Home
Internal Audit, IT Audit, Risk & GRC Consulting | Muzamani
Audit, Risk, Governance & AI Advisor
Muzamani provides Internal Audit, IT Audit, ITGC, Risk and GRC advisory services, enhanced by practical AI solutions for organisations across South Africa, SADC and international markets.
We deliver ITGC audits, SCM probity reviews, enterprise risk advisory and internal audit co-sourcing — built on COBIT, ISO 27001, ISO 31000, King IV, COSO, IIA International Standards, and the PFMA/MFMA framework.
Discuss an Engagement → | View Our Services →
Who This Is For
- State-owned entities and municipalities requiring PFMA/MFMA-aligned internal audit and SCM probity assurance
- Public institutions requiring independent ITGC or cybersecurity control reviews
- Private sector companies requiring enterprise risk or IT audit support
- NGOs and donor-funded programmes requiring independent assurance over grant compliance, procurement probity and internal controls, including for donor and funder reporting requirements
- Audit committees and boards requiring an independent, standards-based second opinion on control effectiveness
- Internal audit functions that requiring co-sourced or embedded resourcing to meet annual plan coverage
What We Do
IT General Controls (ITGC) Audits — For organisations relying on financial and operational systems
Independent assurance over the controls supporting critical business and financial systems. Reviews cover ICT governance, user access, change management, network and endpoint security, backups, monitoring, and business continuity.
Deliverables: Risk and Control Matrices (RACM), system descriptions, policy and configuration reviews, and final ITGC audit reports.
SCM Probity & Compliance Reviews — For public entities and organisations requiring procurement assurance
Independent testing of procurement transactions against applicable legislation, National Treasury requirements and internal SCM policies. Reviews cover competitive bidding, delegations, segregation of duties, contract completeness, supplier due diligence and compliance exceptions.
Deliverables: Transaction-level compliance testing, exception reporting and probity assurance reports.
Enterprise Risk Management (ERM) Advisory — For boards and risk committees
Independent review and improvement of risk management frameworks aligned with COSO, King IV and ISO 31000. Services include risk management policy reviews, enterprise risk assessments, fraud risk management, RACM development and Audit and Risk Committee charter reviews.
Internal Audit as a Service — For organisations requiring additional internal audit capacity
Co-sourced or managed internal audit delivery across the full audit lifecycle, from risk assessment and annual planning through fieldwork, reporting and follow-up, aligned with the IIA International Standards.
AI & GRC — AI-powered tools for audit, risk, governance and compliance
Muzamani combines professional audit and GRC expertise with AI, automation and reusable digital tools to improve how assurance work is planned, performed, documented and reported.
Our approach focuses on appropriate use of AI, evidence validation, confidentiality, information security and governance of AI-generated outputs.
Available as: AI prompt libraries, audit workpaper toolkits, AI-assisted audit workflows, digital audit products, AI training and AI & GRC consulting.
Why Muzamani
- Senior assurance experience across internal audit, IT audit, SCM probity and enterprise risk management, supported by senior leadership experience including Chief Internal Auditor and Finance Director roles in public sector and municipal environments.
- Standards-based delivery with engagements scoped and reported against relevant frameworks and professional standards, including COBIT, ISO 27001, ISO 31000, King IV, COSO, the IIA International Standards, PFMA and MFMA.
- Regional and international experience with consulting and audit assignments in South Africa, Zimbabwe, Malawi, Namibia, Botswana, Mozambique and Zambia, serving public sector, private sector and NGO clients across energy, transport, mining, municipal and donor-funded environments.
Frequently Asked Questions
What is an ITGC audit
An IT General Controls (ITGC) audit assesses the controls supporting an organisation’s IT environment, including user access, change management, security, backup and recovery. Effective ITGCs support the reliability of financial and operational systems and can help organisations identify control weaknesses before they affect audit outcomes or business operations.
Who conducts independent SCM probity and compliance reviews?
Muzamani conducts transaction-level SCM probity and compliance reviews covering areas such as competitive bidding, delegation of authority, segregation of duties, contract documentation and supplier due diligence. Reviews are assessed against applicable legislation, National Treasury requirements and the organisation’s approved SCM policies.
Can internal audit be outsourced or co-sourced for a municipality or SOE?
Yes. Muzamani provides co-sourced and managed internal audit services covering the audit lifecycle from risk assessment and annual planning through fieldwork, reporting and follow-up. Engagements can be structured around specific capacity gaps, annual audit plans or individual assignments.
Does Muzamani work with NGOs and donor-funded organisations?
Yes. Muzamani provides independent assurance to NGOs and donor-funded programmes, including procurement probity, grant compliance testing and internal control reviews. Work can be tailored to donor, funder and programme reporting requirements.
Does Muzamani operate outside South Africa?
Yes. Muzamani has experience delivering assignments in South Africa and Zimbabwe, with additional regional experience in Malawi, Namibia, Botswana, Mozambique and Zambia. International assignments can be undertaken where the required expertise and engagement arrangements are appropriate.
How is an engagement scoped and priced?
Each engagement is scoped according to the organisation’s requirements, risk profile, scope of work, complexity and reporting deadlines. Depending on the assignment, Muzamani can work on a fixed-fee, day-rate or retainer basis.
Considering an audit, review, or governance engagement?
Let’s scope it against your risk profile and reporting deadlines.