Objectives

The primary objective of this tender is to appoint a service provider to conduct ICT audit services for the Greater Kokstad Municipality for the 2025/2026 period. The audit aims to evaluate the effectiveness, security, and governance of the municipality's ICT systems and infrastructure, ensuring compliance with relevant policies and standards.

Scope

The scope of work includes:

• ICT Applications Control Audit (Systems):
• Information technology governance
• ICT infrastructure management (password policies, IT master plan, backup policies, user access management, IT security policies)
• Integration and security of ICT systems
• Cybersecurity, data fraud, and data protection
• ICT resource management
• Review of Disaster Recovery Plan (DRP)
• Information technology service and business continuity
• User account management
• Program change management
• Physical and environmental controls
• Data migration and protection
• ICT contract management
• Delivery of a final audit report.

The audit must be completed within 4 weeks of receipt of the order or appointment letter.

Technical Requirements

The technical requirements specify that the service provider must:

• Conduct a comprehensive ICT audit covering governance, infrastructure, security, and controls.
• Provide a detailed final report based on the audit findings.
• Complete the project within 4 weeks from the date of order.
• Coordinate and manage the project under the supervision of the Manager Internal Audit and Risk Management.

Skills Requirements

The bidder must demonstrate the following skills and qualifications:

• Company experience in ICT audits, particularly within local government settings, with a minimum of 5 completed ICT audits (preferably with references and certificates).
• Key personnel, especially the team leader, must have:
• At least 10 years of relevant experience in ICT auditing.
• Honours degree in Internal Auditing, B.Com Accounting, Computer Science, or equivalent.
• Professional certifications such as Certified Information Systems Auditor (CISA) and Certified Internal Auditor (CIA).
• Membership of the Institute of Internal Auditors (IIA).
• Qualified personnel must submit detailed CVs and certified copies of their qualifications.
• The team leader should have a minimum of 10 years’ experience, with relevant academic and professional certifications.