1-NC2615-Cost Proposal FINAL.xlsx
XLSX spreadsheet 13 KB Posted
- Attached to
- IT General Controls and Cybersecurity Audit RFP
- Solicitation number
- NC2615
- Issued by
- Cook County, Illinois
About this file
This is a cost proposal document for the City Colleges of Chicago's Request for Proposals (RFP) #NC2615-ITGC and Cybersecurity Audit. The proposal outlines audit services designed to strengthen the reliability and integrity of CCC's core systems, improve control over access to critical systems and data, and reduce risk from IT change and operational processes. The proposed engagement includes five primary role categories: Engagement Partner/Executive Oversight, Audit Manager/Engagement Lead, Senior IT Auditor/Cybersecurity Auditor, IT Auditor/Staff Auditor, and Penetration Testing Specialist (Assurance Aligned). The audit scope encompasses IT General Controls across access, change, operations, and interfaces; cybersecurity governance and risk management; control design and operating effectiveness testing; and scoped penetration testing aligned to NIST SP 800-115, including external perimeter testing and limited internal validation of two critical applications. Proposals were due no later than Friday, July 17, 2026 by noon (CST).
The cost proposal template specifies role-based staffing with skill levels, hourly rates, estimated total hours, and corresponding costs, though the actual rates and hours are not populated in this template document. The audit work is expected to integrate IT General Controls, cybersecurity, and penetration testing findings while ensuring consistency with GIAS, COBIT, and NIST frameworks. The engagement includes development of audit workplans, risk assessments, fieldwork coordination, and draft and final report preparation. The RFP includes participation goals for certified Minority Business Enterprises (MBE) at 25 percent and Women Business Enterprises (WBE) at 7 percent.
View the file
Other files
On GovTribe
Work with this file
- Download the original file
- Contacts named in this file
- Similar government files
- Ask GovTribe AI about this file
Text version
Cost Proposal
| CITY COLLEGES OF CHICAGO |
| Request For Proposals (RFP) #NC2615-ITGC And Cybersecurity Audit RFP - COST PROPOSAL |
| Proposals due: no later than Friday, July 17, 2026 by noon (CST) |
| Proposer's Name: |
| Role | Brief Description of Activitities to be Performed | Skill Level | Hourly Rate | Estimated Total Hours | Total Cost | Notes |
| Engagement Partner / Executive Oversight | Executive oversight and accountability for the audit. Reviews and approves: audit workplan, key judgment areas, and draft/final report. | Advanced Internal Audit leadership and professional judgment. | $ - 0 | |||
| Audit Manager / Engagement Lead | Day-to-day leadership of audit. Primary point of contact for CCC. Leads: risk assessment and audit planning, workplan development, and fieldwork coordination and review. Ensures: integration of ITGC, cybersecurity, and penetration testing, consistency and quality of audit documentation, findings and conclusion align to GIAS, COBIT, and NIST. Oversees draft and final report development. | Advanced auditor with integrated ITGC, cybersecurity, and internal audit expertise. | $ - 0 | |||
| Senior IT Auditor / Cybersecurity Auditor | Executes core audit fieldwork across: IT General Controls (access, change, operations, interfaces), and cybersecurity governance, risk management, detection, response, and resilience. |
Performs: control design and operating effectiveness testing, and walkthroughs, preliminary findings, and sampling.
| Drafts: workpapers, preliminary findings and technical input for risk assessments and reporting. | Experienced auditor in ITGC and cybersecurity assurance. | $ - 0 | ||||
| IT Auditor / Staff Auditor | Supports fieldwork execution through evidence collection, log and access review support, and documentation and testing assistance. | Foundational to intermediate internal audit and IT control proficiency. | $ - 0 | |||
| Penetration Testing Specialist (Assurance Aligned) | Conducts scoped penetration testing aligned to NIST SP 800-115. Performs: External perimeter testing, limited internal or assumed-breach validation, and testing 2 critical applications. Documents methods, results and limitations. Works closely with the Audit Manager and Sr Auditor to: integrate results into findings and avoid standalone or tool-only reporting. | Specialized technical auditor supporting internal audit assurance. | $ - 0 | |||
| 0 | $ - 0 |
| Other Roles: (if Applicable) | Brief Description of Activitities to be Performed | Skill Level | Hourly Rate | Estimated Total Hours | Total Cost | Notes |
| $ - 0 | ||||||
| $ - 0 | ||||||
| $ - 0 | ||||||
| Note: | The plan goals for participation of certified MBE is 25% and WBE is 7%. |
File details come from the government source that posted it. Updated .