Internal Audit Services for Cybersecurity Review at PSETA
Ms Lungile Mokoena
In plain English
The Public Service Sector Education and Training Authority (PSETA) is procuring internal audit services to conduct a cybersecurity review. Bidders must be registered entities with traceable credentials and meet specific functionality criteria.
Always check the official documentDescription
The Public Service Sector Education and Training Authority (PSETA) invites bids for internal audit services to perform a cybersecurity review. The project involves reviewing IT security policies, infrastructure configuration, architecture, and conducting penetration testing. Work is scheduled to commence on 18 January 2027 and must be completed by 26 February 2027, with project close-out by 05 March 2027. Key deliverables include an audit planning memorandum, execution of the audit program, draft and final internal audit reports, and a quality-assured audit file. Bidders must achieve a minimum functionality score of 70 points. The tender is subject to an 80/20 preference point system.
What you need to qualify
- CSD registration — Registration on the Central Supplier Database — required to do business with government.
- Registered company — An active CIPC-registered company in good standing.
- Tax clearance — A valid SARS tax compliance status (PIN) showing your tax affairs are in order.
- B-BBEE certificate — A B-BBEE certificate or sworn affidavit confirming your contribution level.
- Other registration — An industry registration the tender requires (e.g. PSIRA, NHBRC, a professional or trade licence).
Full requirements
- Valid Tax Compliance Status (TCS) PIN
- Registered on the Central Supplier Database (CSD)
- Valid CIPC registration documents
- Certified professional qualifications for the project team
- Proven experience in cybersecurity audits over the last 10 years
- Membership with ISACA and/or EC-Council
- Valid B-BBEE certificate or sworn affidavit
Contact & how to apply
Name: Ms Lungile Mokoena
Email: lungilem@pseta.org.za
Phone: 012-423-5700
How to apply: Submit one original hard copy and two or more replicas to: Lungile Mokoena, SCM Specialist (Acting), PSETA, Ground Floor, Woodpecker Building, 177 Dyer Road, Hillcrest Office Park, Pretoria. No electronic submissions are accepted.
Related tenders
Internal Audit Services for PSETA Risk Review.
The Public Service Sector Education and Training Authority (PSETA) seeks bids for internal audit services to conduct a Risk and Compliance Management Review as part of the 2026/2027 Internal Audit Plan’s Quarter 4 deliverables. The project involves assessing risk management policies, enterprise-wide risk identification, compliance monitoring, and reporting. Scheduled from 18 January 2027 to 26 February 2027, with a final close-out by 05 March 2027, key deliverables include an Audit Planning Memorandum, audit programme, execution of testing, and presentation of a final Internal Audit Report to the CEO and Audit Committee. Bidders must have relevant experience in governance and compliance audits since 2020.
Provision of Audit Software for AgriSETA.
AgriSETA seeks a service provider to supply, implement, and maintain internal audit software for its internal audit function, including post-implementation support for three years. The project requires a software solution for risk-based audit planning, fieldwork, reporting, and data analytics, integrating with existing ICT infrastructure and supporting cloud hosting. The provider must deliver training for four users, provide user manuals, and ensure a three-year maintenance agreement. Customization of audit templates and reports is expected within six months.
Professional Service Provider for Audit Remediation Support
FoodBev SETA seeks a professional service provider to implement its Audit Remediation and Control Improvement Plan, focusing on financial reporting, grant reconciliation, and audit readiness. The project requires on-site work in Sandton with a team including a Project Director, Project Manager, and four Accountants. Deliverables include an implementation plan, control designs, and staff knowledge transfer. A compulsory briefing is on 28 October 2026, and the tender closes on 10 November 2026. Pricing must align with DPSA rates.
Provision of Internal Audit Services for CMS.
The Council for Medical Schemes (CMS) seeks proposals for internal audit services over three years at their Centurion offices. The service provider will develop strategic audit plans, conduct ICT and financial reviews, and provide quarterly reports. Key deliverables include an Internal Audit Plan, Audit Charter, and Combined Assurance Plan. The project aims to enhance governance, risk management, and internal controls. A compulsory briefing session is on 13 November 2026.
Provision of Employee Wellness Program for PSETA.
The Public Service Sector Education and Training Authority (PSETA) seeks a service provider for an Employee Wellness Program. Services include 24/7 telephonic counselling, face-to-face sessions, trauma debriefing, and life management support. The provider will also conduct health screenings, wellness days, and training presentations. The contract is for three years, managed from PSETA offices in Pretoria. Proposals must meet a 70-point functionality threshold. Closing date: 13 November 2026 at 11:00.
Provision of Internal Audit Services for ECSECC.
The Eastern Cape Socio-Economic Consultative Council (ECSECC) seeks bids for internal audit services over three years. Tasks include risk-based audits, risk management workshops, and advisory services per Global Internal Audit Standards. Deliverables are a three-year audit plan, quarterly reports, and a Quality Assurance Programme. The provider must attend committee meetings and assist with fraud reporting. Services are primarily in East London, concluding on 28 February 2030. A briefing session is on 03 November 2026 via Microsoft Teams, with bid submissions due by 24 November 2026.