Computer audit services

Tender description

Durham University is seeking to appoint an IT auditor as part of its cycle of full market testing. The contract will commence on 1 January 2021 and is for a period of 3 years, with two possible extensions of 1 year each (3 + 1 + 1), subject to supplier performance and requirement. The opportunity can be viewed at http://events.transaxions.com/service.aspx?event=6815 The University wishes to establish a contract with a professional services firm to provide IT audit services as required by the Director of University Assurance Service (UAS). We would like the incoming firm to undertake a baseline assessment to shape the development of the strategic and annual audit plans. We would expect the incoming provider to have expertise in business strategy and capability as well as experience in supporting organisations through digital transformation and being a catalyst and enabler for change. The core of the work is likely to be risk-based computer audit work, with an emphasis on controls and compliance in the following domains: — Cybersecurity, — data, — infrastructure (including technical debt), — information (including physical records) management. The University wishes, however, to maintain a flexible approach to this arrangement to enable the UAS to respond in an agile way to the University's changing business priorities and risks. This may include providing advisory work, analytical support for audit work completed by the in-house team, developing embedded (continuous) audit procedures, project assurance for new system developments or support for forensic investigations (where required). The Director of UAS is also keen for the provider to feed in best practice experience and comparative data from the sector and wider. The University intend on awarding a 3 + 1 + 1 contract (with an annual review on performance). The opportunity can be viewed at http://events.transaxions.com/service.aspx?event=6815