Attachment A - Cost Proposal Workbook, DQ 2026000520.xlsx

This is a Cost Proposal Workbook attachment for a documented quote issued by the State of Colorado's Governor's Office of Information Technology (GOIT) for SOC 1 Type II audit services related to the Colorado Benefits Management System (CBMS). The solicitation, identified as DQ EGBA 2026000520, requires vendors to complete audit services including an Audit Plan, Readiness Assessment Report, Draft SOC 1 Type II Audit Report, and Final SOC 1 Type II Audit Report. Target completion dates for each deliverable are to be determined by the vendor. The cost proposal workbook mandates that vendors submit pricing through two required tabs: Deliverables Pricing and Professional Services, with all costs presented as all-inclusive figures covering labor, travel, overhead, and incidental expenses.

The pricing structure requires vendors to provide firm fixed prices for each deliverable and hourly billing rates for key personnel, including a Project Lead, IT Security/Controls Subject Matter Expert, and optional Quality Assurance Lead and Senior SOC 1/SSAE 18 Auditor positions. Vendors may add additional staff roles as needed for the engagement. All pricing must be submitted with estimated vendor hours for each deliverable and role allocation, with costs automatically calculated on the summary tab. The workbook format allows vendors to propose staffing structures and cost allocations across all audit deliverables and ongoing monthly status reporting requirements.