Internal Audit Services for ICT Governance Review.
Ms Lungile Mokoena
In plain English
The Public Service Sector Education and Training Authority (PSETA) is seeking internal audit services to conduct an ICT governance and controls review. Bidders must be registered entities or consortia with traceable credentials and registered on the Central Supplier Database (CSD).
Always check the official documentDescription
The Public Service Sector Education and Training Authority (PSETA) is inviting bids for the provision of Internal Audit Services. The successful service provider will conduct an ICT Governance and Controls Review to ensure the adequacy and effectiveness of the authority's systems. The work will take place in Pretoria and covers areas such as ICT policy frameworks, infrastructure management, continuity planning, and general application controls. The project is scheduled to begin on 05 October 2026 and must be completed by 27 November 2026. Key deliverables include an audit planning phase, execution of fieldwork, and the submission of final internal audit reports to the Audit Committee. Bidders must demonstrate relevant experience in ICT auditing and provide a team with appropriate academic and professional qualifications. The tender follows the 80/20 preference point system and remains valid for 90 days from the closing date of 28 September 2026.
What you need to qualify
- CSD registration — Registration on the Central Supplier Database — required to do business with government.
- Tax clearance — A valid SARS tax compliance status (PIN) showing your tax affairs are in order.
- B-BBEE certificate — A B-BBEE certificate or sworn affidavit confirming your contribution level.
- Other registration — An industry registration the tender requires (e.g. PSIRA, NHBRC, a professional or trade licence).
Full requirements
- Registered on the Central Supplier Database (CSD)
- Valid Tax Compliance Status (TCS) PIN
- Valid B-BBEE certificate or sworn affidavit
- Audit team must hold relevant academic and professional qualifications
- Active professional membership with ISACA or equivalent bodies
- Proven experience in ICT Governance and Controls audits since 2020
Contact & how to apply
Name: Ms Lungile Mokoena
Email: lungilem@pseta.org.za
Phone: 012-423-5700
How to apply: Proposals must be submitted physically to the PSETA office located at Ground Floor, Woodpecker Building, 177 Dyer Road, Hillcrest Office Park, Pretoria. No electronic submissions will be accepted. Direct all queries to Lungile Mokoena at Lungilem@pseta.org.za.
Related tenders
Appointment of Internal Audit Service Providers
The KwaZulu-Natal Provincial Treasury invites bids for professional service providers to perform internal audit services for provincial departments, municipalities, and public entities over a three-year period. Services include governance, operational, compliance, IT, performance, and financial audits, alongside risk management and advisory services. Bidders must demonstrate technical competency and provide quality assurance reports. The contract will be managed through specific assignments with set hourly rates determined by the Treasury.
Provision of Strategic Partners for Internal Audit Services.
City Power Johannesburg (Pty) Ltd seeks to appoint a panel of strategic partners for internal audit services over three years in Johannesburg. The scope includes risk-based auditing, probity assessments, ICT audits, forensic investigations, and advisory services. The project aims to enhance governance and risk management with specialized skills and perspectives. A maximum of three service providers will be selected, evaluated through a two-stage process with a functionality threshold and price/preference point system. Compliance with Global Internal Audit Standards is required.
Provision of Internal Audit Services for 36 Months
The Financial and Fiscal Commission (FFC) seeks a service provider for internal audit services over 36 months. Responsibilities include independent assurance and advisory services in governance, financial management, supply chain oversight, and cybersecurity reviews. The provider will create audit plans, conduct risk assessments, and attend Audit and Risk Committee meetings, with a maximum of 2,700 billable hours. Deliverables include annual audit plans, quarterly progress reports, and final audit opinions. The contract requires a team with extensive public sector experience and professional internal auditing certifications.
Professional and Technical Training for Audit and Risk.
The City of Tshwane Metropolitan Municipality seeks a service provider for professional and technical training for its Group Audit and Risk department. The training includes IT courses such as CISA, CRISC, CISM, and COBIT, and Risk Management courses covering project risk, business continuity, and risk appetite. The provider must offer customized training materials, CPD points, and interactive sessions for 12 to 14 participants per course over 12 months. Deliverables include training manuals, attendance registers, evaluation reports, and completion certificates. A compulsory briefing session will be held via Microsoft Teams on 17 September 2026, with submissions due by 24 September 2026.
Service Provider for Institutional Readiness Assessment for SASSETA.
SASSETA seeks a service provider for a three-year institutional readiness assessment. The project includes six phases: validating ICT solutions, assessing infrastructure, evaluating data and strategy alignment, reviewing organizational change capacity, and executing digital modernization and automation. The service provider will report to the CEO's office and deliver a structured methodology, testing reports, and a stakeholder engagement plan. A certified Project Manager with five years of IT consulting experience is required, supported by a company with ICT assurance expertise. Annual price escalations are linked to CPIX.
ICT and AI Readiness Assessment for EWSETA
The EWSETA seeks an independent service provider to conduct an assessment of its ICT environment and AI readiness. The project includes evaluating the current ICT model, system adoption, ICT expenditure, and AI governance frameworks. The successful bidder will deliver a strategic roadmap aligned with the 2025–2030 strategy, within 30 days. Deliverables include an inception note, evidence pack, executive briefing, and final report. A multidisciplinary team led by an expert with 10+ years of experience is required.