RFP for IT Audit of Info Security at Comm College System

The Colorado Office of the State Auditor is soliciting proposals from qualified organizations to conduct an IT performance audit of information security at the Colorado Community College System. The audit will assess CCCS's information security program for compliance with statutory requirements and evaluate the effectiveness of the program in protecting the communication and information resources that support CCCS's operations and assets. The audit will include procedures to test the design, implementation, and operating effectiveness of CCCS's information security controls and determine whether CCCS has effectively developed its information security program. Some key points about the job include: • The Colorado Community College System is the state's largest system of higher education, comprising 13 community colleges. • The system serves approximately 125,000 students annually, offering a wide range of academic, technical, and workforce development programs. • The system operates under the governance of the State Board for Community Colleges and Occupational Education. • The system's information security program is overseen by its Chief Technology Officer/Deputy CIO, in conjunction with other members of the IT leadership team. • The audit will be conducted in accordance with generally accepted government auditing standards. • The audit will include an evaluation of CCCS's oversight of and coordination with the various community colleges within the system. • The audit will include procedures to determine the system's compliance with the requirements noted in C.R.S. 24-37.5-404.5. Some key deliverables and timelines for the project include: • A written draft of findings, due approximately June 29, 2026 • A draft report, due approximately August 31, 2026 • A final report, due approximately November 2, 2026 • A presentation to the Legislative Audit Committee, approximately December 7, 2026