Specialized Information Technology Auditing Services

The Vendor is required to provide specialized information technology (IT) audit services.
- Services will enhance the office ability to identify, assess, and mitigate risks associated with IT systems and processes within the department.
- This engagement will align with the Fiscal Year 2026 Annual Audit Plan and may involve assurance, auditing, and subject matter expertise services under a co-sourced arrangement.
- This includes but is not limited to:
• Reliability and integrity of financial and operational information;
• Effectiveness and efficiency of operations;
• Safeguarding assets; and
• Compliance with laws, regulations, and contracts.
- The office clients use information systems and applications for general accounting and financial reporting, inmate tracking and management, asset tracking and management, parole tracking and management, etc.
- Engagements may include assistance with risk assessment, internal audits, consulting services, and other related audit projects.
- Audit phases include:
• Planning – Obtain an understanding of designated business objectives and goals by researching regulatory requirements, related governing body guidance, industry best practices, and applicable policies/procedures. Identify key risks and assess the adequacy of current controls.
• Fieldwork – Prepare testing plans and planned procedures, validate existence and operation of management controls, determine overall condition of selected objectives, and develop recommendations based on audit results.
• Reporting – Prepare reports with audit results and recommendations, evaluate management responses to audit recommendations, and present final results and recommendations to or with the office.
- The contracted vendor will perform IT audit activities, including but not limited to:
• Evaluating IT governance, risk management, and control frameworks.
• Assessing cybersecurity practices and compliance with relevant regulations and standards.
• Auditing IT system implementations and upgrades.
• Reviewing data management, privacy, and security protocols.
• Identifying vulnerabilities in IT infrastructure and recommending mitigations.
• Providing detailed documentation and recommendations for remediation.
• Participating in meetings with the office to enhance understanding of processes and objectives.
- Contract Period/Term: 1 year