A government authority in Houston, Texas is seeking a vendor to provide comprehensive internal audit services. The chosen firm will be responsible for performing annual Enterprise and Information Technology Risk Assessments and developing a Risk-Based Audit Plan. This entails documenting agency-specific risks, prioritizing key risks, and creating a robust Audit Universe to guide the prioritization and development of audit plans.

The selected provider must manage and execute board-approved internal audit plans on a yearly basis, ensuring each audit aligns with the International Professional Practices Framework (IPPF) of the Institute of Internal Auditors (IIA) and, for IT audits, with the standards set by the Information Systems Audit and Control Association (ISACA). Key tasks include developing detailed audit programs, appropriately documenting project work, and ensuring audit findings are well supported, reviewed, and reported to stakeholders. A pre-proposal conference is scheduled for March 18, 2026, and all questions should be submitted by March 25, 2026.