Procurement of Services for Engagement of Independent Third Party Auditor to Conduct Audit of PESCO IT System

The Peshawar Electric Supply Company (PESCO) through its Material Management department is procuring consultancy services for the engagement of an Independent Third Party Auditor to conduct a comprehensive audit of PESCO's IT System. This procurement is specific to PESCO HQ in Peshawar, Khyber Pakhtunkhwa, and is planned for the financial year 2026-27. The procurement method is National Single Stage-Two Envelope using Quality and Cost Based Selection (QCBS). Items being procured: - Independent Third Party Audit Services for PESCO IT System - Audit of Oracle ERP (E-Business Suite) - Audit of Integrated Billing System (IBS / MDM) - IT Infrastructure and Network Vulnerability Assessment and Penetration Testing (VAPT) - Preparation and submission of Inception Report, Gap Analysis, Vulnerability Assessment Report, Draft Audit Report, Final Audit Report, and Executive Presentation The scope includes detailed audit of Oracle ERP modules, billing systems, and IT infrastructure with risk rating classifications (High/Medium/Low). The audit will follow recognized frameworks such as COBIT, ISO 27001, NIST Cybersecurity Framework, and ISACA IT Audit Standards. The contract duration is 16 weeks with milestone-based payments. Eligibility criteria are stringent, requiring firms to have valid FBR registration, no blacklisting, and no conflict of interest with PESCO. The Lead IT Auditor must hold a valid and active CISA certification and have personally conducted at least one IT audit of a utility company. The firm must have at least five years of verifiable IT audit experience and proven expertise in auditing Oracle E-Business Suite and large-scale utility billing systems. Employment proof for all key personnel is mandatory. Key dates include a pre-bid meeting on July 13, 2026, clarification deadline on July 15, 2026, and bid submission deadline on July 20, 2026, at 10:00 AM via EPADS v2.0. Manual submissions are not accepted. The contact person is the Assistant Manager, Material Management, PESCO HQ, Room #310, reachable at +92-370-134-0084 or dm.mm@pesco.com.pk. A practical tip for bidders: Ensure timely registration and submission through EPADS v2.0 and provide complete documentation including bid security and all eligibility proofs to avoid disqualification. Attention to the detailed technical proposal and compliance with the eligibility criteria will be critical for success. This tender offers a significant opportunity for qualified consultancy firms specializing in IT audits within the utility sector to engage with a major power distribution company in Pakistan.