Alaska Online Public Notices #RFP 27-33-02

Alaska IT controls examinations for IRIS and ALDER financial reporting systems

Alaska’s Division of Legislative Audit is seeking an independent examination of controls in its IRIS and ALDER financial reporting systems. - Buyer: Alaska Legislative Branch, Division of Legislative Audit, through the Legislative Affairs Agency’s Procurement & Contracting Section. - Systems and named OEMs/platform vendors: IRIS is based on CGI Advantage ERP, with CGI supporting the system; ALDER is a reporting data warehouse using Microsoft Azure (West US 2) and Oracle Cloud Infrastructure. - Requested services: Examine the design and operating effectiveness of IT general and application controls for both systems across FY 2027 and FY 2028. Assess management assertions, identify significant control gaps, and apply AICPA attestation standards, applicable Government Auditing Standards, and all Trust Services Criteria. - Engagement approach and deliverables: This is not a SOC engagement, although it is modeled on SOC 2. Provide separate reports and schedules of findings for each system, with control weaknesses, recommendations, management responses, supporting procedure documentation, and presentations of findings. - Notable requirements: At least 55% of total engagement hours across all personnel must be performed on site in Juneau. Include travel and per diem in the proposed price; travel is limited to Juneau. Relevant CGI and subservice-organization SOC reports may be reviewed, with carve-out treatment permitted where applicable. - Purchases: No equipment, software licenses, part numbers, or product quantities are requested.

Description

The Alaska Division of Legislative Audit seeks sealed proposals to examine FY 2027 and FY 2028 information technology general and application controls for the Integrated Resource Information System (IRIS) and Alaska Data Enterprise Reporting System (ALDER). The contractor will test control design and operating effectiveness and assess compliance with applicable AICPA attestation standards and Government Auditing Standards. Work includes assessing whether management assertions are complete and identifying material missing controls related to financial accounting and reporting. Deliverables include an Independent Accountant’s Report on Management Assertions for each system and a Schedule of Findings with control weaknesses and recommendations.

View original listing