Objectives

The primary objective of this tender is to establish a panel of qualified Internal Audit Service Providers capable of delivering specialized ICT audit services, including project management audits, to South African Tourism. The panel aims to facilitate an agile, scalable, and efficient internal audit function that supports the organization’s strategic goals, enhances governance, and ensures compliance with relevant standards and regulations.

Scope

The scope encompasses the provision of ICT audit services under Category C, which includes:

• ICT Business Continuity Management Audits
• ICT Governance Audits
• Cyber Security Audits
• ICT User Account Management Audits

The services are intended to contribute to South African Tourism’s internal audit strategic and coverage plans, supporting assurance and advisory functions. The panel will be utilized for various technical assurance services that require specialized expertise, with assignments structured as work packages based on specific scopes, objectives, and deliverables.

Technical Requirements

The technical requirements for bidders include:

• Experience & Qualifications: Minimum of three (3) years of relevant experience in ICT audits, with at least three reference letters. Directors/partners must possess a minimum qualification of NQF level 8 (e.g., CIA / CA (SA) / CISA) and demonstrate significant professional experience (minimum 9-15 years).
• Professional Membership & Certification: Valid membership with professional bodies such as SAICA or IIA, and ICT-related certifications like CISA.
• Quality Assurance & Compliance: Evidence of quality assurance reviews, compliance with relevant standards, and adherence to the Public Finance Management Act, Preferential Procurement Policy Framework Act, and Broad-Based Black Economic Empowerment (B-BBEE) regulations.
• Experience & Approach: Demonstrated ability to deliver ICT audits through a comprehensive project approach, including detailed project plans, methodologies aligned with internal audit standards, and clear timelines.
• Capacity & Resources: Adequate staffing with qualified personnel, proven track record in ICT audits, and capacity to undertake multiple concurrent engagements.
• Pricing & Rate Card: Submission of a fixed rate card aligned with DPSA rates, covering all expected deliverables, with no retainer fees.
• Compliance & Confidentiality: Commitment to confidentiality, anti-corruption measures, tax compliance, and adherence to South African laws and procurement policies.

Overall, bidders must demonstrate technical competence, relevant experience, professional integrity, and the ability to deliver high-quality ICT audit services within the stipulated contractual and regulatory frameworks.