Provision of IT audit services

Tender description

The Council requires a cost effective and quality IT audit service to be delivered that will complement the services that are already being provided by the in-house internal audit staff. A key objective of the contract is to secure an integrated service between the successful Contractor and the in-house internal audit team. In addition to information on price, tender submissions are required to include an indicative work programme for the period January 2017 to March 2019. Tenders will not be considered if an indicative work programme is not provided. The indicative work programme should detail the number of days allocated to each review and be consistent with: • CIPFA guidelines for Information Technology audits; • the requirements of the Information Technology Infrastructure (ITIL) framework; and • any potentially new or currently developing risk areas that may impact upon the delivery of the Council’s IT Services. The Contractor shall undertake IT audits, with a focus on those of a specialist / technical nature, to evaluate the Council’s information technology infrastructure, policies, operations, systems and processes and check compliance with mandatory governance requirements e.g. PSN, PCI DSS. Audits will include examination of overall business and financial controls that involve information technology systems as well as physical security controls and ensure information-related controls and processes are working properly. Audits will determine risks to the Council’s information assets, help identify methods to minimise those risks, ensure information management processes are in compliance with IT-specific laws, policies and standards and identify any inefficiencies.