Professional IT and Risk Management Training Services

The City of Tshwane Metropolitan Municipality, through its Group Audit and Risk (GAR) department, is inviting quotations from suitably qualified training providers to deliver professional and technical training for Information Technology auditors and risk practitioners. The appointment is a re-advertisement and covers pre-selected training courses to be delivered over the coming 12 months, aligned to the municipality's Work Skills Plan. The purpose is to strengthen internal audit capability in line with Institute of Internal Auditors (IIA) Global Internal Audit Standards, particularly Standard 3.2 on continuing professional development, and to improve audit effectiveness, risk-based audit methodology, and the quality of audit and risk reporting.

The tender is divided into two categories. Category A (Information Technology) covers four courses: Certified Information Systems Auditor (CISA), Certified in Risk and Information Systems Control (CRISC), Certified Information Security Manager (CISM), and COBIT Framework Training, with an indicative cohort of 12 candidates per course. Category B (Risk Management) covers three courses: Project Risk Management, Business Continuity Management, and Risk Appetite and Tolerance, with an indicative cohort of 14 candidates per course. The City reserves the right to adjust quantities subject to budget availability. Successful providers must develop customised training material aligned to internal audit and risk management functions, deliver training through workshops (physical or virtual), practical case studies and interactive sessions, and supply training manuals, presentation slides, attendance registers, evaluation reports, certificates of completion, and CPD points for each course. Providers must also submit a cost outline, quotations inclusive of VAT, and a City of Tshwane vendor number.

Mandatory requirements include at least three contactable reference letters on company letterhead for comparable completed work; confirmation that training materials are certified or endorsed by ISACA (IT) or by IRMSA and/or the IIA (risk), and SAQA accredited or accredited by a relevant SETA; CVs and certified qualifications for training team members, with no more than five years' training experience required per trainer; and current membership in good standing of a relevant professional body such as IRMSA, IIA or BCI. Bidders must be registered on the Central Supplier Database (CSD) with a valid CSD number, be tax compliant, have municipal accounts not in arrears beyond 90 days, complete MBD forms 1, 4, 6.1, 7, 8 and 9, and provide audited financial statements where applicable. Evaluation follows an 80/20 preference point system (80 points for price, 20 for B-BBEE and specific goals). Bids must be submitted through the City's e-tender portal, and bidders are advised that the compulsory briefing and closing dates should be verified against the official bid documents, as the source documents contain inconsistent dates. Bids remain valid for 90 days after closing.