Description
The State of Colorado is seeking a vendor to perform a SOC 1 Type II audit for the Colorado Benefits Management System (CBMS) and the Program Eligibility and Application Kit (PEAK). The audit will include a readiness assessment and a report. The state is looking for a vendor that can provide a comprehensive audit and remediation recommendations. The scope of the audit includes CBMS and PEAK, with a Salesforce frontend and an AWS backend managed on an Oracle database. The state is expecting a single report and is open to either an inclusive or carve-out method for subservice organizations.
• The state's fiscal year is July 1st through June 30th 2027
• The audit period is expected to be July 1, 2026, through June 30, 2027
• The state is expecting a mid-June kickoff, with fieldwork in July and August, and draft and final reports in September
• The state is expecting weekly or bi-weekly status meetings
• The state is expecting two review cycles, one for the state and one for the primary vendor
• The contract is expected to be for one mandatory year, with four additional option years
Attached files
Contact
Michael Whalen(Buyer)