University of Arkansas - IT Internal Audit Co-Sourced Services - RFP No. 261007 (2026)
University Of ArkansasHigher Ed · Fayetteville, AR- Due
- Nov 10, 2026
- 13 days left
- Posted
- Oct 7, 2026
- Contract term
- 2 years
- Primary contact
- Terry Fuquay
The 30-second brief
The University of Arkansas System is soliciting proposals from qualified audit firms to provide internal information technology (IT) audit services, including audits and advisory projects. The selected firm will co-source internal audits of technology such as IT governance, cybersecurity, cloud, data governance, privacy, general IT controls, and enterprise applications. The estimated workload is approximately 1,500 to 2,000 hours of audit overage on an annual basis, with services beginning in fiscal year 2027. The contract term is an initial two years with options to renew for up to five additional years, for a combined total of up to seven years. Proposals are due by November 10, 2026, at 2:30 PM CST. Questions are due by October 21, 2026.
IT internal audit services, IT risk assessment planning, Audit reports of observations and recommendations, IT governance audits, Cybersecurity audits, Cloud audits, Data governance audits, Privacy audits, General IT controls audits, Enterprise application audits
Complete/Thorough Proposal (30 Points), Offeror Qualification (40 Points), Cost (30 Points)
Get the decision makers at University Of Arkansas before you write a word.
Get decision-maker emailsFree account · 30-second setup · No credit card
Summary
The University of Arkansas System is soliciting proposals from qualified audit firms to provide internal information technology (IT) audit services, including audits and advisory projects.
The selected firm will co-source internal audits of technology such as IT governance, cybersecurity, cloud, data governance, privacy, general IT controls, and enterprise applications. The estimated workload is approximately 1,500 to 2,000 hours of audit overage on an annual basis, with services beginning in fiscal year 2027. The contract term is an initial two years with options to renew for up to five additional years, for a combined total of up to seven years. Proposals are due by November 10, 2026, at 2:30 PM CST. Questions are due by October 21, 2026.
EVALUATION CRITERIA
REQUIRED DELIVERABLES
10- IT internal audit services
- IT risk assessment planning
- Audit reports of observations and recommendations
- IT governance audits
- Cybersecurity audits
- Cloud audits
- Data governance audits
- Privacy audits
- General IT controls audits
- Enterprise application audits
REQUIRED ATTACHMENTS
7- Official Price Sheet
- Offeror Information/References
- Contract and Grant Disclosure and Certification Form
- Conflict of Interest Form
- Proof of Insurance
- Signed RFP cover sheet
- Redacted copy (if applicable)
- Submit to
- University of Arkansas System, 2404 N. University Ave., Little Rock, AR 72207, Attn: Terry Fuquay
- Duration
- 84 months
- Scope location
- Little Rock, AR
- Reported agency
- University of Arkansas
Questions about this RFP
How do I respond to this RFP from University Of Arkansas?
Review the full solicitation document for submission requirements, evaluation criteria, and deadlines. The submission deadline is November 10, 2026. The solicitation specifies required deliverables that must be addressed in your response. Be sure to include all required attachments as outlined in the solicitation. Submissions should be delivered to: University of Arkansas System, 2404 N. University Ave., Little Rock, AR 72207, Attn: Terry Fuquay. For questions, contact Terry Fuquay.
Can small businesses or minority-owned firms bid on this RFP?
Most government agencies, including University Of Arkansas in AR, encourage participation from small businesses, minority-owned, women-owned, and disadvantaged business enterprises (MBE/WBE/DBE). Check the full solicitation for any small business participation goals.
What happens after the RFP submission deadline?
After the deadline, the issuing agency reviews all submissions against the stated evaluation criteria. This typically includes a compliance check, technical evaluation, cost analysis, and may involve oral presentations with shortlisted vendors.
Can I ask questions about this solicitation before submitting?
Yes, most solicitations allow vendors to submit questions during a designated period. The primary contact is Terry Fuquay. Questions and answers are typically shared with all prospective bidders.
What are the key deliverables?
The solicitation specifies the following deliverables: IT internal audit services, IT risk assessment planning, Audit reports of observations and recommendations, IT governance audits, Cybersecurity audits, Cloud audits, Data governance audits, Privacy audits, General IT controls audits, Enterprise application audits. Proposals should clearly address how each deliverable will be met.
Show 6 more questions
What are the evaluation criteria for this solicitation?
This solicitation includes specific evaluation criteria that will be used to score proposals. The criteria include: "Complete/Thorough Proposal (30 Points), Offeror Qualification (40 Points), Cost (30 Points)" Vendors should carefully align their proposals with each criterion to maximize their score.
Where can I find more RFPs from University Of Arkansas?
All active and historical solicitations from University Of Arkansas are tracked and searchable. As a higher ed agency, University Of Arkansas regularly publishes solicitations. Visit the agency profile to see current open bids, past contracts, vendor relationships, and decision-maker contacts.
What is the contract term for this solicitation?
The anticipated contract term is 2 years. Contract terms may include renewal options.
Is this solicitation still open for submissions?
Based on the posted deadline of November 10, 2026, this solicitation appears to still be accepting submissions. Deadlines may change through amendments or addenda, so always verify the current status directly with the issuing agency before preparing your response.
What documents are required to bid on this RFP?
Requirements vary by solicitation, but common documents include a technical proposal, cost/price proposal, proof of insurance, relevant certifications, past performance references, and any forms specified in the solicitation. This solicitation specifically requires the following attachments: Official Price Sheet, Offeror Information/References, Contract and Grant Disclosure and Certification Form, Conflict of Interest Form, Proof of Insurance, signed RFP cover sheet, redacted copy (if app. Review the full document from University Of Arkansas for the complete list.
What is the scope of this project?
This solicitation defines a specific project scope. The scope covers the following locations: Little Rock, AR. Review the full solicitation for detailed scope requirements.