From little IT-mice involved with the SANRAL project, I got whispers that the complete IT-infrastructure and implementation is a complete mess. If you think that COJ billing system is an abortion, re-think - SANRAL is several magnitudes worse. Aside from the billing system being inaccurate and issues in the collection process there are a ton of operational errors and oversights. Not just security issues, but also up-time, performance- and stability problems. The system is incapable of performing a proper bill-run and will fail a governance and a financial audit.
The government is too arrogant to scrape the project altogether and tax-payers will have to face a defunct system for years to come. With the exception of SARS (and even they are plagued with data-leaks, down-time and crashes, but are quite capable of managing the systems with their IT partners), there is no other government department which is capable of running IT properly without spending billions of Rands annually.