Objectives

The primary objective of this tender is to appoint an ICT Audit Consultant to perform an independent, risk-based ICT audit for the Umzimkhulu Municipality. The consultant will verify compliance, assess controls, and provide recommendations to improve ICT governance, security, and operational effectiveness over a contract period of 36 months. The audit aims to ensure the confidentiality, integrity, availability, and reliability of critical ICT systems and data.

Scope

The scope of work includes:

• Verification of compliance and implementation of software systems (Munsoft, VIP, Debt Pac) and their upgrades.
• Management of third-party ICT services.
• Cyber security assessments.
• Review of payment procedures.
• Updating the ICT Risk Register.
• Performing detailed ICT audits covering control policies, procedures, and objectives.
• Testing the effectiveness of general and application controls.
• Creating audit files (physical and electronic) and transferring skills to internal staff.
• Producing audit reports with findings, root causes, impacts, and recommendations.

Technical Requirements

The technical requirements for the tender include:

• Experience in ICT audits within local government or similar sectors.
• Completion of at least five ICT audit projects in the past five years, with traceable references.
• Qualified key personnel, including a Project Manager with a B-degree in Internal Auditing or Accounting, CIA/CISA certification, and a minimum of 5 years managerial experience.
• ICT auditors with relevant diplomas, certifications, and experience in ICT auditing.
• Accreditation with professional bodies such as IIASA, SAICA, or SAIGA.
• Demonstrated understanding of ICT control environments, risk assessment, and audit methodologies.
• Adherence to the 80/20 preference point system, with a minimum threshold of 40 points for functionality.
• Provision of detailed methodology, project approach, and skills transfer plan.

Skills Requirements

The skills and qualifications required from the successful bidder include:

• Qualified project management personnel with internal auditing, accounting, and ICT certifications (CIA, CISA).
• Minimum of 5 years managerial experience in ICT internal auditing.
• Experience in ICT audits within local government or similar environments.
• Proven track record of completing ICT audit projects, with references and appointment letters.
• Accreditation with recognized professional bodies (IIASA, SAICA, SAIGA).
• Ability to develop and implement audit methodologies, perform control testing, and produce comprehensive reports.
• Skills transfer capability to internal staff and effective communication of findings.