Colorado Office of the State Auditor IT Audit RFP
- Due
- Dec 12, 2025
- Deadline passed
- Posted
- Nov 14, 2025
- Primary contact
- Matt Devlin
The 30-second brief
Seeking proposals for an IT performance audit of information security at the Colorado Community College System (CCCS). The audit will evaluate CCCS's information security program for compliance with statutory requirements and assess its effectiveness in protecting communication and information resources.
Audit report, written findings, and presentation of the audit report.
Mandatory Criteria: 1. Organization is independent. General Criteria: 1. Adequacy and completeness of the proposal. 2. Qualifications and experience of personnel. 3. Comprehensiveness and appropriateness of the proposed work plan. 4. Proposed hours and cost. 5. Acceptance of the OSA's standard contract without significant revision.
Get notified when Colorado General Assembly | State of Colorado posts the next one.
Get alerts freeFree account · 30-second setup · No credit card
Summary
Seeking proposals for an IT performance audit of information security at the Colorado Community College System (CCCS).
The audit will evaluate CCCS's information security program for compliance with statutory requirements and assess its effectiveness in protecting communication and information resources.
EVALUATION CRITERIA
Mandatory Criteria: 1. Organization is independent. General Criteria: 1. Adequacy and completeness of the proposal. 2. Qualifications and experience of personnel. 3. Comprehensiveness and appropriateness of the proposed work plan. 4. Proposed hours and cost. 5. Acceptance of the OSA's standard contract without significant revision.
REQUIRED DELIVERABLES
3- Audit report
- Written findings
- Presentation of the audit report
REQUIRED ATTACHMENTS
Standard OSA contract and related exhibits (in Section IV).
- Submit to
- [email protected]
- Scope location
- Colorado Community College System and its 13 colleges
- Reported agency
- Colorado Office of the State Auditor
Questions about this RFP
How do I respond to this RFP from Colorado General Assembly | State of Colorado?
Review the full solicitation document for submission requirements, evaluation criteria, and deadlines. The submission deadline is December 12, 2025. The solicitation specifies required deliverables that must be addressed in your response. Be sure to include all required attachments as outlined in the solicitation. Submissions should be delivered to: [email protected]. For questions, contact Matt Devlin.
Can small businesses or minority-owned firms bid on this RFP?
Most government agencies, including Colorado General Assembly | State of Colorado in CO, encourage participation from small businesses, minority-owned, women-owned, and disadvantaged business enterprises (MBE/WBE/DBE). Check the full solicitation for any small business participation goals.
What happens after the RFP submission deadline?
After the deadline, the issuing agency reviews all submissions against the stated evaluation criteria. This typically includes a compliance check, technical evaluation, cost analysis, and may involve oral presentations with shortlisted vendors.
Can I ask questions about this solicitation before submitting?
Yes, most solicitations allow vendors to submit questions during a designated period. The primary contact is Matt Devlin. Questions and answers are typically shared with all prospective bidders.
What are the key deliverables?
The solicitation specifies the following deliverables: Audit report, written findings, and presentation of the audit report.. Proposals should clearly address how each deliverable will be met.
Show 4 more questions
What are the evaluation criteria for this solicitation?
This solicitation includes specific evaluation criteria that will be used to score proposals. The criteria include: "Mandatory Criteria: 1. Organization is independent. General Criteria: 1. Adequacy and completeness of the proposal. 2. Qualifications and experience of personnel. 3. Comprehensiveness and appropriaten..." Vendors should carefully align their proposals with each criterion to maximize their score.
Where can I find more RFPs from Colorado General Assembly | State of Colorado?
All active and historical solicitations from Colorado General Assembly | State of Colorado are tracked and searchable. As a state agency, Colorado General Assembly | State of Colorado regularly publishes solicitations. Visit the agency profile to see current open bids, past contracts, vendor relationships, and decision-maker contacts.
What documents are required to bid on this RFP?
Requirements vary by solicitation, but common documents include a technical proposal, cost/price proposal, proof of insurance, relevant certifications, past performance references, and any forms specified in the solicitation. This solicitation specifically requires the following attachments: Standard OSA contract and related exhibits (in Section IV).. Review the full document from Colorado General Assembly | State of Colorado for the complete list.
What is the scope of this project?
This solicitation defines a specific project scope. The scope covers the following locations: Colorado Community College System and its 13 colleges. Review the full solicitation for detailed scope requirements.