Deadline Extended: Terms of Reference – Information Systems Audit and Policy Review (Gap Analysis)

PASGR intends to carry out an Information Systems (IS) Audit that will evaluate and determine security and policy decisions required to ensure protection of all internal information resources. Therefore, we invite Expressions of Interest (EoI) from consultants/consulting firms having a minimum of seven years’ experience and a proven track record in projects of similar nature, who wish to carry out the IS Audit exercise.

PASGR’s information technology systems comprise of:

• a Local Area Network (LAN) – cabled and wireless as well as Virtual LANs
• a robust cloud infrastructure with applications and websites, and
• Office365

LAN hardware includes servers running Microsoft Windows Server operating systems (OS), Windows and Mackintosh OS workstations, and multivendor networking devices. Core ERP is a Microsoft system. The organisation has several cloud-based applications including websites which are hosted by outsourced technology service providers.

The IS Audit will entail conducting a risk assessment of the information systems at PASGR offices, identification, and evaluation of the risks. In the light of the risk assessment exercise, the selected consultants/consulting firms should recommend and assist in implementing a set of best practices governing the Management of Information Systems within the organisation.

Submission of EOI

Please respond to the Terms of Reference(s) with all the specified pages (including all attachments) by 05:00 p.m. EAT Friday, June 23, 2023.