EGB FY26 CBMS REQ 12773568, DQ 2026000520 SOC Audit

The State of Colorado, Office of Information Technology (OIT) is soliciting competitive responsive proposals from experienced organizations to perform a System and Organization Controls (SOC) 1 Type II audit within the Colorado Benefits Management System (CBMS), Program Eligibility & Application Kit (PEAK) and related applications. The audit will assess the operating effectiveness of controls relevant to the Department's financial reporting as required for compliance with the Colorado Office of the State Controller requirements. The contractor will be expected to create an audit plan, conduct a readiness assessment, and perform the SOC 1 Type II audit in accordance with the American Institute of Certified Public Accountants (AICPA) Statement on Standards for Attestation Engagements (SSAE 18) and related guidance. • The contractor will be responsible for creating an audit plan, conducting a readiness assessment, and performing the SOC 1 Type II audit. • The contractor will be expected to provide reports in the format directed by the Department. • The contractor will be responsible for post-audit maintenance, including correcting any errors or irregularities discovered after the finalized report is completed and delivered to leadership.