(1) Vendor needs to provide cloud-based audit management system.
- Identify any single sign-on offerings for the application
- Provide multiple security levels in the application that allow for a separation of duties
- Compatibility with Microsoft Office products: Word, Excel, and PowerPoint
- Configurable to aid in compliance with IIA Standards and agile capability
- Production and test environment
- Capability to facilitate university-wide risk assessment by allowing management/business
process owners' access to document risks, controls, and score related impact and
likelihood of inherent risk
- Capability for risk assessment reporting to allow to share results of the university wide risk assessment with Audit Committee and university management. - System process description
- Objectives
- Risks and mitigating controls
- Tests to examine effectiveness of controls
- Evidence obtained in performing the tests
- Results from tests including elements of a finding
- Recommendations
- Management responses and agreed action plans for issues reported
- Review Notes and other correspondence
- Documentation of workpaper review
- Ability to assign specific audit steps to auditors
- Two-way cross referencing between documents, and support point-to-point hyperlinks for
Word, Excel, PowerPoint, and PDF files
- Ability to print completed workpapers, review notes, audit programs, and other electronic
documentation created within the system
- Provide flexibility to add/delete/modify audit steps in standard audit programs
- Allow for search capabilities within audit findings, projects, and document library
- Ability to create severity ratings and assign them to findings
- Ability to write review notes with links to targeted workpapers
- Ability to attach scanned documents and annotate documents (Word, Excel, PowerPoint,
and PDF) with standard tick marks/comments from within the application (without
additional software license requirements)
- Provide standard reports for common inquiries such as audit planning, audit tracking,
outstanding issues, and timesheet reports
- Ability to easily customize the standard audit report and other ad-hoc reports
- Allow for custom reports to be saved in Word, Excel, or PDF formats
- Allow distribution of reports via email
- Must provide on-line access that allows management responses to be automatically populated
in the system
- Allow for customer surveys to be generated and feedback recorded
- Ability to track and report on issues in a variety of ways including audit project, audit
manager, departmental area, or finding type/category
- Ability to track time for audit projects, training, other chargeable and non-chargeable
activities
- Capture time by project with the ability to report on actual versus budgeted time
- Track planned and unplanned hours for an audit assignment
- Ability to generate administrative reports by auditor, completed projects, and projects in progress
(2) All question must be submitted no later than July 5, 2023.
↧