CON_-_RFQ2026-07_Audit_Services_Main_RFQ.pdf

P-697 (04-26) Page 1 of 4 Sourcing Event 0000012041 August 26, 2026

City and County of San Francisco Formal Request for Qualifications for:

Audit Services

Sourcing Event ID 0000012041│Dept Contract ID: CON | RFQ2026-07

This RFQ can be viewed on the City’s Supplier Portal at: https://sfcitypartner.sfgov.org/pages/index.aspx

Proposal Phase Tentative* Date

Request for Qualifications Issuance August 26, 2026

Contract Monitoring Division (CMD) Technical Assistance Period Email: cmd.info@sfgov.org

August 27, 2026, to September 22, 2026

Deadline for Written Questions to CentralContracts@sfgov.org

September 2, 11:00 AM PT

Questions and Answers Posted September 8, 2026

Courtesy Intent to Respond via email to CentralContracts@sfgov.org.

September 16, 2026

Deadline to Submit Proposals September 23, 2026, 11:00 AM PT

Notice of Intent to Establish Prequalified Pool

November 18, 2026

Period for Protesting Notice of Intent to Establish Prequalified Pool

Within three (3) business days of the City's issuance of a Notice of Intent to Award.

List Administrator: Keith Miller Controller’s Office Email: CentralContracts@sfgov.org

How to become a Bidder and submit Proposal using SF City Partner Portal.

https://sfcitypartnersupport.sfgov.org/support/solutions/11000049605 User Support:

https://sfcitypartner.sfgov.org/pages/contact.aspx User Support tel. (415) 944-2442

* Dates are subject to change. It is the responsibility of the Proposer to check City’s Supplier Portal for updates on a regular basis. All times are in Pacific time.

https://sfcitypartner.sfgov.org/pages/index.aspx mailto:CentralContracts@sfgov.org https://sfcitypartnersupport.sfgov.org/support/solutions/11000049605 https://sfcitypartner.sfgov.org/pages/contact.aspx

P-697 (04-26) Page 2 of 4 Sourcing Event 0000012041

MANDATORY

MINIMUM

QUALIFICATION

DOCUMENTATION

Proposers must submit the necessary documentation with their proposals to demonstrate they meet every Minimum Qualification (MQ) requirement set forth in Section 6 of this solicitation. A proposal that fails to provide the required documentation will not be eligible for further consideration.

MQ # Description MQ1 Has submitted no more and no fewer than two (2) Prior Project Descriptions, as part of RFQ Attachment 5 response, for EACH SERVICE AREA for which it would like to be considered for pre-qualification.

The services described in the Prior Project Descriptions must have been provided to public sector clients within five (5) years from the date of this RFQ.

Each Project Description may only be used to apply for one (1) Service Area.

For Service Area 1, Performance Audit, Financial Audit and Attestation Engagement Services, one of the two Prior Project Description must be a performance audit conducted in accordance with Generally Accepted Government Auditing Standards

(GAGAS).

MQ2 The lead staff proposed to be assigned to the City’s project(s) must individually have had a similar lead role in at least one of the Prior Project Descriptions submitted for

EACH SERVICE AREA.

MQ3 For Service Area 1, Performance Audit, Financial Audit and Attestation Engagement Services, firms must provide their most recent GAGAS peer review report demonstrating compliance with quality control standards. The report must be dated no earlier than January 2023.

ATTACHMENTS

Attachment 1: City’s Proposed Agreement Terms Attachment 2: Proposer Questionnaire and References Attachment 3: CMD Attachment 2 (Form 3) Attachment 4: Minimum Qualifications Certification Attachment 5: Written Proposal Template Attachment 6: Reserved. (Price Proposal Template) Attachment 7: First Source Hiring Form Attachment 8: HCAO and MCO Declaration Forms Attachment 9: Reserved. (Sweatfree Ordinance Forms) Attachment 10: Ethics Notification (For notification purposes only)

P-697 (04-26) Page 3 of 4 Sourcing Event 0000012041

Table of Contents

1 RFQ SUMMARY

1.1 Introduction

1.2 Creation and Duration of the Prequalified POOL

1.3 Resulting Contracts Awarded to Contractors Selected from the Prequalified POOL

1.4 Cooperative Purchasing and Use by Other City Departments

1.5 Contract TERMs and negotations

2 SOLICITATION SCHEDULE

3 REQUIREMENTS FOR REQUESTED SERVICES

3.1 Services Requested

3.2 Regulatory and Compliance Requirements Specific to the Services Solicited

4 LOCAL BUSINESS ENTERPRISE (LBE) PROGRAM REQUIREMENTS

4.1 CMD Compliance Officer

4.2 Application of LBE Rating Bonuses and/or Bid Discounts

4.3 LBE Subcontracting Participation Requirements

5 PROPOSAL EVALUATION CRITERIA

6 MINIMUM QUALIFICATIONS AND DOCUMENTATION REQUIRED WITH

PROPOSAL (PASS/FAIL)

7 WRITTEN PROPOSAL (100 POINTS)

8 RESERVED (PRICE PROPOSAL)

9 RESERVED (ORAL INTERVIEWS)

10 SUPPORTING DOCUMENTATION REQUIRED PRIOR TO SELECTION FOR THE

PREQUALIFIED POOL

11 FAILURE TO PROVIDE INSURANCE

12 CITY’S SOCIAL AND ECONOMIC POLICY REQUIREMENTS

12.1 Nondiscrimination Requirements (“Equal Benefits”)

12.2 Reserved (Payment of prevailing wages)

12.3 Health Care Accountability Ordinance

12.4 Minimum Compensation Ordinance

12.5 First Source Hiring Program

P-697 (04-26) Page 4 of 4 Sourcing Event 0000012041

12.6 Reserved (sweatfree procurment)

12.7 Non-Profit Entities

13 TERMS AND CONDITIONS FOR RECEIPT OF PROPOSALS

13.1 How to Register to propose and be awarded a City Contract

13.2 Proposal Questions and Submissions

13.3 RFQ Addenda

13.4 Public Disclosure

13.5 Limitation on Communications During Solicitation

13.6 Proposal Selection Shall Not Imply Acceptance

13.7 Cybersecurity Risk Assessment

13.8 Solicitation Errors and Omissions

13.9 Objections to Solicitation Terms

13.10 Protest Procedures

13.11 Proposal Term

13.12 Revision to Proposal

13.13 Proposal Errors and Omissions

13.14 Financial Responsibility

13.15 Proposer’s Obligations under the Campaign Reform Ordinance

13.16 Reservations of Rights by the City

13.17 No Waiver

13.18 Other

P-697 (04-26) Page 1 of 18 Sourcing Event 0000012041

1 RFQ Summary

1.1 INTRODUCTION

This Request for Qualifications (hereinafter “RFQ” or “Solicitation”) is being issued by the Controller’s Office (hereinafter, “CON” or “City”). CON, on behalf of all City Departments, is seeking qualified suppliers (“Proposers”) to provide proposals (“Proposal”) for public sector audit services, particularly with municipal general purpose governments (“Proposals”). These services will help the Office of the Controller-City Services Auditor (“CSA”) provide objective, rigorous assessment of City service levels and effectiveness.

The City shall evaluate Proposals to create a Prequalified Pool of Proposers (“Prequalified Pool”).

Proposers prequalified under this RFQ are not guaranteed a contract. The City may use the Prequalified Pool, at its sole and absolute discretion, on an as-needed basis.

The Prequalified Pool will consist of the following three service areas (“Service Areas:):

Service Area 1: Performance Audit, Financial Audit and Attestation Engagement Services

Service Area 2: Forensic Accounting and Investigative Services

Service Area 3: Financial, Management, or Accounting Review Services

Proposers are not required to submit Proposals for all three Service Areas and should only apply to the Service Areas for which they have demonstrated successful experience.

1.2 CREATION AND DURATION OF THE PREQUALIFIED POOL

Proposers meeting the Minimum Qualifications and scoring a minimum of 70 points for each Service Area shall be added to the Prequalified Pool and eligible for potential contract negotiations (“Resulting Contract”) with the City, on an as-needed basis. A Prequalified Pool is valid for 2 years but may be extended for up to 2 additional years if re-opened by the City in accordance with Section 21.4 of the San Francisco Administrative Code. Responsive Proposals will be evaluated by a panel (“Evaluation Panel”) consisting of parties with expertise related to the services being procured through this RFQ. The Evaluation Panel may include staff from various City departments. Proposals will be evaluated based on the criteria outlined herein. If applicable, a Contract Monitoring Division (“CMD”) Contract Compliance Officer will assess Proposal compliance with Local Business Enterprise (“LBE”) requirements and assign a rating bonus to Proposal scores. The CMD-adjusted scores (if applicable) will then be tabulated, and Proposers will be ranked starting with the Proposer receiving the highest score, then continuing with the Proposer receiving the second highest score, and so on.

1.3 RESULTING CONTRACTS AWARDED TO CONTRACTORS SELECTED FROM THE

PREQUALIFIED POOL

1.3.1 Selection of Contractors from the Prequalified Pool

Pursuant to Section 21.4 of the San Francisco Administrative Code, City may select contractors from the Prequalified Pool for Resulting Contracts pursuant to three options, as described below.

Selections must be made prior to Pool expiration.

(A) City may select the highest available ranked contractor from the Prequalified Pool (if a ranking was done when the Pool was created); OR

P-697 (04-26) Page 2 of 18 Sourcing Event 0000012041

(B) City may request quotes or proposals from contractors on the Prequalified Pool to evaluate which to select. Where applicable, the Department shall apply Chapter 14B LBE Rating Bonuses or Bid Discounts when evaluating quotes and proposals received from the Prequalified Pool. The request for quotes or proposals may also include an LBE Participation Requirement.

(C) For Resulting Contracts that are less than the Minimum Competitive Amount in effect when the selections is being made, City may select a contractor from the Prequalified Pool without any further solicitation. In choosing this option, City shall notify the Prequalified Pool of its selection. The Notice shall specify the services awarded; their cost; and the selected contractor’s unique qualifications for having been selected without a further solicitation.

1.3.2 Notice of Intent to Award a Resulting Contract to the Prequalified Pool

Except where a contractor was selected without a further solicitation for a contract amount equal to or less than the Minimum Competitive Amount, City shall not issue a Notice of Intent to Award when awarding a Resulting Contract to a contractor from the Prequalified Pool. The City’s award of a Resulting Contract to a contractor from the Prequalified Pool is final and not subject to further review.

1.3.3 Anticipated Term of Resulting Contracts

A Resulting Contract awarded to the Prequalified Pool shall be non-exclusive, with an original term to be determined at the time of Contract award based on the awarding Department’s business needs, but shall not exceed ten (10) years.

1.3.4 Anticipated Not to Exceed Amount of Resulting Contracts

The Not-to-Exceed (NTE) amount of a Resulting Contract awarded to the Prequalified Pool shall be determined at the time of Contract award based on the awarding Department’s business needs.

1.4 COOPERATIVE PURCHASING AND USE BY OTHER CITY DEPARTMENTS

Any other City department, public entity or non-profit made up of multiple public entities, may use the results of this RFQ to select Contractors from the Prequalified Pool under the same terms and conditions of this RFQ.

1.5 CONTRACT TERMS AND NEGOTATIONS

The successful Proposer will be required to enter into a contract substantially in the form attached hereto as Attachment 1, City’s Contract Terms. If Proposer is unable to accept City’s Contract Terms substantially in the form presented, Proposer shall include a marked-up copy of City’s Contract Terms with its Proposal for City’s consideration. Submittal of a marked-up copy of City’s Contract Terms does not guarantee that City will accept the proposed mark-ups.

The marked-up copy of City’s Contract Terms may be considered in the evaluation process and must clearly:

a. Mark those sections to which it objects;

b. Set forth Proposer’s proposed alternative terms with respect to each such section; and

c. Explain the basis for each proposed change.

P-697 (04-26) Page 3 of 18 Sourcing Event 0000012041

If a satisfactory contract(s) cannot be negotiated in a reasonable time, the City, in its sole discretion, may terminate negotiations. Upon termination of negotiations, City may begin negotiation with the Proposer that meets the Minimum Qualifications of this Solicitation whose Proposal receives the next highest-ranking score.

2 Solicitation Schedule

The anticipated schedule for this RFQ is set forth below. These dates are tentative and subject to change. It is the responsibility of the Proposer to check for any Addenda to this RFQ or other pertinent information posted in the City’s Supplier Portal.

Proposal Phase Tentative* Date

Request for Qualifications Issuance August 26, 2026

Contract Monitoring Division (CMD) Technical Assistance Period Email: cmd.info@sfgov.org

August 27, 2026, to September 22, 2026

Deadline for Written Questions to CentralContracts@sfgov.org

September 2, 11:00 AM PT

Questions and Answers Posted September 8, 2026

Courtesy Intent to Respond via email to CentralContracts@sfgov.org.

September 16, 2026

Deadline to Submit Proposals September 23, 2026, 11:00 AM PT

Notice of Intent to Establish Prequalified Pool

November 18, 2026

Period for Protesting Notice of Intent to Establish Prequalified Pool

Within three (3) business days of the City's issuance of a Notice of Intent to Award.

List Administrator: Keith Miller Controller’s Office Email: CentralContracts@sfgov.org

How to become a Bidder and submit Proposal using SF City Partner Portal.

https://sfcitypartnersupport.sfgov.org/support/solutions/11000049605 User Support:

https://sfcitypartner.sfgov.org/pages/contact.aspx User Support tel. (415) 944-2442

* Dates are subject to change. It is the responsibility of the Proposer to check City’s Supplier Portal for updates on a regular basis. All times are in Pacific time.

3 Requirements for Requested Services

3.1 SERVICES REQUESTED

This RFQ is being issued to create a Prequalified Pool of suppliers to provide public sector audit services, particularly with municipal general purpose governments. These services will help the Office of the Controller-City Services Auditor (CSA) and other City departments provide objective, rigorous assessment of City service levels and effectiveness.

mailto:CentralContracts@sfgov.org https://sfcitypartnersupport.sfgov.org/support/solutions/11000049605

P-697 (04-26) Page 4 of 18 Sourcing Event 0000012041

This scope of work is a general guide to the work the City expects to be performed and is not a complete listing of all services that may be required or desired. The City is soliciting qualifications to create a Prequalified Pool of consultant firms demonstrating successful experience in one (1) or more of the following three (3) Service Areas:

Service Area 1: Performance Audit, Financial Audit and Attestation Engagement Services

Service Area 2: Forensic Accounting and Investigative Services

Service Area 3: Financial, Management, or Accounting Review Services

Service Area 1: Performance Audit, Financial Audit and Attestation Engagement Services

Certified Public Accountants or Certified Internal Auditors are highly desirable.

A. Performance Audit Services: Performance audits are engagements that provide assurance or conclusions based on an evaluation of sufficient, appropriate evidence against stated criteria, such as specific requirements, measures, or defined business practices. Performance audits include assessments of program effectiveness, economy, and efficiency; internal control; compliance; and prospective analyses.

The subject of compliance performance audits may include compliance with laws, regulations, contract provisions, grant agreements, and other requirements.

Performance audit services may include audits of City contracts, grants, and other agreements; evaluations of city department and agency programs, operations, and financial information; and audits of revenue and general obligation bond programs; and revenue compliance audits (e.g., tenants, franchise fees, and airlines), among other subject matters.

B. Financial Audit Services: Financial audits will include financial statement audits and other related financial audits. Financial audits provide an independent assessment of and reasonable assurance about whether an entity’s reported financial condition, results, and use of resources are presented fairly in accordance with recognized criteria.

Reporting on financial audits also includes reports on internal control, compliance with laws and regulations, and provisions of contracts and grant agreements as they relate to financial transactions, systems, and processes.

C. Attestation Engagements: Attestation engagements concern examining, reviewing, or performing agreed upon procedures on a subject matter or an assertion about a subject matter and reporting on the results. The subject matter of an attestation engagement may take many forms, including historical or prospective performance or condition, historical events, analyses, or systems and processes. Attestation engagements cover a broad range of financial or nonfinancial objectives about a subject matter or assertion.

Examples of objectives of attestation engagements include reporting on an entity’s internal control over financial reporting or an entity’s compliance with requirements of specified laws, regulations, rules, contracts, or grants. Attestation engagements include quarterly review engagements of the City's investments and other agreed-upon procedures.

P-697 (04-26) Page 5 of 18 Sourcing Event 0000012041

All audit work performed under Service Area 1 shall be conducted in accordance with generally accepted government auditing standards (GAGAS), issued by the U.S. Government Accountability Office, unless otherwise specified by the City.

Service Area 2: Forensic Accounting and Investigative Services

Certified Forensic Accountants or Certified Fraud Examiners are highly desirable.

The City seeks qualified firms with extensive experience to assist it by performing forensic accounting and investigation services. The services may include, but not limited to financial and operational investigations; forensic accounting investigations; fraud, embezzlement, money laundering, bribery, corruption, and financial misconduct investigations; administrative and personnel investigations; analysis of financial transactions and assets; investigations related to city operations, contracts, procurements, grants, and supplier relationships; and other related investigative services or examinations of the City’s operations, financial reporting, and management.

Service Area 3: Financial, Management, or Accounting Review Services

Certified Public Accountants are highly desirable.

The City seeks qualified firms with experience to assist it by performing financial analysis, management analysis, and/or accounting services. The services may include assessments, evaluations, or analyses of selected processes, functions, or areas. These will be limited in scope and will not be audits in compliance with auditing standards. Firms may be engaged to 1) produce reports or technical memorandums to CSA or city departments, or 2) lead or provide technical assistance to CSA or city departments. Firms may be asked to undertake tasks including, but not limited to, the following:

A. Assess and recommend how to improve internal control structure.

B. Prepare and/or review financial reports to ensure compliance with accounting policies and standards or compliance with local, state, and federal laws and regulations.

C. Prepare and/or review required assessments or other filings to local, state and federal agencies.

D. Review and analyze financial planning and budget management reports.

E. Conduct inventory or bank reconciliations.

F. Assess board/committee structure compliance versus requirements and/or best practices.

G. Perform validation/accountability tests of data.

H. Conduct staffing analyses.

I. Assess a functional area or process with limited scope for efficiency or effectiveness.

Proposers must demonstrate experience as described in at least one (1) of the three (3) Service Areas listed above. Demonstrating experience for one (1) of the Service Areas does not prequalify a Proposer for all of the Service Areas. Proposers will be prequalified for only the Service Area(s) for which they have provided experience. The City recognizes the broad range

P-697 (04-26) Page 6 of 18 Sourcing Event 0000012041 of work to be performed and asks that Proposers submit both their general approach and methodology to providing the above services, as well as a more detailed approach related to their area of expertise.

The services listed above may not be comprehensive of all work that will be needed. The City may reach out to the Prequalified Pool as a result of this RFQ to solicit additional substantially related services to this Solicitation not included on this list.

3.2 REGULATORY AND COMPLIANCE REQUIREMENTS SPECIFIC TO THE SERVICES

SOLICITED

3.2.1 Green Purchasing Requirements

In preparation for any Proposal submitted in response to this Solicitation, Proposers are required to review the City Mandatory Green Purchasing Requirements to ensure all services offered to City in response to this Solicitation comply with the City’s Green Purchasing Requirements.

4 Local Business Enterprise (LBE) Program Requirements

4.1 CMD COMPLIANCE OFFICER

The CMD Compliance Officer (“CCO”) for this Solicitation and any Contract awarded to a Contractor selected from the resulting Prequalified Pool is:

LBE Certification Unit Contract Monitoring Division City and County of San Francisco Email: LBE Certification Unit Website: www.sfgov.org/cmd.

4.2 APPLICATION OF LBE RATING BONUSES AND/OR BID DISCOUNTS

San Francisco Micro, Small, and SBA LBE bidders certified by the Contract Monitoring Division are eligible for a rating bonus. LBE Rating Bonuses and/or Bid Discounts shall be applied at each phase of the RFQ evaluation and selection process, in accordance with the values shown below. LBE Rating Bonuses and/or Bid Discounts are also applicable when selecting a Contractor from the resulting Prequalified Pool.

4.2.1 Reserved (Commodities).

4.2.2 General and Professional Services

Estimated Contract Value, per Agreement

Small/Micro LBEs Rating Bonus

SBA LBEs Rating Bonus

Greater than $20,000 but less than or equal to $400,000.

10% 0%

Greater than $400,000 but less than or equal to $10,000,000.

10% 5% So long as it does not adversely affect a Small or Micro-LBE Proposer’s participation or, for Professional Services, an JV Proposer’s participation.

https://docs.google.com/spreadsheets/d/1JzChoAuD86PsfP6eN_KJ1f1O0ZtWATb4qmJ0rCw66Hc/edit?gid=0#gid=0?

http://www.sfgov.org/cmd

P-697 (04-26) Page 7 of 18 Sourcing Event 0000012041

Greater than $10,000,000 but less than or equal to $20,000,000.

2% 2%

4.2.3 Professional Services by Joint Ventures

Estimated Contract Value, per Agreement

Percent Share of JV/Prime Work by

Small/Micro LBE Prime

Rating Bonus

Greater than $20,000 but less than or equal to $10,000,000.

Equals or exceeds 35%, but less than 40%

5%

Equals or exceeds 40%, but less than 100%

7.5%

100% 10%

If applying for an LBE rating discount as a Joint Venture (JV), the Micro and /or Small-LBE must be an active partner in the JV and perform work, manage the job and take financial risks in proportion to the required level of participation stated in the Proposal, and must be responsible for a clearly defined portion of the work to be performed and share in the ownership, control, management responsibilities, risks, and profits of the JV. The portion of the Micro and/or Small-LBE JV’s work shall be set forth in detail separately from the work to be performed by the non-LBE JV. The Micro and/or Small-LBE JV’s portion of the contract must be assigned a commercially useful function.

4.3 LBE SUBCONTRACTING PARTICIPATION REQUIREMENTS

The LBE Subcontracting Requirements were waived by the Contract Monitoring Division.

5 Proposal Evaluation Criteria

Evaluation Phase Maximum Points

Minimum Qualifications Documentation Pass/Fail

Written Proposal 100 Points

TOTAL 100 Points

6 Minimum Qualifications AND Documentation Required with Proposal (Pass/Fail)

Proposers must provide documentation that clearly demonstrates each Minimum Qualification (MQ) listed below has been met. Minimum Qualification documentation should be clearly marked as “MQ1”, MQ2”, etc.… to indicate which MQ it supports. Each Proposal will be reviewed for initial determination on whether Proposer meets the MQs referenced in this section. This screening is a pass or fail determination and a Proposal that fails to meet the Minimum Qualifications will not be eligible for further consideration in the evaluation process. The City reserves the right to request clarifications from Proposers prior to rejecting a Proposal for failure to meet the Minimum Qualifications. The City will limit clarifications to exchanges between the City and a Proposer for the purpose of clarifying certain aspects of the Proposal. The City will not provide a Proposer the opportunity to revise or modify its Proposal.

P-697 (04-26) Page 8 of 18 Sourcing Event 0000012041

MQ # Description MQ1 Has submitted no more and no fewer than two (2) Prior Project Descriptions, as part of RFQ Attachment 5 response, for EACH SERVICE AREA for which it would like to be considered for pre-qualification.

The services described in the Prior Project Descriptions must have been provided to public sector clients within five (5) years from the date of this RFQ.

Each Project Description may only be used to apply for one (1) Service Area.

For Service Area 1, Performance Audit, Financial Audit and Attestation Engagement Services, one of the two Prior Project Description must be a performance audit conducted in accordance with GAGAS.

MQ2 The lead staff proposed to be assigned to the City’s project(s) must individually have had a similar lead role in at least one of the Prior Project Descriptions submitted for

EACH SERVICE AREA.

MQ3 For Service Area 1, Performance Audit, Financial Audit and Attestation Engagement Services, firms must provide their most recent GAGAS peer review report demonstrating compliance with quality control standards. The report must be dated no earlier than January 2023.

7 Written Proposal (100 Points)

In addition to submitting documents supporting each Minimum Qualification as required by this Solicitation, Proposers shall also submit a complete Proposal consisting of each item set forth Attachment 5, Written Proposal Template.

City representatives will serve as the Evaluation Panel responsible for evaluating Proposers.

Specifically, the Evaluation Panel will be responsible for the evaluation and rating of the Proposals for prequalification, as described in Attachment 5.

Each RFQ Proposal that meets the Minimum Qualifications will be evaluated in accordance with the criteria below. A Proposer must receive a score of 70 points or above out of the 100 total possible points for each Service Area to be prequalified for that Service Area. There is no numerical limit to the number of Proposers that may be prequalified.

7.1.1 Firm Qualifications – 20 points

a) Proposer’s firm history and structure, including total staff size and composition.

b) Litigation, pending litigation, or threatened litigation related to consulting audit services provided by the firm, if any within the past five years of this RFQ issue date.

c) Client relationships are severed for reasons other than convenience.

d) Proposer’s capacity and resources to provide the services under this RFQ.

7.1.2 Staff Qualifications – 40 points

P-697 (04-26) Page 9 of 18 Sourcing Event 0000012041

Qualifications and educational background of audit principals and key staff members, including subcontractor staff, if applicable, proposed to perform services for the City.

a) SERVICE AREA 1: Performance Audit, Financial Audit and Attestation Engagements

i. Experience with performance audit services. Includes assessments of program effectiveness, economy, and efficiency; internal control; compliance; and prospective analyses. Subject may include compliance with laws, regulations, contract provisions, grant agreements, and other requirements.

ii. Experience with financial statement audits. Includes financial statement audits and other related financial audits. Reporting on financial audits includes reports on internal control, compliance with laws and regulations, and provisions of contracts and grant agreements as they relate to financial transactions, systems, and processes.

iii. Experience with attestation engagements. Includes examinations, reviews, or agreed upon procedures on a subject matter. Subject may include compliance with laws, regulations, contract provisions, grant agreements, and other requirements.

iv. Possession of Certified Public Accountant or Certified Internal Auditor license/certification.

b) SERVICE AREA 2: Forensic Accounting and Investigative Services

i. Experience with forensic accounting and investigative services, specifically investigative expertise within a public sector context combining accounting, auditing, and investigative expertise.

ii. Possession of a Certified Forensic Accountant or Certified Fraud Examiner license/certification.

c) SERVICE AREA 3: Financial, Management, or Accounting Review Services

i. Experience with performing financial analysis, management analysis, and/or accounting services. Subject may include compliance with laws, regulations, contract provisions, grant agreements, and other requirements.

ii. Experience with reviews and analysis on a subject matter. Analyses may include internal controls assessment, staffing analyses, or data validation tests

iii. Experience with inventory or bank reconciliations.

iv. Possession of Certified Public Accountant or Certified Internal Auditor license/certification.

7.1.3 Approach and Cost – 30 points

a) Client involvement or level of effort is appropriate, including (1) approach to providing audit services to public sector clients, and (2) firm’s expectations and/or assumptions of the City’s involvement or level of effort. Questions demonstrate experience with providing services to comparable clients.

P-697 (04-26) Page 10 of 18 Sourcing Event 0000012041

b) Sufficient expertise or methodology to create competitive differences that will be beneficial to the City is demonstrated.

c) Cost response is sufficiently detailed, reasonable and appropriate

7.1.4 Completeness of Proposal Submission – 10 points

a) Proposal conforms with RFQ requirements and concisely but comprehensively addresses RFQ requirements.

b) Proposal is professionally presented and contains organized content and format.

8 Reserved (Price Proposal).

9 Reserved (Oral Interviews).

10 Supporting Documentation Required Prior to Selection For the Prequalified Pool

Proposers must provide each Required Supporting Documentation (“RSD”) identified below prior to Award. Failure to do so may result in the Proposal being deemed Non-Responsive.

RSD 1 Attachment 1: City’s Proposed Agreement Terms

RSD 2 Attachment 2: Proposer Questionnaire and References

RSD 3 Attachment 3: CMD Attachment 2 (Form 3)

RSD 4 Attachment 4: Minimum Qualifications Certification

RSD 5 Attachment 5: Written Proposal Template

RSD 7 Attachment 7: First Source Hiring Form

RSD 8 Attachment 8: HCAO and MCO Declaration Forms

11 Failure to Provide Insurance

In the event a Proposer is selected from the Prequalified Pool established pursuant to this RFQ, unless otherwise stated, within ten business days of the receipt of a notice of award of a Contract, the successful Proposer(s) to whom the contract is awarded shall deliver the specified insurance certificates and policy endorsements to City as outlined in Attachment 1, City Proposed Agreement Terms. If the Proposer fails or refuses to furnish the required insurance within ten days after receiving notice to award a Contract, City may, at its option, determine that the Proposer has abandoned its Proposal.

P-697 (04-26) Page 11 of 18 Sourcing Event 0000012041

12 City’s Social and Economic Policy Requirements

The San Francisco Municipal Code establishes a number of requirements for people seeking to do business with the City (“Social and Economic Policy Requirements”). The Social and Economic Policy Requirements set forth below are not intended to be a complete list of all Social Policy Requirements applicable to this Solicitation and any contracts awarded from it.

12.1 NONDISCRIMINATION REQUIREMENTS (“EQUAL BENEFITS”)

Proposers awarded any Resulting Contract exceeding $230,000 (the City’s “Minimum Competitive Amount”), may not, during the term of the Contract, discriminate in the provision of benefits between employees with domestic partners and employees with spouses, and/or between the domestic partners and spouses of such employees, where the domestic partnership has been registered with a governmental entity pursuant to state or local law authorizing such registration.

This Equal Benefits requirement applies in any of the contractor’s operations in San Francisco, on real property owned by San Francisco, or where work is being performed for the City elsewhere in the United States, subject to the conditions set forth in San Francisco Labor and Employment Code Articles 131 and 132. Contractors must submit a declaration confirming that the business complies with the Equal Benefits law. The declaration is available via SF City Partner Supplier Portal. For more information, visit the Contract Monitoring Division (CMD) website.

12.2 RESERVED (PAYMENT OF PREVAILING WAGES).

12.3 HEALTH CARE ACCOUNTABILITY ORDINANCE

If awarded a Resulting Contract when selected from the Prequalified Pool, Proposer may be required to comply with the requirements of San Francisco Labor and Employment Code Articles

121. For more information, visit: http://sfgov.org/olse/hcao.

12.4 MINIMUM COMPENSATION ORDINANCE

If awarded a Resulting Contract when selected from the Prequalified Pool, Proposer may be required to comply with San Francisco Labor and Employment Code Articles 111. For more information, visit: http://sfgov.org/olse/mco.

12.5 FIRST SOURCE HIRING PROGRAM

If awarded a Resulting Contract when selected from the Prequalified Pool, Proposer may be required to comply with all of the applicable provisions of the First Source Hiring Program, Chapter 83 of the San Francisco Administrative Code. For more information, visit https://oewd.org/first-source

12.6 RESERVED (SWEATFREE PROCURMENT).

12.7 NON-PROFIT ENTITIES

If awarded a Resulting Contract under this Solicitation, any nonprofit Proposer must be in good standing with the California Attorney General’s Registry of Charitable Trusts by the time of contract execution and must remain in good standing during the term of the agreement. Upon request, Proposer must provide documentation to the City demonstrating its good standing with applicable legal requirements. If Proposer will use any nonprofit subcontractors to perform the agreement, Proposer will be responsible for ensuring they are also in compliance with all https://www.sf.gov/equal-benefits-program http://sfgov.org/olse/hcao http://sfgov.org/olse/mco https://oewd.org/first-source

P-697 (04-26) Page 12 of 18 Sourcing Event 0000012041 requirements of the Attorney General’s Registry of Charitable Trusts at the time of Contract execution and for the duration of the agreement.

13 Terms and Conditions for Receipt of Proposals

13.1 HOW TO REGISTER TO PROPOSE AND BE AWARDED A CITY CONTRACT

To submit a proposal for a City contract, all vendors must be registered as a City BIDDER or a SUPPLIER. To be awarded a contract, Proposers must convert their BIDDER ID to a SUPPLIER ID, which requires additional steps to demonstrate compliance with certain San Francisco supplier requirements.

13.1.1 Registering as a BIDDER to propose on a City contract

Proposers that are not currently a City SUPPLIER must obtain a BIDDER ID by completing the following form on the SF City Partner Portal:

https://sfcitypartner.sfgov.org/pages/BidderRegistration-BS3/bidder-registration-1.aspx

13.1.2 Converting a BIDDER ID to SUPPLIER ID to be awarded a City contract

To convert a BIDDER ID to a SUPPLIER ID, awarded Proposers are required to register with the City Tax Collector’s Office. Additionally, businesses awarded contracts exceeding $230,000 (the “Minimum Competitive Amount”) must comply with the City’s Equal Benefits requirements pursuant to Labor and Employment Code Article 131 and must submit the online Equal Benefits Declaration through the SF City Partner Portal.

For detailed instructions on registering for City Business Tax, submitting an Equal Benefits Declaration, and for converting your BIDDER ID to a SUPPLIER ID visit Contracting with the City and County of San Francisco.

• City Business Tax Registration Inquiries: For questions regarding business tax registration procedures and requirements, contact the Tax Collector’s Office at (415) 554-4400 or, if calling from within the City and County of San Francisco, 311.

• Equal Benefits Program Inquiries: For questions concerning the San Francisco Labor and Employment Code Articles 131 and 132, go to: www.sfgov.org/cmd.

13.2 PROPOSAL QUESTIONS AND SUBMISSIONS

13.2.1 Proposer Questions and Requests for Clarification

Proposers shall address any questions regarding this Solicitation to the Contract Administrator whose name and contact information appears on the cover page of this Solicitation. Proposers who fail to submit questions concerning this Solicitation and its requirements will waive all further rights to protest based on the specifications and conditions herein. Questions must be submitted by email to the Contract Administrator whose name and contact information appears on the cover page of this Solicitation no later than Deadline for Written Questions. A written Addendum will be executed addressing each question and answer and posted publicly. It is the responsibility of the Proposer to check for any Addenda and other updates that will be posted on the City’s Supplier Portal: https://sfcitypartner.sfgov.org/pages/Events-BS3/event-search.aspx.

https://sfcitypartner.sfgov.org/pages/BidderRegistration-BS3/bidder-registration-1.aspx https://sfcitypartner.sfgov.org/pages/BS3/login.aspx https://www.sf.gov/topics--contracting-city-and-county-san-francisco https://www.sf.gov/topics--contracting-city-and-county-san-francisco http://www.sfgov.org/cmd https://sfcitypartner.sfgov.org/pages/Events-BS3/event-search.aspx

P-697 (04-26) Page 13 of 18 Sourcing Event 0000012041

13.2.2 Proposal Format

Proposals should be submitted using the attached submission forms or created using word processing software (e.g. Microsoft Word or Excel) and typed in a sans-serif font (e.g.-Calibri). The document should have page margins of at least .5” on all sides. Information must be provided at a level of detail that enables effective evaluation and comparison between Proposals. Failure to follow formatting, submission, or content requirements, as well as page limit restrictions (if any), may negatively impact the evaluation of your Proposal.

13.2.3 Time and Place for Submission of Proposals

Prior to the Proposal submission deadline, Proposers must upload their complete Proposals into the City’s Supplier Portal: https://sfcitypartner.sfgov.org/pages/index.aspx. Late submissions will not be considered. Each original Proposal received will be screened to ensure that all content required by this Solicitation is included. Partial or complete omission of any required content may disqualify Proposals from further consideration. Late Proposal submissions will not be considered and failure to adhere to the above requirements may result in the complete rejection of your Proposal.

Please note that the SF City Supplier Portal has a hard-stop at the due date and time and will become inaccessible within the next second. You must be a registered Bidder to submit in the Portal.

Please reference the Event ID 0000012041 when contacting User Support for any troubleshooting:

https://sfcitypartner.sfgov.org/pages/contact.aspx or tel. (415) 944-2442, 8:30 am – 5:00 pm PT, Monday through Friday.

Proposers are encouraged to upload their Proposals to the SF Supplier Portal as early as possible to address any technical issues that may arise during the submission process. In the event a Proposer is unable to upload its complete Proposal into the SF Supplier Portal, Proposer must email its Proposal to the Contract Administrator whose name and contact information appears on the cover page of this Solicitation prior to the Proposal submission deadline and request confirmation of receipt. Proposer must include in its email: (a) documentation (e.g. screenshots) verifying its inability to upload its Proposal into the SF Supplier Portal and (b) a detailed justification explaining why it was not able to have the issue addressed prior to the submission deadline.

13.2.4 Courtesy Intent to Respond

Proposers who intend to submit a Proposal are encouraged to submit a Courtesy Intent to Respond via e-mail to CentralContracts@sfgov.org by the deadline that appears on the cover page of this solicitation.

13.3 RFQ ADDENDA

The City may modify this Solicitation, prior to the Proposal Due Date, by issuing an Addendum to the Solicitation, which will be posted on the San Francisco Supplier Portal. Every Addendum will create a new version of the Sourcing Event and Proposers must monitor the event for new versions. The Proposer shall be responsible for ensuring that its Proposal reflects any and all Addenda issued by the City prior to the Proposal Due Date regardless of when the Proposal is https://sfcitypartner.sfgov.org/pages/index.aspx mailto:CentralContracts@sfgov.org

P-697 (04-26) Page 14 of 18 Sourcing Event 0000012041 submitted. Therefore, the City recommends that the Proposer consult the website frequently, including shortly before the Proposal Due Date, to determine if the Proposer has downloaded all Solicitation Addenda. It is the responsibility of the Proposer to check for any Addenda, Questions and Answers documents, and updates, which may be posted to the subject Solicitation.

THE SUBMITTAL OF A RESPONSE TO THIS SOLICITATION SHALL EXPLICITLY STIPULATE

ACCEPTANCE BY PROPOSERS OF THE TERMS FOUND IN THIS SOLICITATION, ANY AND ALL

ADDENDA ISSUED TO THIS SOLICITATION, AND THE PROPOSED CONTRACT TERMS.

13.4 PUBLIC DISCLOSURE

All documents under this Solicitation process are subject to public disclosure per the California Public Records Act (California Government Code § 7920.000 et seq. and the San Francisco Sunshine Ordinance (San Francisco Administrative Code Chapter 67). Contracts, Proposals, responses, and all other records of communications between the City and Proposers shall be open to inspection immediately after a contract has been awarded. Nothing in this Administrative Code provision requires the disclosure of a private person’s or organization’s net worth or other proprietary financial data submitted for qualification for a contract or other benefit until and unless that person or organization is awarded the contract or benefit.

If the City receives a Public Records Request (“Request”) pertaining to this solicitation, City will use its best efforts to notify the affected Proposer(s) of the Request and to provide the Proposer with an opportunity to object to disclosure of the material requested by the due date for disclosure (“Response Date”). If the Proposer asserts that some or all of the material requested contains or reveals valuable trade secret or other information belonging to the Proposer that is exempt from disclosure and directs the City in writing to withhold such material from production (“Withholding Directive”), then the City will comply with the Withholding Directive on the condition that the Proposer seeks judicial relief on or before the Response Date. Should Proposer fail to seek judicial relief on or before the Response Date, the City shall proceed with the disclosure of responsive documents.

13.5 LIMITATION ON COMMUNICATIONS DURING SOLICITATION

From the date this Solicitation is issued until the date the competitive process of this Solicitation is completed (either by cancelation or final Award), Proposers and their subcontractors, vendors, representatives and/or other parties under Proposer’s control, shall communicate solely with the Contract Administrator whose name appears in this Solicitation. Any attempt to communicate with any party other than the Contract Administrator whose name appears in this Solicitation – including any City official, representative or employee – is strictly prohibited. Failure to comply with this communications protocol may, at the sole discretion of City, result in the disqualification of the Proposer or potential Proposer from the competitive process. This protocol does not apply to communications with the City regarding business not related to this Solicitation.

13.6 PROPOSAL SELECTION SHALL NOT IMPLY ACCEPTANCE

The acceptance and/or selection of any Proposal(s) shall not imply acceptance by the City of all terms of the Proposal(s), which may be subject to further approvals before the City may be legally bound thereby.

P-697 (04-26) Page 15 of 18 Sourcing Event 0000012041

13.7 CYBERSECURITY RISK ASSESSMENT

The following Third-Party Audit Reports can be used to satisfy CCSF’s Cybersecurity Risk Assessment requirement:

• SOC 2 Type 2

• ISO/IEC 27001

• CSA STAR Level 2

• FedRAMP

• StateRAMP

• HITRUSTCSF – products or services that primarily relate to the Healthcare industry

ONLY.

• PCI DSS Level 1 – products or services that primarily relate to the Payment Processing industry ONLY.

• NIST 800-53

In addition to the Third-Party Audit Reports mentioned above, City and County of San Francisco’s CRA requirement can also be satisfied by providing a completed CAIQ Lite Questionnaire or completing the City’s CRA Questionnaire in the City’s LogicGate portal.

The above reports may be requested at such time City has selected or is considering a potential Proposer. The reports will be evaluated by the soliciting Department and the City’s Department of Technology to identify existing or potential cyber risks to City. Should such risks be identified, City shall afford a potential Proposer an opportunity to cure such risk within a period of time deemed reasonable to City. Such remediation and continuing compliance shall be subject to City’s on-going review and audit through industry-standard methodologies, including but not limited to: on-site visits, review of the entities’ cybersecurity program, penetration testing, and/or code reviews.

13.8 SOLICITATION ERRORS AND OMISSIONS

Proposers are responsible for reviewing all portions of this Solicitation. Proposers are to promptly notify the City, in writing and to the Solicitation contact person if the Proposer discovers any ambiguity, discrepancy, omission, or other error in the Solicitation. Any such notification should be directed to the City promptly after discovery, but in no event later than the deadline for questions. Modifications and clarifications will be made by Addenda as provided below.

13.9 OBJECTIONS TO SOLICITATION TERMS

Should a Proposer object on any ground to any provision or legal requirement set forth in this Solicitation, the Proposer must, no later than the deadline for questions, provide written notice to the City setting forth with specificity the grounds for the objection. The failure of a Proposer to object in the manner set forth in this paragraph shall constitute a complete and irrevocable waiver of any such objection.

13.10 PROTEST PROCEDURES

13.10.1 Protest of Non-Responsiveness Determination

Within three (3) business days of the City's issuance of a Notice of Non-Responsiveness, a Proposer may submit a written Notice of Protest of Non-Responsiveness. The Notice of Protest must include a written statement specifying in detail each and every one of the grounds asserted

P-697 (04-26) Page 16 of 18 Sourcing Event 0000012041 for the protest. The Notice of Protest must be signed by an individual authorized to represent the Proposer, and must cite the law, rule, local ordinance, procedure or Solicitation provision on which the protest is based. In addition, the Notice of Protest must specify facts and evidence sufficient for the City to determine the validity of the protest.

13.10.2 Protest of Non-Responsible Determination

Within three (3) business days of the City's issuance of a Notice of Non-Responsibility, a Proposer may submit a written Notice of Protest of Non-Responsibility. The Notice of Protest must include a written statement specifying in detail each and every one of the grounds asserted for the protest. The Notice of Protest must be signed by an individual authorized to represent the Proposer, and must cite the law, rule, local ordinance, procedure or Solicitation provision on which the protest is based. In addition, the Notice of Protest must specify facts and evidence sufficient for the City to determine the validity of the protest.

13.10.3 Protest of Prequalified Pool Creation

Within three (3) business days of the City's issuance of a Notice of Intent to Award, a Proposer may submit a written Notice of Protest of Contract Award. The Notice of Protest must include a written statement specifying in detail each and every one of the grounds asserted for the protest.

The Notice of Protest must be signed by an individual authorized to represent the Proposer, and must cite the law, rule, local ordinance, procedure or Solicitation provision on which the protest is based. In addition, the Notice of Protest must specify facts and evidence sufficient for the City to determine the validity of the protest.

13.10.4 Delivery of Protests

A Notice of Protest must be written. Protests made orally (e.g., by telephone) will not be considered. A Notice of Protest must be delivered by mail or email to the Contract Administrator whose name and contact information appears on the cover page to this Solicitation and received by the due dates stated above. A Notice of Protest shall be transmitted by a means that will objectively establish the date the City received the Notice of Protest.