risks, and audit methodologies.
• Ability to prepare comprehensive audit reports and communicate findings effectively.
• Proficiency in project management and documentation.
• Knowledge of municipal operations and compliance standards.