Attachment A - Cost Proposal Workbook, DQ 2026000520.xlsx

This is a Cost Proposal Workbook for the State of Colorado's Governor's Office of Information Technology for a System and Organization Control (SOC) 1 Type II audit of the Colorado Benefits Management System (CBMS) and PEAK system, documented under Documented Quote (DQ) EGBA 2026000520. The solicitation requires vendors to provide comprehensive audit services including an audit plan with project timeline and testing milestones, a readiness assessment report evaluating control documentation and identifying gaps, a draft SOC 1 Type II audit report incorporating audit dates and risk assessments, and a final SOC 1 Type II audit report with incorporated department feedback. Vendors must propose target completion dates for each deliverable and provide monthly performance standards with periodic status reports. The workbook allows for optional additional deliverables at vendor discretion.

All proposed pricing must be all-inclusive, covering labor, travel, overhead, and incidental expenses. Vendors are required to complete both the Deliverables Pricing and Professional Services tabs, providing firm fixed prices for each required deliverable. Professional services staffing includes mandatory roles for a Project Lead and IT Security/Controls Subject Matter Expert, with optional positions for a Quality Assurance Lead and Senior SOC 1/SSAE 18 Auditor, along with flexibility to add additional specialized staff roles. Vendors must specify proposed individual names with resumes where available and provide hourly billing rates with estimated hours allocated per milestone and deliverable. The cost summary automatically calculates totals from the respective worksheets to generate the grand total proposed cost.