Objectives

The primary objective of this tender is to appoint a qualified service provider to facilitate and develop an Information Governance (IG) Strategy for the Department of Economic Development, Tourism and Environmental Affairs (EDTEA) over a period of 12 months. The strategy aims to establish a structured framework for managing, protecting, sharing, and utilizing information effectively, ensuring data quality, compliance, security, and accountability. It seeks to address current fragmentation in information management practices, mitigate risks associated with data handling, and leverage information as a strategic asset to support policy, decision-making, and service delivery.

Scope

The scope encompasses the entire process of developing the IG Strategy through multiple phases:

• Project Mobilisation & Preparation: Establish project team, confirm scope, and digitisation priorities.
• Preliminary Assessment: Validate current practices, identify gaps, risks, and opportunities.
• Information Governance Workshops: Conduct workshops to gather insights and inform strategy development.
• Strategy Development: Formulate policies, standards, controls, and a comprehensive governance framework.
• Implementation Roadmap: Define actions, timelines, resource needs, and monitoring mechanisms.
• Socialisation & Refinement: Engage stakeholders for feedback and refine the strategy.
• Approval & Handover: Finalize and operationalize the governance framework, ensuring ongoing compliance and monitoring.

The project duration is 12 months, with phased activities as outlined, requiring stakeholder engagement and access to relevant information and systems.

Technical Requirements

• Development of a comprehensive IG Strategy aligned with legislation such as POPIA and ISO standards.
• Establishment of policies, standards, and controls for information security, privacy, and lifecycle management.
• Conducting workshops and assessments to identify gaps, risks, and opportunities.
• Formulation of an implementation roadmap with clear actions, responsibilities, and timelines.
• Designing a governance framework to define roles, responsibilities, and accountability mechanisms.
• Ensuring the strategy supports digital transformation, compliance, and operational efficiency.
• Provision of a detailed report and documentation, including a high-level business case for implementation.

Skills Requirements

The successful service provider must propose a multidisciplinary team with the following key expertise:

• Team Leader / Project Manager (IG Lead):
  • Minimum bachelor’s degree in Information Science, Records Management, or related field (NQF 7).
  • 8-10+ years relevant experience in data governance, metadata, change management, and training.
  • Familiarity with standards such as DAMA DMBOK2, ISO 15489, ISO 27000 series, and POPIA.
  • Desirable certifications: CIP, IGP, ISO 15489 Lead Implementer/Auditor.
• Records/Information Management Specialist:
  • Minimum bachelor’s degree in information or records management (NQF 7).
  • 5-10+ years experience in records management, retention scheduling, classification, metadata, and disposal.
  • Knowledge of ISO 15489/30300 and POPIA implementation.

CVs of key personnel must demonstrate relevant experience and qualifications, with a minimum score of 60% for the overall evaluation. The team should include specialists in data governance, records management, and legal/compliance aspects related to information security and privacy.