Objectives

The primary objective of this tender is to appoint a reputable and experienced ICT Audit Consultant to conduct an ICT audit for uMzimkhulu Municipality. The audit aims to evaluate the effectiveness of ICT controls, ensure data confidentiality, integrity, availability, and reliability, and provide recommendations for improvement over a 36-month contract period.

Scope

The scope includes:

• Conducting a comprehensive ICT audit covering all relevant systems and controls within the municipality.
• Following a structured audit methodology comprising planning, testing, and reporting phases.
• Creating and maintaining an audit file with all relevant documentation from engagement to final report.
• Assessing the organisation’s IT control environment, including general and application controls.
• Providing a detailed audit report with findings, conclusions, and recommendations.

Technical Requirements

The technical requirements for the tender include:

• Registration on the Central Suppliers Database (CSD) with proof of registration.
• Submission of relevant documentation such as municipal rates and services certificates, lease agreements, affidavits, marriage certificates, and a Certificate of Authority to sign documents.
• Adherence to the 80/20 preference point system, with a minimum threshold of 40 points for functionality.
• Demonstrated relevant experience with at least 5 ICT audit projects completed in the last 5 years.
• Methodology outlining project structure, including planning, testing, and reporting phases.
• Provision of qualified key personnel, including a Project Manager with internal auditing qualifications and ICT auditors with relevant diplomas and certifications.
• Accreditation with professional bodies such as IIASA, SAICA, or SAIGA is mandatory.
• Price and specific goals (ownership and promotion of local business) will also be evaluated.

Skills Requirements

The skills and qualifications required for key personnel include:

• Project Manager: B-degree in Internal Auditing or Accounting, CIA/CISA certification, with at least 7 years of internal auditing experience. Must be registered with a recognized professional body.
• Internal Auditor (ICT): National Diploma in ICT, with 2-3 years of ICT auditing experience. Certification in accreditation by IIASA or similar bodies is required.

Additional skills include:

• Strong understanding of ICT controls, risks, and audit methodologies.
• Ability to prepare detailed reports and communicate findings effectively.
• Experience in creating and managing audit files and documentation.