SOC Audit Services

The purpose of this Request for Proposals (RFP) is to solicit sealed proposals for the procurement of Service Organization Control (SOC) examination services for the New Mexico Department of Finance and Administration (DFA). The objective of this RFP is to select a qualified, independent audit firm capable of performing both SOC 2 Type II and SOC 3 examination services for DFA. For each contract year, DFA, in its sole discretion, will determine whether the Contractor will perform a SOC 2 Type II examination or a SOC 3 examination. DFA is not obligated to procure both examination types during any contract year, and the examination selected for one contract year shall not obligate DFA to select the same examination type in any subsequent contract year. The examinations will evaluate the design and, as applicable, operating effectiveness of relevant privacy, cybersecurity, and information-security controls based on applicable Trust Services Criteria, including security, availability, processing integrity, confidentiality, and privacy, as applicable, to provide assurance regarding DFA's safeguarding of sensitive information and the reliability of its systems and operations. The scope of the engagement will include DFA's key financial and human resource management systems within the State of New Mexico's Statewide Human Resources, Accounting, and Management Reporting System (SHARE), including Financial Supply Chain Management (FSCM), Human Capital Management (HCM), and Enterprise Learning Management (ELM).