Objectives

The primary objective of this tender is to appoint a qualified service provider to deliver ICT Audit Services for the 2025/2026 period. The aim is to ensure comprehensive assessment and enhancement of the municipality's ICT governance, infrastructure, security, and related controls, thereby supporting the municipality's goal of becoming a people-centred city of economic possibilities by 2047.

Scope

The scope of work includes conducting a detailed ICT Applications Control Audit covering:

• Information Technology Governance
• ICT Infrastructure Management (password policies, IT master plans, backup policies, user access management, IT security policies)
• Integration of ICT Systems
• ICT Security Management
• Cybersecurity, Data Fraud, and Data Protection
• ICT Resource Management
• Review of Disaster Recovery Plan (DRP)
• Information Technology Service and Business Continuity
• User Account Management
• Program Change Management
• Physical and Environmental Controls
• Data Migration and Protection
• ICT Contract Management

The audit will culminate in a final report and is expected to be completed within 4 weeks of contract award.

Technical Requirements

The service provider must:

• Provide a comprehensive ICT audit report based on the scope outlined.
• Ensure the audit covers all specified ICT control areas and security aspects.
• Complete the project within 4 weeks upon receipt of the order or appointment letter.
• Coordinate and manage the project under the supervision of the Manager Internal Audit and Risk Management.
• Adhere to all relevant standards and best practices for ICT auditing.

Skills Requirements

The bidder must demonstrate the following skills and qualifications:

• Proven experience in ICT audits, especially within local government or similar public sector entities (minimum 2-5 years).
• Key personnel must have:
• At least 10 years of relevant experience.
• Honours degree in Internal Auditing, B.Com Accounting, or related fields.
• Certifications such as Certified Information Systems Auditor (CISA) and Certified Internal Auditor (CIA).
• Membership of recognized professional bodies such as the Institute of Internal Auditors (IIA).
• Ability to deliver high-quality, comprehensive ICT audit reports within tight deadlines.
• Strong project management and coordination skills.
• Knowledge of ICT governance frameworks, security policies, and compliance standards.