Objectives

The primary objective of this tender is to appoint a panel of up to five qualified and experienced service providers to deliver co-sourced internal audit services to TCTA over a period of 36 months. The services aim to support TCTA's internal audit function by providing independent, objective assurance and advisory services across various audit categories, including financial, IT, probity, forensic investigations, and related advisory work.

Scope

The scope encompasses the provision of comprehensive internal audit services, including:

• Preparation and implementation of a 3-year strategic rolling audit plan and annual audit plans based on risk assessments.
• Execution of audits such as operational, financial, compliance, performance, and advisory reviews.
• Specialist and technical audits, particularly for infrastructure projects involving construction, engineering, and technical skills.
• ICT audits including governance, cybersecurity, controls, vendor management, and data analytics.
• Probity audits for procurement processes and high-value projects.
• Forensic investigations, digital forensics, and fraud-related inquiries.
• Ad-hoc assurance reviews and value-added advisory services.
• Collaboration with TCTA staff and other assurance providers, including the Office of the Auditor General.

The services will be delivered on a rotational basis, with all panel members invited to quote for complex or variable services requiring specialist skills.

Technical Requirements

The technical requirements include:

• Development of strategic and annual internal audit plans aligned with TCTA’s risk management framework.
• Implementation of audit plans, including audits of operations, projects, and compliance with relevant standards.
• Provision of specialist resources and expertise in areas such as IT governance, cybersecurity, forensic investigations, and data analytics.
• Use of computer-assisted audit techniques (CAATs) and data analytics tools for continuous auditing and monitoring.
• Conducting probity audits at various stages of procurement processes.
• Performing forensic investigations, including evidence collection and reporting, in compliance with relevant legislation.
• Adherence to the Institute of Internal Auditors (IIA) standards, TCTA policies, and best practice methodologies.
• Uploading and managing audit files electronically and contributing to the combined assurance approach.

Skills Requirements

The skills and expertise required from service providers include:

• Internal Audit Team: Certified Internal Auditors (CIA) or equivalent, with experience in financial, operational, and compliance audits.
• IT Audit Team: Professionals with qualifications such as CGEIT, CRISC, CISM, or equivalent, with experience in IT governance, cybersecurity, ERP controls, and data analytics.
• Probity Review Team: Members with memberships from IIA or SAICA, with experience in procurement and high-value project audits.
• Forensic Investigations Team: Certified Fraud Examiners (CFE) or equivalent, with extensive experience in digital forensics, fraud investigations, and evidence handling.
• Key Personnel: CVs demonstrating relevant qualifications, professional memberships, and post-qualification experience in their respective fields.
• Technical Skills: Proficiency in audit tools, data analytics, cybersecurity controls, and forensic software.

All team members must provide proof of valid professional memberships and qualifications, and demonstrate relevant experience aligned with the scope of work.