JPMC Internal Auditing

The Illinois Department of Central Management Services, in agreement with the Chief Procurement Officer for General Services, is requesting proposals for a Joint Purchase Master Contract (JPMC) for Internal Auditing services under RFP 26-416CMS-BOSS4-B-51694, with proposals due October 2, 2026. This is an indefinite-quantity, as-needed contract with no guaranteed minimum work volume to any awarded vendor; the state reserves the right to award multiple vendors and designate them as primary, secondary, and tertiary based on evaluation scores. The 4% Business Enterprise Program (BEP) goal applies; failure to submit a BEP Utilization Plan renders offers non-responsive, and BEP-certified vendors must be certified at the time of bid submission.

The scope encompasses financial, compliance, performance, and information technology audits, cybersecurity assessments, data analytics, and services using COBIT frameworks. All work must comply with Generally Accepted Government Auditing Standards (GAGAS), American Institute of Certified Public Accountants (AICPA) standards, and IRS Publication 1075 requirements. Services may be performed remotely, onsite, or through a combination thereof. Personnel must hold relevant certifications including CPA, CIA, CISA, and CFE as applicable to requested services.

The contract term is seven years from the last dated signature, with a maximum total term not to exceed ten years including extensions. Pricing is submitted as hourly rates for four position categories—Audit Staff, Senior/Lead Auditor, Audit Manager, and Specialized Audit Consultant—segmented by contract years one through seven. Rates are estimated, not firm. All costs, including travel and expenses, must be incorporated into hourly rates; expenses are not allowed separately.

Technical evaluation allocates 500 points: Offeror Experience (150 points), Staff Qualifications and Capacity (125 points), Audit Methodology (100 points), Compliance and Quality Assurance (50 points), Project Management and Deliverables (50 points), and Tools and Innovation (25 points). Commitment to Diversity comprises 100 points (20% of technical points) across six categories: BEP Goal Compliance, Subcontracting with Women/Minority/Disability-Owned Businesses, DEI Spend, DEI Time, DEI Policies, and Staffing Diversity. Pricing is evaluated at 180 points for a maximum of 780 total points. A non-mandatory pre-submission conference is scheduled for August 20, 2026 at 11:00 a.m. via Webex. Questions submitted via email within seven calendar days following the conference will be posted as an amendment in BidBuy. Offerors must submit electronically through BidBuy and include Vendor Disclosure or IPG Active Registered Vendor Disclosure, technical response, Commitment to Diversity plan, and BEP Utilization Plan.