RFP for IT Audit of Info Security at Comm College System

The Colorado Office of the State Auditor is seeking a qualified organization to conduct an IT performance audit of information security at the Colorado Community College System. The audit will assess the system's information security program for compliance with statutory requirements and evaluate the effectiveness of the program in providing adequate protection for the communication and information resources supporting its operations and assets. The successful bidder will be responsible for planning and conducting the audit, developing complete written findings, and presenting the audit report to the Legislative Audit Committee. • The audit will include an evaluation of the system's information security governance and operations. • The audit will assess the system's compliance with statutory requirements and industry leading practices. • The audit will include procedures to test the design, implementation, and operating effectiveness of the system's information security controls. • The audit will evaluate the system's oversight of and coordination with the various community colleges within the system. • The audit will include a review of the system's information security awareness training and incident response planning.