Cybersecurity Review and Internal Audit Services NEW

The Public Service Sector Education and Training Authority (PSETA) is seeking qualified service providers to conduct a cybersecurity review as part of its internal audit programme. The assignment is tied to the Quarter 4 deliverables of the approved 2026/2027 Internal Audit Plan, which means the review is scheduled within a defined governance and reporting cycle. The full terms of reference, scope boundaries, and deliverable specifications are contained in the RFP document pack, which should be reviewed before any submission is prepared.

The tender is a request for proposals for professional internal audit services. The review is expected to assess the adequacy and effectiveness of PSETA's cybersecurity controls and governance arrangements, and to report findings and recommendations to management and the audit committee. Respondents should expect the work to align with recognised frameworks commonly used in South African public sector audits, such as the IIA International Professional Practices Framework and relevant information security standards, though the specific methodology required should be confirmed in the RFP. Compliance with the Public Finance Management Act (PFMA) and National Treasury requirements applies to government procurement of this kind.

For service providers, the opportunity offers a defined public sector engagement with a clear reporting structure and a outcome that directly supports the entity's risk management and governance obligations. Prospective bidders should note the short submission window, with the closing date of 13 November 2026 leaving limited time for preparation. Early review of the RFP documents, confirmation of compulsory briefing or clarification deadlines, and verification of all mandatory compliance documentation are strongly recommended.