Auditing services: South Africa tenders, rfq bids, opportunities and procurement 2025


Total: 37
25 nov
Service providers are hereby invited to submit tenders for the appointment of a co-sourced panel service provider to provide internal audit services for a period of three years (as and when required). Scope: The firm will be further required to do the following: • Assist in the assessment of key areas of risks for the municipality and present a report to the Chief Audit Executive (CAE) for final review, with agreed management corrective action for internal audit follow-up, • The planning, execution and reporting of audit assignments allocated by the CAE in line with the approved Risk-based Internal Audit Plan, • Perform audits in compliance with the Institute of Internal Auditors’ standards on internal auditing, • Implementing strict project management techniques and meeting of deadlines in consideration of reporting timelines to the Audit Committee, • Comply with the internal audit standards, codes of conduct and ethics that are promulgated from time to time by the Institute of Internal Auditors, • Pro-actively provide advice to the CAE on the internal control environment, to continuously improve and address root causes identified in the execution of internal audit reviews, • Provide continuous specialist services in respect of Information Technology, Financials Statements (GRAP), Performance Information and Risk Management, • Perform ad-hoc assignments not covered by the plan as and when requested and report to Internal CAE accordingly, • In planning and conducting its work, the service provider(s) should seek to identify serious defects in the internal controls, which might result in possible malpractices. Any such defects must be reported immediately to the CAE or Municipal Manager, without disclosing these to any other staff member, • Provide and implement a formal skills transfer process to relevant municipal staff, especially in the internal audit unit and Finance, • Have the capacity to deal with any special internal audit projects, • Provide value-added services to management on how to improve the municipalities internal control environment, • Provide mentorship to internal audit interns and employees tasked with internal audit functions. (EN) add to Favorites
Deadline: 4 days
Customer: ONLINE TENDERS

Number: 114741569

Country: South Africa

Source: ONLINE TENDERS

06 sep
Bids are hereby invited for the following: Appointment of a Panel of Service Providers to Provide (Co-Source) Internal Audit and Forensic Services to the Department of Cooperative Governance as and when required for a period of 36 months. Scope of work: The appointed service providers will be required to fulfil the following functions as and when assigned by the Chief Audit Executive: - Perform audits and forensic investigations services as per assignment and under the management of the Internal Audit function; - Perform audits according to the International Standards for the Professional Practice of Internal Auditing (ISPPIA) and Internal Audit Activity(IAA) methodology; - Monitor and evaluate performance of team members on audit projects; - Perform quality assurance reviews for the projects; - Use DCoG in-house Internal Audit methodology; - Write and present audit reports to the management which were subjected to audit through the office of the Chief Audit Executive; - Write and present investigation report to the management which were subjected to investigation through the office of the Chief Audit Executive; - Perform business process analysis and suggest best practices for improvement of the IAA; and - Attend planned meetings with Chief Audit Executive or his/her delegate and relevant managers when required; - Forensic and ad-hoc services will be performed when a request is received from management, these services will be requested on an ad-hoc basis. Required at: 87 Hamilton Street, Arcardia, Pretoria, 0001. (EN) add to Favorites
Customer: ONLINE TENDERS

Number: 110456195

Country: South Africa

Source: ONLINE TENDERS

21 aug
Tenders are hereby invited for the following: Appointment of Panel of Service Providers for the Provision of Accredited Training. Specifications: - National Diploma: Public Finance Management and Administration; - National Certificate: Ward Committee Governance; - Coaching and Mentoring; - Local Government Accounting Certificate; - Occupational Certificate: Paving Screed Operator; - National Certificate: Electrical Engineering: Renewable; - Occupational Certificate: Plumber; - National Certificate: Supervision of Civil Engineering; - Construction Processes Road Works; - National Certificate: Horticulture; - National Certificate: Occupationally Directed Education; - Training and Development Practices; - Certificate: Municipal Financial Management; - Advanced Certificate in Internal Auditing: Auditing and Ethics; - Certificate Computer Technology: MS Word Advanced; - Occupational Certificate Internal Audit Manager; - Advanced Certificate: Environmental Education; - Training and Development Practice; - Councilor Induction Programme: Higher Education and Training Certificate: Development Practice National Certificate in Community Development Worker; - National Certificate: Local Government Councilor Practices; - Occupational Certificate: Original/Aftermarket Auto Electrical System or Component Fitter; - National Certificate: Environmental Practice; - National Certificate: Business Administration Services; - National Certificate Emergency Services Supervision: Fire and Rescue Operations; - Higher Certificate in Renewable Energy Technologies. (EN) add to Favorites
Customer: ONLINE TENDERS

Number: 109533940

Country: South Africa

Source: ONLINE TENDERS

20 aug
Quotations are hereby invited for the following: Five (5) year external assessment of internal audit activity, Qty: 300. Scope: To perform an external quality assessment on the City of uMhlathuze Internal Audit activity utilising the IPPF’s Quality Assessment Manual for the Internal Audit Activity published by the Internal Audit Foundation in 2017 in order to conclude on the internal audit activity’s conformance with the Code of Ethics and The IIA’s International Standards for the Professional Practice of Internal Auditing (Standards), whether or not internal auditors apply the Code of Ethics, and to identify areas for improvement. The external assessment may include operational or strategic comments. The qualified and independent external reviewer must: - Review the implementation of the Standards including the existence of a quality assurance process and the provision of consulting services, - Assess the efficiency and effectiveness of internal audit activity considering (a) its charter, (b) expectations of the Audit Committee, executive management, and the Chief Audit Executive (CAE), and (c) its current needs, exposures to performing at less than an effective level, and the future directions and goals of the organisation. - Identify opportunities and offer ideas and counsel to the CAE and staff for improving their performance. By implementing selected “successful practices”, the activity can add value to management and the Audit Committee and promote the image and credibility of the activity within the organization, - Review the internal audit activity’s involvement in the enterprise risk assessment process and preparation of the audit schedule. This would include assessing annual and long-range audit plans to see whether audit areas represent current and future business plan, strategy, exposures and operations, - Evaluate the organizational structure and approach used in auditing to determine whether resources are adequate to ensure proper audit coverage in all phases of the business. This will also include the information technology audit function. Further, we will comment on the background, mix and experience of staff, training scheduled and received and certifications, - Determine the perception of internal auditing through interviews and surveys with relevant members, executive management and internal audit customers. - Provide insights into their level of satisfaction with internal auditing services, along with appropriate suggested changes, - Examine internal auditing techniques and methodology for testing systems of control. - Identify ways to enhance policies and practices, as well as coordination with external auditors, - Provide an opinion as to whether the internal audit activity complies with the IIA’s International Standards for the Professional Practice of Internal Auditing and its Code of Ethics. (EN) add to Favorites
Customer: ONLINE TENDERS

Number: 109449816

Country: South Africa

Source: ONLINE TENDERS

30 jul
Proposals are hereby requested for the following: Provision of database security management solution for a period of five (5) years. Scope: Eskom requires a cloud-based or SaaS Database Security tool for a period of five (5) years. The cloud-based or SaaS Database Security tool must cater for the Eskom hybrid (on-premises, hybrid, and multiple cloud) environments, databases hosted on-prem and the cloud. The cloud-based or SaaS Database Security Management tool must include subscriptions fee, software licenses, onboarding assistance, maintenance, training, and support on an 24X7X365 (24/7/365) throughout the year for the duration of the contract: The Database Security Management tool must have the following capabilities, functionalities and features but not limited to: a) Security Assessment: The Database Security Management tool must provide security posture, risk profile of the entire database, database discovery, data discovery, data classification and security policy, b) Artificial Intelligence (AI) and Machine Learning (ML): The Database Security Management tool must be AI and ML-powered for event collection and analysis, c) Encryption and Key Management: The Database Security Management tool must encrypt data at rest with key management capability, d) Data Masking, Tokenisation and Sub-setting: The Database Security Management tool must be able to scan the entire database for sensitive data, mask, tokenise and subset sensitive data in nonproduction environments, e) Data Access Control: The Database Security Management tool must provide the following: i. Enforce separation of duties to control access based on security privileges, identify sensitive data, ii. Ensure that administrators can manage the database, but not access the sensitive data, f) Auditing and Monitoring: The Database Security Management tool must provide the following: i. Detect, analyse, and block threats in database activity, ii. Comply with the Center for Internet Security (CIS) benchmarks, the Defence Information Systems Agency (DISA) Security Technical Implementation Guides (STIGs) auditing requirements, iii. Provision audit policies that balance the need to monitor activity with the impact of collecting and storing audit data, iv. Monitor user activity with data, v. Simplify compliance reporting and help identify risky user behaviour, g) Audit Vault and Database Firewall: The Database Security Management tool must provide both audit vault and database firewall to provide the following: i. Assess database security posture, ii. Monitor privileged user activity, iii. Deny and block unauthorised access, iv. Provide useful, simplified logs to assist with the incident investigation, v. Provide continuous alerts on suspicious activity, vi. Provide simplified regulatory compliance reporting such as PCI DSS, GDPR and POPIA, h) Interoperability: The Database Security Management tool must support numerous and prevailing database management system (DBMS) technologies such as Microsoft (MS) structured query language (SQL), MySQL, SQLite, Redis DB, Oracle databases, IBM DB2, IBM NETEZZA, SAP HANA, MongoDB, Postgres, Cassandra, Neo4j DBMS, PostGIS, Elasticsearch DBMS, and MariaDB but not limited to these DBMS technologies, i) Integration to SIEM: The Database Security Management tool must be able to integrate with numerous and prevailing SIEM tools such as Splunk, and Sentinel but not limited to these SIEM tools, j) Integration to advanced AI and machine learning (ML) network monitoring solutions: The Database Security Management tool must be able to integrate numerous and prevailing AI and machine learning network monitoring solutions such as Darktrace but not limited to these tools listed, k) Integration to on-prem Identity Provider (IdP): The Database Security Management tool must be able to integrate with Eskom existing on-prem identity provider (IdP)for central user account management, to enable MFA and SSO, l) Self-hosted or on-prem and Cloud-based Databases: The Database Security Management tool must be able to scan both databases hosted on- prem and in the cloud, m) Process Control Network’s (PCN’s) or Operational Technology (OT) Databases: The Database Security Management tool must be able to scan databases that are placed on the PCN or OT networks, n) Agentless: The Database Security Management tool must be agentless, o) Reporting: The Database Security Management tool must simplify compliance reporting, users, administrators, and privileged user activity logs and help identify risky user behaviour. Training/Transfer of skills: a) Provide web-based or online training for Security Services Security Operation Centre (SOC) team to enable them to perform the scan, analyse, interpret the results, forward to the relevant stakeholders to remediate identified security vulnerabilities, b) Provide Database Security tool onboarding assistance, c) Mentor, transfer skills and knowledge to Eskom resources assigned to the project through the installation, configuration, testing, and deployment stages using a defined skills transfer program, d) Expert level training with relevant certification for the SOC team. Service Level Agreement requirements: The Service Provider must provide 24X7X365 (24/7/365) support and monitoring of the Database Security Management tool: a) The SOC team require 24X7X365 (24/7/365) support throughout the year, b) Security Services department requires 24X7X365 (24/7/365) monitoring of the Database Security tool, c) Security Services department requires MTTR (Mean time to resolve) of 4 hours, d) The availability of the SaaS solution must be 99.9%. (EN) add to Favorites
Customer: ONLINE TENDERS

Number: 108286183

Country: South Africa

Source: ONLINE TENDERS

05 apr
Re-advertisement: Information is hereby requested for the following: Provision of sustainable printing equipment, software, consumables and services for UN global operations. Specifications: Printing Hardware: A. Multi-Functional Printers (MFP): both color and black and white with varying speeds, able to print double sided, scan & email to PDF and copy, to meet different user requirements; 1. Low Volume MFP - personal, small sized device, directly connected to computer, tablet, or phone through Bluetooth and USB, Laser or Inkjet; 2. Medium Volume MFP - for the use by a team of 10-15 staff, fits on table, network connected, supporting A4/Letter paper format, includes a multi-document feeder for scanning, able to join an existing Wi-Fi network, minimum resolution of printing & scanning of 1200x1200 dpi, able to also print from USB drive, minimum paper capacity of 500 pages; 3. Large Volume MFP - for a building/floor of 100+ staff, free standing, network connected, supporting at least A4/Letter and A3 sized paper, separate toners for each colour, includes a multi-document feeder and allows double sided scanning, supporting gigabit network at minimum, minimum resolution for printing & scanning of 1200x1200 dpi, able to also print from USB drive, minimum paper capacity of 1500 pages. B. Large Format Inkjet Printers: suitable for printing high-quality maps, architectural drawings, satellite imagery, and other oversized materials; must have the ability to produce prints up to A0 size (33.1" x 46.8") or larger with high resolution and precision; acceptable media types should encompass no just standard printing papers but also specialized medias like photo papers, vinyl"s, backlits, and canvases to accommodate a wide range of GIS mapping needs; must utilize dye or pigment-based inks providing vibrant colors, water/smudge resistance, and longevity printed output. II. Printing Software: innovative and eco-responsible secure print management system: A. Print Mobility and Security - system should enable users to securely release print jobs from any network printer using multi-factor authentication [e.g., United Nations issued RFID cards integrated with Microsoft Entra ID]; eliminates the need for printer logins and reduces waste from abandoned print jobs; B. Flexible Deployment - cloud-based solution accessible via web, locations with limited bandwidth should have option for an on-premise or hybrid deployment model; C. Light Footprint - minimal client software footprint on user devices to streamline printing across the United Nations diverse technology landscape; D. Environmental Controls - granular controls to enforce eco-printing rules [e.g., enforcing duplex/double sided printing, allowing only mono/black-white, and setting user-specific print quotas to reduce paper and toner waste; E. Guest Printing - secure guest printing functionality to provision temporary printing access for visitors and contractors with page and time limits F. Output Auditing - robust tracking, auditing, and reporting of all printing activity across the print environment for accountability and cost optimization; G. Innovation Areas - suppliers are encouraged to inform on innovative solutions for further enhancing secure printing, reducing environmental impact via technologies [e.g., pull printing, print delegation, cloud printing integration, leveraging data analytics, Artificial Intelligence (AI), Machine Learning (ML)] to drive sustainable printing behaviors. III. Printing Consumables: A. Ability to supply original, environmentally preferable printer/plotter products with low environmental impact B. Made from recycled or recyclable materials C. Toner cartridges and consumables designed for high yield and resource efficiency D. Free of hazardous substances and compliant with ecolabel standards E. Suppliers are requested to provide examples of their comprehensive global takeback and recycling program to retrieve used consumables from all United Nations facilities for environmentally sound recycling and disposal F. Need to be available for at least two years after printer model is discontinued to enable maximum useful life IV. Managed Printing Services - comprehensive service to optimize its global print infrastructure in an environmentally sustainable manner A. Implementation Services - deployment, setup, integration, and ongoing support for a secure, network-connected print environment across United Nations facilities; B. Flexible Acquistion Models - options for printer and consumables leasing or full managed services; cost-per-page pricing aligned with actual usage to minimize wastage; C. Print Environment Optimization - consolidation of dispersed print assets to drive energy and supplies reduction; proactive replacement of aging, inefficient devices with modern, energy-efficient models; continuous monitoring and reporting on environmental metrics [e.g., energy use, emissions, solid waste]; D. Environmental Innovation - information related to innovative technologies and circular practices to further minimize environmental impact which relies on user data analytics; eco-responsible print services, robust environmental monitoring, reporting processes, and a continuous improvement mindset aligned with United Nations emission reduction targets. V. Sustainable Innovation - information for innovative, sustainable printing technologies, circular business models and environmentally responsible practices: A. Experience providing sustainable, environmentally responsible printing solutions globally; B. Capability to deliver, maintain, and service equipment across international locations; C. Robust and green supply chains for consumables; D. Ecolabel compliance, environmental standards, and certifications; E. Measurement and reporting capability on environmental performance metrics; F. Innovative solutions to reduce environmental impact. Please confirm the closing time. (EN) add to Favorites
Customer: ONLINE TENDERS

Number: 102331333

Country: South Africa

Source: ONLINE TENDERS

26 feb
Formal written price quotations are hereby invited for the following: Services needed of an accredited organization to perform the internal audit: external assessment. Specifications: - Review of the implementation of the International Standards for the Professional Practice of Internal Auditing (ISA) including the existence of a quality assurance process and the provision of consulting services; - Assess the efficiency and effectiveness of the Internal Audit Activity in light of: - Its charter; - Expectations of the Audit Committee, Senior Management, and the Chief Audit Executive (CAE), and - Its current needs, exposures to performing at less than an effective level, and the future direction and strategic objectives of the Municipality; - Identify opportunities and offer ideas to the CAE and Internal Audit staff for improving their performance. By implementing selected "successful practices," the activity can add value to Senior Management and the Audit Committee and promote the image and credibility of the activity within the Municipality; - Review the Internal Audit Activity’s involvement in the enterprise risk assessment process and preparation of the audit schedule. This would include assessing annual and long-range audit plans to see whether audit areas represent current and future business plans, strategy, exposures, and operations; - Evaluate the organizational structure and approach used in auditing to determine whether resources are adequate to ensure proper audit coverage in all phases of the business. This will also include the information technology audit function. Further, comment on the background, mix and experience of staff, training scheduled and received and certifications; - Determine the perception of Internal Auditing through interviews and surveys with Senior Management and Internal Audit clients. To provide insights into the Municipality’s Internal Audit Activity level of satisfaction with Internal Audit services, along with appropriate suggested changes; - Examine internal auditing techniques and methodology for testing systems of control; - Identify ways to enhance policies and practices, as well as coordination with External Auditors; and - Provide an opinion as to whether the internal audit activity complies with the Institute of Internal Auditors’ International Standards for the Professional Practice of Internal Auditing and its Code of Ethics; Provide a detailed report outlining: - The Municipality’s conformance to the International Professional Practices Framework (IPPF); - Areas for improvement both on a conformance level, governance level and a performance level; - Recommendations of application of "leading practices"; - Working paper file; and - Daily feedback on the progress of the QAR. (EN) add to Favorites
Customer: ONLINE TENDERS

Number: 100281447

Country: South Africa

Source: ONLINE TENDERS

08 nov
Proposals are hereby invited for the following: Appointment of a panel environmental consultants for PetroSA. PetroSA requires a panel of experienced Consultants that shall provide environmental, health, safety and quality management specialist services as per due instruction(s), as and when required, on a time and material basis. The Consultant shall be required to perform all or one of the following Services: 1. Air Quality monitoring analysis, interpretation, sampling analysis and modelling; 2. Groundwater Quality monitoring, analysis, interpretation and modelling; 3. Contamination assessment and remediation, method depends on factors like the type of contaminant, site characteristics and regulatory requirements; 4. Soil Quality monitoring, analysis, interpretation and modelling; 5. Marine water quality, monitoring, analysis and interpretation; 6. Health, Safety, Environmental and/or Quality Auditing (The consultant must indicate which of these are offered (all or a selection)); 7. Health, Safety, Environment Management, with respect to services for the development and review of project-specific HSE and Quality plans; 8. Health, Safety, Environment and Quality Management, with respect to services of a project-specific HSE Officer and /or a project specific Quality Officer; 9. The services of External Environmental Control Officer (ECO) for off-shore and/or on-shore projects; 10. The services of an Environmental Assessment Practitioner (EAP), project evaluation and scoping. Note: none of the Services shall be performed within the context of an Environmental Impact Assessment process. (EN) add to Favorites
Customer: ONLINE TENDERS

Number: 93858219

Country: South Africa

Source: ONLINE TENDERS