Internal Audit Management Software Solution

New York City School Construction Authority Internal Audit Management Software Solution Description Request for Expression of Interest by the New York City School Construction Authority (“SCA”) from qualified vendors to provide an integrated Internal Audit and Enterprise Risk management software. Background SCA’s Internal Audit division currently operates in a co-source model and is partnered with a 3rd party auditing firm. The 3rd party auditing firm, guided by SCA directives, is responsible for developing an Internal Audit plan, executing 8-12 audits, and various consulting projects annually. This effort includes stakeholder interviews, document and data requests, testing and field visits, as well as workpaper development and report writing. SCA personnel, notably the Director of Enterprise Risk, the Senior Manager of Internal Audit and the Internal Audit Operations Manager, primarily manage the inputting of data into the current software and oversee the implementation of management

action plans (“MAPs”) in response to audit recommendations. Software Requirements The desired internal audit management software should offer a comprehensive solution for organizing and maintaining critical audit documentation such as workpapers, final audit reports, and support for tracking and facilitating stakeholder and management responses. Key functionalities should include, but are not limited to: Efficient management and storage of audit artifacts and reports. Facilitation and tracking of auditee/stakeholder documents and data requests. Tracking and monitoring status of on-going audits. Tracking and support for management responses to audit recommendations and MAP implementation. Capability to provide narrative updates and record support for MAPs. Development of dashboards and reports for internal audit, management, and the Audit Advisory Committee, with filters for department, business unit, and audit report. Features supporting risk assessments for streamlined annual Internal Audit plan development. Automation of manual internal audit processes (e.g., audit kickoff notifications, MAP target date reminders). Customization potential for additional modules. o i.e. Support for the SCA’s Enterprise Risk Management program Application Programming Interface - Compatibility with existing systems, visualization tools and data mitigation. View only access for internal stakeholders. Knowledge of SharePoint 2019 on premises for data migration. Snapshot comparison for time period X to Y, and ability to track movements of MAPs audit. Submission Requirements Interested vendors are required to submit the following information: Company Overview: Brief history, size, and description of your company. Product Details: Comprehensive details of the software solution, including functionalities that meet SCA specified needs. Experience and References: Evidence of prior successful implementations, particularly in public sector or educational institutions, with contactable references. Compliance and Security: Description of compliance with relevant security standards and data protection regulations. Implementation and Support: Outline of proposed implementation process (including projected timeline and cost), training, and ongoing support services. Licensing and Pricing: Overview of licensing models, pricing structures, and any additional costs. If your firm is capable of and interested in providing these Services to the SCA, please provide a brief description of your firm along with current contact information to the contact listed. This is a preliminary survey to ascertain your firm’s interest in contemplating a contract with the SCA for the Services. Neither the SCA nor the potential proposer is making any commitment as a result of this preliminary survey. Although proposing firms need not be pre-qualified by the SCA at the time of proposal, each firm must be pre-qualified prior to contract award. If you have any questions, comments or concerns, please reach out to the contact person listed. Interested firms should respond by submitting their expression of interest no later than April 24th, 2024 via email to the contact listed. All questions regarding this RFEI shall be emailed to the below contact. The SCA shall not be held liable for any pre-award activity or costs incurred by your firm for preparation and delivery of its response, producing materials, or attending meetings or any labor, in connection therewith. Responses received will not impact potential future bidding opportunities. Martina Mercaldo Manger of Operations, Contract Administration New York City School Construction Authority 25-01 Jackson Avenue Long Island City, NY 11101 mmercaldo@nycsca.org We look forward to your submissions and thank you for your interest in supporting the SCA.