RFP 2027000044 Lottery SOC 1 Type 2 Audit.pdf

Request for Proposals

Solicitation Number: 2027000044

Solicitation Title: Lottery SOC 1 Type 2 Audit

Publication Date: October 27, 2026

Request for Proposals Page 1 of 21

TABLE OF CONTENTS

I. INTRODUCTION 4

A. General Information 4

B. Background 4

C. Overview 4

D. Sole Point of Contact 4

E. Schedule of Activities 5

F. Pre-Proposal Meeting 5

G. Start Date 6

H. Anticipated Contract Term 6

II. OFFEROR’S EXPERIENCE AND PERSONNEL 6

A. Organizational Experience 6

B. Organizational Personnel 7

III. REQUIREMENTS 7

A. Accessibility Requirements 7

B. Mandatory Requirements 7

IV. SCOPE OF WORK AND SPECIFICATIONS 8

A. General Specifications 8

B. Audit Controls and Objectives 9

C. Schedule 13

D. Audit Tasks 13

E. Key Personnel 14

F. Background Checks 14

G. Changes to Security Information 16

V. REQUESTED PROPOSAL FORMAT 16

A. Administrative Documents 16

B. Technical Proposal 16

C. Cost Proposal 18

VI. EVALUATION METHODOLOGY 18

A. Evaluation Process 18

B. Evaluation Committee 18

C. Proposal Evaluation Criteria 19

D. Demonstrations and Discussions 19

E. Single proposal 20

F. Award 20

G. Investigation of Apparent Successful Offeror 20

Request for Proposals Page 2 of 21

Appendices

Appendix A - Administrative Information

Appendix B - Offeror Proposal Signature Page

Appendix C - Cost Proposal

Appendix D - Sample State of Colorado Contract

Request for Proposals Page 3 of 21

I. INTRODUCTION

A. General Information

On behalf of the State of Colorado, Department of Revenue (State or Lottery), pursuant to C.R.S. 44-40-112 and 44-40-120, is issuing this Request for

Proposals for the Lottery System and Organization Controls (SOC) 1 Type 2

Audit.

B. Background

It is the Lottery’s mission to create and sell Lottery games of chance that are held to the highest standards of integrity, entertainment, and efficiency, in order to maximize proceeds for the people of Colorado. Since 1983, we have proudly returned more than $4 billion to Colorado for parks, recreation, open space, wildlife projects, and public school construction. It is the support of our valued players and committed retailer partners that enables us to further enhance our most valuable natural resource — the great outdoors.

The history of Lottery and other related information can be found on the official site at: https://www.coloradolottery.com/en/.

C. Overview

The Lottery requires a qualified independent third-party Certified Public

Accountant (CPA) firm licensed to do business in Colorado to perform SOC 1

Type 2 audit of the Lottery’s Central Gaming System (CGS), Multi State Lottery

Association (MUSL) mandated Internal Control System (ICS), and Lottery controls. The audit is to identify operational processes, identify risks associated with those operational processes, and document and test the adequacy of the controls that are in place to minimize the identified risks.

D. Sole Point of Contact

1. The State’s sole point of contact for this solicitation is Jen Risley, Purchasing Agent, who may be reached via email at jennifer.risley@state.co.us.

Request for Proposals Page 4 of 21 https://www.coloradolottery.com/en/

2. The individual listed above is the sole point of contact for this solicitation. Initiating contact with anyone other than this individual may result in Offeror disqualification.

E. Schedule of Activities

This Schedule of Activities is for information and planning purposes only.

Schedules for Activities listed as “Estimated” may be subject to change depending on the needs of the State. All times are considered in Mountain Time

(MT), as adjusted for daylight saving time.

# Activity Date/Time (if applicable)

1 The date of publication for this solicitation on Colorado VSS

October 27, 2026

2 Written inquiries deadline. Written inquiries must be submitted to jennifer.risley@state.co.us

November 16, 2026 at

11:59 PM

3 The estimated date for the State’s responses to written inquiries to be published on Colorado VSS

November 18, 2026

4 Proposal submission deadline. December 16, 2026 at

11:59 PM

5 A public opening of the proposals will be held at link.

December 17, 2026 at

10:00 AM

6 The estimated date for the publication of an Intent to Award on Colorado VSS

January 21, 2027

F. Pre-Proposal Meeting

The State will not be holding a pre-proposal meeting.

Request for Proposals Page 5 of 21 https://meet.google.com/ciy-rgzy-aoq?authuser=0

G. Start Date

The desired Contract or Purchase Order start date is July 1, 2027.

H. Anticipated Contract Term

1. The initial term of the awarded Contract is anticipated to begin on contract execution and end on June 30, 2028. This Contract may be renewed for up to four (4) additional periods of one year or less at the sole discretion of the State. The total duration of the Contract, including all options, is not anticipated to exceed five (5) years.

2. The State may extend the Contract beyond the anticipated term in accordance with the Colorado Procurement Code, and in the event that the State determines an extension is necessary.

3. The State may, within its sole discretion, choose not to exercise any option or extension term in the Contract for any reason. If the State chooses not to exercise any option or extension term, it may re-procure the goods and/or services in its sole discretion.

4. The State reserves the right to add additional goods/services that would be a natural extension of this solicitation.

II. OFFEROR’S EXPERIENCE AND PERSONNEL

A. Organizational Experience

1. Offeror should have experience successfully completing SOC or cybersecurity audits. Successful completion of a minimum of three (3)

SOC 1 Type 2 or cybersecurity audits is preferred.

2. Offeror should be independent for this audit engagement. Offeror will not have contracted directly with Lottery’s contractors, Brightstar

Lottery (BSL), Scientific Games, Inc. (SG), Spectra Systems, or Intralot for audit services in the past year or current year. If Offeror has provided attestation or non-audit services for BSL, SG, or Intralot within the past year or current year, the Offeror will apply appropriate safeguards to eliminate the conflict or reduce it to an acceptable level. In cases where an identified conflict may be so significant that no safeguards will

Request for Proposals Page 6 of 21 eliminate the conflict or reduce it to an acceptable level, or the Offeror is unable to implement effective safeguards, Offeror should decline to perform these services. Refer to Appendix A. Administrative

Information, Section M. Conflicts of Interest and Ethics for requirement to disclose any potential or actual conflict of interest.

3. Ability to pass background requirements of §44-40-106 C.R.S. and agreement to provide any requested information.

B. Organizational Personnel

1. Offeror should have a minimum of three (3) experienced personnel consisting of at least one (1) CPA.

2. Lottery prefers that the Offeror has one (1) certified information systems security professional (CISSP) and one (1) certified information systems auditor (CISA) assigned and actively working on the audit.

III. REQUIREMENTS

A. Accessibility Requirements

All work performed as a result of this solicitation must comply with all applicable provisions of §§24-85-101, et seq., C.R.S., and the Accessibility

Standards for Individuals with a Disability, as established by the Office Of

Information Technology pursuant to Section §24-85-103 (2.5), C.R.S. and 3) all

State of Colorado technology standards related to technology accessibility and with Level AA of the most current version of the Web Content Accessibility

Guidelines (WCAG), incorporated in the State of Colorado technology standards.

B. Mandatory Requirements

In order for the State to consider a proposal to be responsive, Offeror must meet the mandatory requirement. An Offeror’s failure to provide a statement in the proposal that Offeror meets the mandatory requirement may cause State to consider its proposal non-responsive and the State may reject its proposal.

Request for Proposals Page 7 of 21

1. Offeror must be an independent third party CPA firm licensed to do business in Colorado.

2. Offeror must have MUSL participating lottery experience or equivalent experience in the lottery industry.

IV. SCOPE OF WORK AND SPECIFICATIONS

This Scope of Work describes the deliverables sought through this RFP and the scope of what the awarded Offeror may be expected to offer through the contract resulting from this RFP. The Scope of Work is intended to provide interested Offerors with sufficient basic information to submit a proposal. It is not intended to limit a proposal’s content or exclude any relevant or essential data.

A. General Specifications

The Offeror will provide two separate reports; one pertaining to the CGS, which is operated by the Lottery’s Contractor, BSL, and the other is focused on

MUSL mandated ICS and Lottery controls. One report will be delivered to BSL and both reports will be delivered to the Lottery.

The Offeror should:

1. Perform an audit in accordance with the American Institute of Certified

Public Accountants (AICPA) Statement on Standards for Attestation

Engagements and related guidance.

2. Have the resources available to satisfy the requirements of the solicitation.

3. Carry out this project under the direction and control of the Lottery. The

Lottery will provide a project manager. In addition to continuous liaison with the Lottery, the Lottery’s project manager will meet at their discretion as needed with the Offeror’s project manager for the purpose of reviewing progress and providing necessary guidance to the Offeror in solving problems as they arise.

4. Conduct all interviews with the Lottery’s service organizations and have a designated Lottery representative present.

Request for Proposals Page 8 of 21

5. Submit brief written bi-weekly summaries of progress which outline the work accomplished during the two-week period; work to be accomplished during the next two-week period; identify any problems, whether real or anticipated; and any deviation from previously agreed-upon audit plans.

6. Provide a Controls Summary Sheet with copies of the audit report when distributed each State Fiscal Year. The Controls Summary Sheet shall contain a list of the total controls completed for the Lottery and for the

CGS and any controls impacted by any change in a reporting period. The

Controls Summary shall be provided to the Lottery when invoicing for impacted controls and additional hours worked.

7. Provide a Lottery approved secure portal for artifact and report delivery.

B. Audit Controls and Objectives

The SOC 1 Type 2 reports should address the controls in place during this time, whether the descriptions are fairly presented, whether they are suitably designed to achieve the specified objectives, and whether they were necessary to provide reasonable assurance that the control objectives were achieved and operated effectively for the period specified. Controls provide reasonable assurance that:

1. Organization and Administration

a) Systems are maintained and operated to provide for adequate segregation of responsibilities to promote accountability and minimize the likelihood of material errors or irregularities.

b) Adherence to policies and procedures surrounding security initiatives and ethical behavior is maintained.

c) A security awareness training program is in place and in use.

2. Draw Game and Processing

a) Valid wagers are captured as transactions and are properly recorded and invalid transactions are rejected on all gaming systems (primary and backup(s).

Request for Proposals Page 9 of 21

b) Recorded wagers are properly summarized and maintained from purchase through end-of-day processing and validations are properly accumulated for settlement.

c) Cancellation attempts, internal or retailer requests, are recorded, and only valid cancellations are accepted by the gaming system application.

d) Winning numbers are input completely and accurately into the gaming system application.

e) High value winning tickets can only be validated by authorized terminals.

f) Purging of expired winning wagers is accurately performed and reported 180 days after the draw.

g) Results of a draw are accurately compared between the CGS and the ICS. Controls provide reasonable assurance that draw processing is performed for all jackpot games (including raffle when scheduled), and the accuracy and completeness of the processing is verified, according to established procedures.

h) Second chance and promotional drawings are conducted in a secure manner.

i) CGS contractor maintains a complete and accurate record of the ticket stock database.

3. Instant Ticket Processing

a) Instant tickets are properly logged and reported on the gaming system application.

b) Lottery and retailer designated changes to ticket pack status, including returned ticket packs, are properly reflected on the related data files.

c) Winning tickets are validated once for the correct prize amount and high-value winning tickets can only be validated by authorized terminals.

d) Retailer settlements are complete and accurate.

Request for Proposals Page 10 of 21

e) Instant ticket game loads are authorized and completely and accurately entered.

4. Claims and Payments

a) CGS maintains an accurate record of all winner claims, warrants, intercepts, ineligibles, taxes, related validations, 2nd chance prizes, and associated non-winning tickets.

b) All claims are completely and accurately reflected on data files and reports and conform to lottery business rules.

c) Intercept files are properly secured and are in compliance with the state of Colorado Cyber Security Policy P-CISP-011.

d) Ineligible files are properly secured and are in compliance with the state of Colorado Cyber Security Policy P-CISP-011.

e) System maintains a history of winning claims and associated information for the three previous fiscal years and the current fiscal year.

f) Sensitive information provided on claim forms is stored securely both electronically and physically (at Lottery’s headquarters and warehouse).

g) Transmission of all claimant data is performed in a secure manner

(whether the transmission is electronic or physical).

5. Logical Access

a) Assignment or modification of user access rights to programs, data, and computer resources is properly approved and the removal of user access rights is timely.

b) Logical access to programs, data, and computer resources is restricted to appropriately authorized personnel.

c) Access to the test environment is granted to authorized personnel only. The test environment will be securely segregated from the production environment.

6. Computer Operations

Request for Proposals Page 11 of 21

a) Scheduling and setup of computer processing is performed, and the accuracy and completeness of the processing is verified, according to established routines and procedures.

b) Tracking and reporting of processing problems is performed according to established procedures.

c) Backup procedures have been developed to minimize interruptions in data processing and tape management is handled according to policy.

d) Management of gaming system hardening is adequate; primary and backup gaming systems are identical in hardware and configuration, and anti-virus signatures and patterns are current.

e) Adequate emergency power source is available and starts up automatically on power failure.

f) Bi-annual testing of failover procedures of the CGS for one

Powerball draw period is satisfactory.

7. Change Management

a) Changes to application programs and related data management systems are authorized, tested, documented, approved, and implemented to result in the complete, accurate, and timely processing and reporting of transactions.

8. Physical Security Controls and Environment Safeguards

a) Physical access to game processing facilities is restricted to appropriate personnel.

b) Environmental safeguards are in place at all game processing facilities.

9. Network Security

a) Production gaming network is protected from unauthorized access and alternate routing has been established in the event of a failure in the primary network routing.

b) Adequate policies and procedures are in place and being followed for intrusion detection and monitoring of the CGS and ICS.

Request for Proposals Page 12 of 21

C. Schedule

1. Period of Transaction Testing - July 1 to March 31

2. Final Acceptance of Audit Report - June 1

D. Audit Tasks

The minimum audit tasks include:

1. In-Depth Audit Plan

Within ten (10) working days of the execution of the Contract resulting from this solicitation, the Offeror should submit an in-depth audit plan to the Lottery’s project manager to coordinate approval. The audit plan should include:

a) The Offeror’s project organizational structure, including a staffing table with names and titles of personnel assigned to the project.

This should be in agreement with the personnel shown in Offeror’s proposal.

b) The project work breakdown structure should show sub-projects, activities and tasks, timeline and the resources required and allocated to each resource.

2. Project Kickoff

Following plan approval and before any work begins, the Offeror’s project team and participating State employees must hold an initial kickoff meeting.

3. Draft Report

Offeror will provide draft SOC 1 Type 2 reports and other applicable documents.

4. Final Reports

Upon the Lottery’s final acceptance of the reports, the Offeror will submit to the Lottery and BSL the final reports in a secure fashion on or before June 1.

Request for Proposals Page 13 of 21

5. Exit Interview

The Offeror should attend an exit interview with the Contractor’s audit personnel, the participating State employees, and the participating

State Auditor employees in attendance. This meeting should occur after the copies of the audit reports and associated documents are distributed.

E. Key Personnel

Key personnel assigned shall not be reassigned unless agreed to by the State.

The Offeror shall notify the State of the identity of a departing key individual as soon as the Offeror receives notice of the departure, and of the identity of the individual the Offeror intends to replace and occupy in the key position.

The State shall have the final approval of any key individual(s) the Offeror intends to perform services. Such approval shall not be unreasonably withheld or delayed. In the event that the State denies access to, or requests removal of specific Offeror personnel, the Offeror shall provide acceptable replacement with no impact to the services.

F. Background Checks

Offeror understands and agrees that, before Offeror or any Subcontractor may perform any Work under a Contract, the State must perform background checks on all Offeror and Subcontractor employees and agents directly performing

Work on the Lottery’s account or having access to State Records under a

Contract. The background check may include, at the State’s sole discretion, any or all of the following: a nationwide criminal history check, fingerprint-based criminal history records check, tax check, reference check, and citizenship/residency check, or other check as may be deemed necessary by the State.

1. Prior to conducting a background check, the State will provide Offeror with the appropriate consent form(s) permitting the State to conduct a background check for an identified employee. Offeror shall return signed

Request for Proposals Page 14 of 21 consent forms for each employee or Subcontractor employee who will perform Work and/or have access to State Records under a Contract. If any employee refuses to sign the consent form(s), provide fingerprints, or provide any other information necessary to complete the background check, the employee will be disqualified from performing any Work under a Contract.

2. Based on the results of the background check, the State will make the sole determination on the suitability of an Offeror or Subcontractor employee to perform Work under a Contract. If information is revealed during a fingerprint-based criminal history records check that would disqualify the employee from performing Work under a Contract, the employee will be notified in writing by the State and will be afforded the opportunity to provide evidence refuting the finding and to correct the information as set forth in 28 C.F.R §16.34.

3. If, after a successful background check has been performed, any Offeror or Subcontractor employee performing Work under a Contract is criminally charged with a felony, misdemeanor, petty offense, alcohol or drug-related driving offense, misdemeanor traffic offense, or any other offense which has the potential to impact the employee’s ability to perform the Work, the criminal charges must be reported by Offeror to the State within two (2) business days of the filing of charges.

4. Upon final judgment on a verdict of guilty, a plea of guilty, or a plea of nolo contendere to any of the above criminal offenses, the conviction shall be reported to the State within two (2) business days of the verdict or plea.

5. Either the disclosure or failure to report criminal charges or convictions as required herein will subject the Offeror or Subcontractor employee to a new background check and the State may, at its discretion, prohibit the employee from performing Work under a Contract.

Request for Proposals Page 15 of 21

6. If an Offeror or Subcontractor employee falsifies information or documents pertaining to a background check conducted by the State, the State may, at its discretion, disqualify the employee from performing

Work under a Contract.

G. Changes to Security Information

The Offeror shall report any change in, addition to, or deletion from, the information disclosed to the State. Offeror must report the involvement of any of Offeror’s employees, owners, or agents in any known criminal arrest

(exclusive of minor traffic violations) or investigation. The report shall be in the form of a letter addressed to the State’s Principal Representative and the

Lottery Director of Security and Investigations and shall be delivered within thirty (30) days of the effective date of the change, addition, or deletion.

V. REQUESTED PROPOSAL FORMAT

Proposals should cover the following areas, with an emphasis on how these areas relate to the evaluation criteria listed in this Request for Proposals.

A. Administrative Documents

Offeror will submit with its proposal the following documents:

1. Offeror Proposal Signature Page (Appendix B)

2. Request for Taxpayer Identification Number and Certification - Form W-9

3. Submission of Confidential or Proprietary Information (see Appendix A, Section 2, H)

4. Modifications to State Contract (see Appendix A, Section 2, L)

5. Conflicts of Interest and Ethics (see Appendix A, Section 2, M)

B. Technical Proposal

1. Offeror’s Experience and Personnel

a) Describe how the Offeror’s experience and capabilities make it the ideal candidate to perform the work. Describe experience

Request for Proposals Page 16 of 21 with similar projects. Reference Section II regarding the desired organizational experience.

b) Confirm Offeror is independent for this audit engagement.

c) Indicate key personnel who should be assigned to the project and describe their experience. Reference Section II regarding the desired organizational personnel.

d) Provide three (3) business references for whom the Offeror has performed projects of similar nature, size, type, and complexity within the last five years. Reference information should include the company name, contact person, email address, telephone number, and date and description of goods provided/service performed. The State reserves the right to contact references and to obtain references from previous clients at any point.

2. Accessibility Requirements

Describe how the Offeror’s proposed solution should meet or exceed the accessibility requirements detailed in this solicitation. Reference Section

III Accessibility Requirements.

3. Mandatory Requirements

a) Confirm Offeror is a properly licensed, certified accounting firm authorized to practice in the State of Colorado.

b) Describe MUSL's participating lottery experience or equivalent experience in the lottery industry.

4. Scope of Work and Specifications

a) Provide the methodology for completing the Scope of Work.

b) Provide a proposed audit plan.

c) Describe how you communicate the requirements of the audit, such as audit specification and deadline information, with the appropriate personnel.

Request for Proposals Page 17 of 21

d) Describe how you would manage audit data and securely exchange sensitive documents.

e) Provide a sample audit report.

C. Cost Proposal

Submit the Cost Proposal (Appendix C) as a separate file labeled “Offeror Name

- Appendix C - Cost Proposal”. All costs must be included.

VI. EVALUATION METHODOLOGY

A. Evaluation Process

A comprehensive, thorough, complete and impartial evaluation of each proposal received shall be conducted in accordance with §24-103-203(7), C.R.S, which states, “The award shall be made to the responsible offeror whose proposal is determined in writing to be the most advantageous to the state, taking into consideration the price and evaluation factors set forth in the request for proposals.”

B. Evaluation Committee

1. An Evaluation Committee will be established utilizing measures to ensure the integrity of the evaluation process. These measures include the following:

a) Selecting committee members who do not have a conflict of interest regarding this solicitation.

b) Facilitating the independent review of proposals.

c) Requiring the evaluation of the proposals to be based strictly on the content of the proposals.

d) Ensuring the fair and impartial treatment of all Offerors.

2. The objective of the Evaluation Committee is to conduct reviews of the proposals that have been submitted, to hold frank and detailed discussions among themselves, and to recommend an Offeror for award.

Request for Proposals Page 18 of 21

C. Proposal Evaluation Criteria

1. The State shall evaluate proposals to determine if each Offeror meets all mandatory qualification requirements; provided, however, that the State has the authority to waive non-material mandatory requirements in certain circumstances. Reference Procurement Rule R-24-103-301-03.

The mandatory qualification requirements are scored on a Met/Not Met basis and only those proposals found to meet all mandatory requirements, other than non-material mandatory requirements waived by the State, can be considered for a Contract resulting from this solicitation.

2. Proposals shall be evaluated by the Evaluation Committee using the evaluation criteria listed below. The evaluators will consider whether the Scope of Work requirements in the solicitation have been addressed, and they will review the capabilities of the Offeror, as well as the quality of the approach proposed, the price, and any other aspect determined relevant to the evaluation criteria.

3. The evaluation criteria to be used in evaluating the proposals are as follows (and are listed in no particular order):

a) Experience

b) Scope of Work

c) Cost

D. Demonstrations and Discussions

1. The Evaluation Committee may, if it deems necessary, request clarifications, conduct discussions or oral presentations, or request best and final offers. Per R-24-103-203-03, discussions may be held with responsible offerors whose proposals are determined to be reasonably susceptible to be selected for award to:

a) Promote understanding of the state’s requirements and the offerors’ proposals; and

Request for Proposals Page 19 of 21

b) Facilitate a contract that shall be most advantageous to the state taking into consideration price and the other evaluation factors set forth in the request for proposals.

2. The Evaluation Committee may adjust its scoring based on the results of such activities. However, proposals may be reviewed and determinations made without such activities. Offerors should be aware that the opportunity for further explanation might not exist; therefore, Offerors should ensure that their submission is complete, and are encouraged to submit their best possible proposal, including pricing.

E. Single proposal

If only one bid or proposal is received in response to a solicitation, an award may be made to the single bidder or offeror if the procurement official finds that the price submitted is fair and reasonable and that other prospective bidders or offerors had reasonable opportunity to respond. Reference

Procurement Rule R- 24-103-201-02(d).

F. Award

1. A Notice of Intent to Award shall be published on Colorado VSS.

2. The award determination is ultimately a business decision that shall reflect an integrated assessment of the relative merits of the proposals received, using the factors set forth in this solicitation. The State intends to award Contract(s) to the Offeror(s) whose proposal(s), conforming to the solicitation, shall be most advantageous to the State, price and other factors considered.

3. The State reserves the right to award to multiple offerors if it is determined to be in the best interest of the State.

G. Investigation of Apparent Successful Offeror

Prior to Contract execution, the Apparent Successful Offeror State must disclose information requested by the State to perform any investigation pursuant to §44-40-106 C.R.S. The Apparent Successful Offeror means the responsive, responsible Offeror whose bid is selected for award, but for whom

Request for Proposals Page 20 of 21 financial and security background investigations have not yet been completed.

The cost of any investigation into the background shall be assessed against

Offeror. The investigation must be successfully completed before execution of a contract resulting from this solicitation.

Apparent Successful Offeror shall be required to submit information, including:

1. Certified financial statements (or federal income tax returns if Offeror does not have certified financial statements) prepared for the last two

(2) fiscal years. The certified financial statements shall be prepared in accordance with Generally Accepted Accounting Principles, and must include balance sheets, income statements, statements of cash flows, statements of retained earnings, notes to the financial statements, and any management letters that have been received for those years. For non-U.S. entities, equivalent non-U.S. accounting standards apply. If

Offeror is a subsidiary of an entity and does not have its own financial statements, Offeror may satisfy this submission requirement by submitting consolidated financial statements of its parent entity if the consolidated financial statements include activity of Offeror.

2. Most recent ratings from Moody, Standard & Poor and Fitch. If a parent is serving as a guarantor of Offeror, Offeror must submit the most recent ratings for the parent.

3. All personnel background information required.

4. Other information necessary as the investigation progresses.

Request for Proposals Page 21 of 21