South African public sector internal auditors need training to audit AI agents used in supply chain checks, municipal billing queries and supplier payments. They must test held actions, approval rules, reviewer cover and certificates from the decision record. Findings and the audit opinion stay with them. POPIA, the Information Regulator and administrative fairness duties frame oversight.
Where does internal audit time go in South African government?
National and provincial departments, public entities and municipalities are required by public finance management law to keep internal audit functions and audit committees. A large share of the work is supply chain management: whether quotations and tenders followed the prescribed process, whether deviations were justified, and whether expenditure was irregular, fruitless or wasteful. Auditors also test payment of suppliers within the required period, asset registers, payroll, and performance information reported against the annual plan.
Municipal auditors add revenue: billing accuracy, indigent registers, meter readings and debt collection. The supreme audit institution's findings shape the next year's plan, and audit committees expect internal audit to show that management fixed what was reported.
What changes when agents arrive?
Agents are useful in exactly the document-heavy processes audit already covers. Each holds a depth the body has proven on its own cases.
- Supply chain compliance checks (depth 1). The agent checks a procurement file against the prescribed thresholds and process and lists gaps or deviations.
- Supplier invoice matching (depth 2). It matches invoice, order and goods received, and drafts the payment for a finance official to approve.
- Municipal billing queries (depth 2). It drafts replies to residents disputing a bill, citing readings and tariffs. An official sends.
- Indigent register checks (depth 1). It flags register entries that conflict with other municipal records.
Audit can also use an agent at depth 1 to test full populations from the append-only record, for example every supplier payment in a quarter against approval and timing.
What must auditors learn, and what stays with them?
Start with which skills matter. Our ranking of which AI agent skills matter most for internal auditors puts reading the decision record first, and that holds here, where irregular expenditure findings depend on proving who approved what.
Held actions are the next skill. When an agent drafts a supplier payment and holds it, the verdict names the person it waits for. Auditors should know how to trace that item: our guide on how internal auditors handle an action an AI agent has held explains it. A held payment that sat unreleased past the required period is a finding in itself.
Approval design is third. Auditors should test that the body has a clear rule for who may approve which held actions, and that it matches delegations. Our guide on how to set an approver rule for the internal audit team shows the format. Cover matters too: if the only approver is on leave, payments stall or someone without authority steps in. A reviewer rota for the internal audit team is the model to test against.
Finally, competence across the unit. An AI agent competency matrix for the internal audit team shows who can lead an agent audit and who needs support.
What stays with the auditor: the plan, the opinion, finding classification, and reporting to the audit committee. Certificates and depth can be tested by an agent; judgement cannot.
Which South African rules shape oversight and literacy?
POPIA governs personal information, including residents' billing records, indigent applications and employee data. It requires processing to be lawful, limited to its purpose and secured, and it restricts decisions based solely on automated processing that have legal consequences for a person. The Information Regulator enforces it. Auditors should test what personal information each agent can read and why.
Public bodies also carry administrative justice duties: administrative action must be lawful, reasonable and procedurally fair, and people may ask for reasons. An agent's draft must be explainable by the official who signs it. Access to information law means records, including the agent's record, may be requested.
The South African Reserve Bank, its Prudential Authority and the FSCA supervise the financial sector and do not govern a municipality's internal audit. ISO/IEC 42001 and the NIST AI Risk Management Framework give structure for an AI audit programme.
This is an explanation of the rules, not legal advice; confirm how they apply to you with counsel.
A 90-day training plan
Month one. All auditors learn the vocabulary of governed agents. Pryme Intelligence Academy's Foundations track does this in about four hours, free. The chief audit executive adds each agent to the audit universe.
Month two. Pilot an audit of supplier invoice matching. Test every held payment, who released it, when, and whether certificates were current. Test the approver rule and reviewer cover.
Month three. Write the agent audit programme, classify findings consistently, and report the pilot results to the audit committee.
Questions people ask
Can an agent's error create irregular expenditure?
The agent does not approve expenditure; an official does. If a held payment was approved without following the prescribed process, the finding sits with the approval, and the record shows where it went wrong.
Does POPIA allow an agent to read indigent applications?
Only for a defined, lawful purpose and with appropriate safeguards. Audit should test that access is limited to what the check needs.
What should the audit committee hear first?
Which agents are in use, at what depth, and whether held actions are being approved by the right people on time. The guide to AI agent skills by role helps explain each role's part.