Fayette County Public Schools Sealed Solicitation
Title: IT Auditing Services
Deadline: 1/4/2024 2:00 PM (UTC-05:00) Eastern Time (US & Canada)
Status: Awarded
Solicitation Number: 01-24
Description:
Fayette County Public School is seeking proposals from qualified firms to provide comprehensive IT audit services. The primary objective of this audit is to evaluate the effectiveness, efficiency, and security of the district's information technology systems.
Documents:
| Documents as of 12/1/2023 |
|---|
| RFP 01-24 IT Auditing Services.pdf |
Addition 1
Posted: 1/5/2024
Type of Addition: In Review
Overview: 5 responses
Addition 2
Posted: 3/26/2024
Type of Addition: Award Information
Overview: RFP was awarded to Weaver & Tidwell LLP
Documents:
Question 1
Posted: 12/8/2023
Question: When was the last time these IT areas were audited?
Response: Cyber Resilience – January 2023 Cyber Infrastructure – July 2023 Assessment of Processes and Internal Controls of IT – Sept 2021
Question 2
Posted: 12/8/2023
Question: Does the scope include sampling individual school IT environments as well? Or is it focused only on the administrative IT environment?
Response: This would include all areas.
Question 3
Posted: 12/8/2023
Question: Could you provide more details on the expected scope of the IT environment? a. Number and types of networks b. Approximate number of key applications (e.g., Learning Management System, Student Information System, CRM, Catalog Management System, Student Communication Platform, Email Marketing Platform, Student Portal, Faculty/Staff Management System, Event Management System, Athletics Management System, General Ledger, Fixed Assets, HRIS, Data Lake, etc.)? c. Number of data centers d. Variety of server operating systems and databases e. Approximate number of IT related vendors
Response: a. one network for the district b. information not available c. one datacenter for the district d. primarily windows servers e. information not available
Question 4
Posted: 12/8/2023
Question: Approximately how many people are in the IT department?
Response: 90
Question 5
Posted: 12/8/2023
Question: Approximately how many people will we need to interview as part of the IT audit?
Response: This would be something that the firm would need to determine.
Question 6
Posted: 12/8/2023
Question: What portion of the work is acceptable to be performed remotely?
Response: Acceptable to be remotely completed, presentation would need to be in person.
Question 7
Posted: 12/8/2023
Question: Should travel cost be included as a separate line item in the fee proposal?
Response: Travel cost should be a separate line item.
Question 8
Posted: 12/8/2023
Question: Is the assumption of 500 hours for price comparison only? Or is 500 hours the anticipated budget for the work to be performed?
Response: The 500 hours is for price comparison only.
Question 9
Posted: 12/8/2023
Question: Is the selected firm expected to provide one IT audit report that includes the suggested IT audit areas on page 14? Or multiple IT audit reports?
Response: Each audited area would be separate report.
Question 10
Posted: 12/8/2023
Question: What are the expected deliverables (e.g., listing of findings and recommendations, firm-branded report, testing workpapers, etc.)?
Response: Deliverables would be formal audit report, including finding, recommendations, management comments. Copy of testing workpapers should be provided.
Posted: 1/5/2024
Type of Addition: In Review
Overview: 5 responses
Posted: 3/26/2024
Type of Addition: Award Information
Overview: RFP was awarded to Weaver & Tidwell LLP
Documents:
Posted: 12/8/2023
Question: When was the last time these IT areas were audited?
Response: Cyber Resilience – January 2023 Cyber Infrastructure – July 2023 Assessment of Processes and Internal Controls of IT – Sept 2021
Posted: 12/8/2023
Question: Does the scope include sampling individual school IT environments as well? Or is it focused only on the administrative IT environment?
Response: This would include all areas.
Posted: 12/8/2023
Question: Could you provide more details on the expected scope of the IT environment? a. Number and types of networks b. Approximate number of key applications (e.g., Learning Management System, Student Information System, CRM, Catalog Management System, Student Communication Platform, Email Marketing Platform, Student Portal, Faculty/Staff Management System, Event Management System, Athletics Management System, General Ledger, Fixed Assets, HRIS, Data Lake, etc.)? c. Number of data centers d. Variety of server operating systems and databases e. Approximate number of IT related vendors
Response: a. one network for the district b. information not available c. one datacenter for the district d. primarily windows servers e. information not available
Posted: 12/8/2023
Question: Approximately how many people are in the IT department?
Response: 90
Posted: 12/8/2023
Question: Approximately how many people will we need to interview as part of the IT audit?
Response: This would be something that the firm would need to determine.
Posted: 12/8/2023
Question: What portion of the work is acceptable to be performed remotely?
Response: Acceptable to be remotely completed, presentation would need to be in person.
Posted: 12/8/2023
Question: Should travel cost be included as a separate line item in the fee proposal?
Response: Travel cost should be a separate line item.
Posted: 12/8/2023
Question: Is the assumption of 500 hours for price comparison only? Or is 500 hours the anticipated budget for the work to be performed?
Response: The 500 hours is for price comparison only.
Posted: 12/8/2023
Question: Is the selected firm expected to provide one IT audit report that includes the suggested IT audit areas on page 14? Or multiple IT audit reports?
Response: Each audited area would be separate report.
Posted: 12/8/2023
Question: What are the expected deliverables (e.g., listing of findings and recommendations, firm-branded report, testing workpapers, etc.)?
Response: Deliverables would be formal audit report, including finding, recommendations, management comments. Copy of testing workpapers should be provided.