Description
The State of Colorado Department of Revenue (Lottery) is seeking a qualified, independent CPA firm licensed in Colorado to perform a SOC 1 Type 2 audit of the Lottery’s Central Gaming System and related internal controls. The audit must follow AICPA standards, produce two separate reports, and include bi‑weekly progress summaries, a controls summary sheet, and secure delivery of artifacts. The contract is expected to start July 1 2027 and run for one year, with possible extensions up to five years total.
• Audit scope: Central Gaming System (CGS) and Multi‑State Lottery Association (MUSL) mandated Internal Control System (ICS).
• Deliverables: Draft and final SOC 1 Type 2 reports, bi‑weekly progress summaries, controls summary sheet, secure portal for artifact delivery.
• Mandatory requirements: CPA firm licensed in Colorado, independent, with prior SOC or cybersecurity audit experience (minimum three SOC 1 Type 2 audits preferred) and MUSL lottery experience.
• Personnel: Minimum three experienced staff, at least one CPA; preferred CISSP and CISA certifications.
• Timeline: Transaction testing July 1 2027 – March 31 2028; final report acceptance June 1 2028.
• Submission deadline: December 16 2026 11:59 PM; contract start July 1 2027.
• Evaluation based on experience, scope compliance, and cost.