Objectives

The primary objective of this tender is to establish a panel of qualified internal audit service providers specializing in ICT audit services for South African Tourism. The panel aims to facilitate agile, scalable, and technical assurance and advisory services aligned with the organization’s internal audit strategy, covering areas such as ICT governance, cybersecurity, business continuity, and user account management. The overarching goal is to enhance internal audit effectiveness, ensure compliance with relevant standards, and support the development and delivery of a comprehensive internal audit coverage plan.

Scope

The scope encompasses the provision of specialized ICT audit services as part of South African Tourism’s internal audit function. Specifically, the services include:

• ICT Business Continuity Management Audits
• ICT Governance Audits
• Cyber Security Audits
• ICT User Account Management Audits

The services are to be delivered through a panel of experienced providers, supporting the internal audit strategy and covering various technical assurance activities. The engagement involves consulting on scope, methodology, and approach, executing audits, communicating findings, and providing final reports, all within a fixed rate card pricing model aligned with DPSA rates.

Technical Requirements

The technical requirements for bidders include:

• Demonstrated minimum of three (3) years of relevant experience in ICT audits, supported by reference letters.
• Provision of evidence of professional memberships and certifications such as:
• ICAI / CA (SA) or equivalent for internal audit professionals.
• CISA certification for ICT forensic and cybersecurity specialists.
• Compliance with quality assurance standards, including submission of external review reports from recognized bodies like the IIA.
• Provision of a comprehensive project approach and plan detailing methodology, scope, resources, timelines, and deliverables.
• Qualified team members with appropriate academic qualifications (minimum NQF 7 or 8) and relevant experience, with proof of professional membership.
• Capability to deliver services based on a fixed rate card aligned with DPSA rates, with no retainer fees.
• Adherence to all procurement, confidentiality, and compliance requirements, including tax compliance, anti-corruption measures, and conflict of interest declarations.
• Provision of supporting documentation such as company registration, tax clearance, and proof of ownership, especially for South African entities.

Overall, bidders must demonstrate technical competence, relevant experience, compliance with standards, and the ability to deliver quality ICT audit services within the specified contractual and pricing frameworks.