Discretionary Purchase Solicitation for External Quality Assessment for Compliance with Global Internal Audit Standards

The purpose of this Solicitation is to seek qualified proposals from eligible proposers to conduct a one-time external quality assessment (“EQA”) of the Agency’s internal audit function in accordance with Global Internal Audit Standards (“Standards”). This Assessment aims to evaluate whether the internal audit activity was appropriately designed and functioning effectively to provide reasonable assurance of adherence to Global Internal Audit Standards (“GIAS”) during the period April 1, 2024, through March 31, 2026 (the “EQA Period”). In accordance with Article 15-A of the New York State Executive Law and Article 3 of the New York State Veterans’ Law, this Solicitation opportunity is limited to responses from NYS certified minority and/or women-owned business enterprises (“MWBEs”) and/or NYS certified Service disabled veteran owned business (“SDVOBs”) (SDVOBs and MWBEs collectively hereinafter referred to as “Proposer(s)” or “Firm(s)”). Proposers are required to submit certificate(s) from NYS Empire State Development (for MWBE Certified) and/or NYS Office of General Services (for SDVOB Certified) as evidence that they are certified. Scope of Services (“Scope of Work”)The DHCR and Housing Trust Fund Corporation (“HTFC” and HTFC collectively with DHCR referred to hereinafter as “DHCR/HTFC”) Office of Internal Audit (“OIA”) is inviting proposals from qualified Proposers to conduct a one-time EQA of the Agency’s internal audit function. The EQA will adhere to all the requirements set forth by the Institute of Internal Auditors (“IIA”) Standards. The EQA will include a comprehensive review of the adequacy of the internal audit functions. The scope will cover the time period agreed upon by the Contractor and the OIA. DHCR will award one contract, and the anticipated term will commence on September 14, 2026, and conclude by January 29, 2027. 6.1 Qualifications and ExperienceIn accordance with Standard 8.4 of the Standards, the Proposer conducting the EQA must possess the following qualifications:• At least one member of the external assessment team must be a Certified Internal Auditor;• Experience with and knowledge of the Standards and leading internal audit practices;• Experience as a chief audit executive or in a comparable senior level of internal audit management;• Experience in the organization’s industry or sector;• Previous experience performing EQA’s;• Completion of EQA training recognized by the IIA;• Attestation by assessment team members that they have no conflicts of interest, in fact or appearance;• At least three years of experience in the above qualifications and/or experience. 6.2 Audit RequirementsThe successful Proposer (“Contractor”) shall conduct an EQA of the OIA for the agreed upon scope. This one-time EQA of the internal audit function will be conducted in accordance with the Standards. The EQA will be conducted as a comprehensive review of Conformance with the Standards: Overall ethics and professionalism, governance of the internal audit function, management of the internal audit function and performance of the internal audit services. 6.3 Audit DeliverablesOngoing communication is required between the Contractor and the OIA regarding progress towards completion and results of the review. The Contractor must issue a Final Report (“Report”) and a Gap Assessment. The templates issued by IIA are suggested for use; however, an outcome similar in nature outlining each element of the standards, achievement conclusion, gaps, opportunities, and strengths would be accepted. The results of the EQA are to be reported as outlined by the IIA using their four-point quality rating and conclusion model. The two passing ratings are:• Full Achievement/Full Conformance; and• General Achievement/General Conformance.The two non-passing ratings include:• Partial Achievement/Partial Conformance; and• Nonachievement/Nonconformance. The Report which will present the full results of the EQA will not be issued until after a closing conference is held with the OIA. Feedback from the closing conference is to be included into the final Report. The Report will also state the objectives and scope of the assessment, the qualifications and independence of the assessment team or individual, the conclusions of Contractor, and action plans to address the issues of nonconformance with the Standards or opportunities for improvement as noted in the IIA Quality Assessment Manual, 2024 edition.The Contractor shall meet with the Commissioner of DHCR and the HTFC Audit Committee/Board as necessary. The Contractor must be present at the annual January 2027 HTFC Board and Audit Committee meetings in which the EQA results will be presented to the HTFC Audit Committee and Board for approval. The Contractor can present the EQA results at the December 2026 HTFC Audit Committee and Board meetings, if the work is concluded in advance of December 2026 meetings. The Contractor will present the HTFC Audit Committee and Board with the required communication(s) by the IIA including, but not limited to, the items in the Report as described in this Section 6. The Report may be shared with any HCR and HTFC Senior Management if it is so directed by the HTFC Board.