2026, 2028, and 2030 SOC 2 Examinations of NDIT - 117-26-03

North Dakota’s Office of the State Auditor is seeking an independent CPA firm to conduct three SOC 2 (Type 2) and SOC 3 audit examinations for the North Dakota Information Technology Department (NDIT) on behalf of the Bank of North Dakota. The engagements span three 12‑month periods ending September 30 2026, 2028, and 2030, with final reports due the following February. The work is performed under a firm‑fixed‑price contract, requires on‑site access, travel, and the delivery of draft and final reports, response to comments, and presentations to the IT Committee and BND steering groups. • Perform SOC 2 Type 2 examinations and SOC 3 reports for three fiscal periods, adhering to the latest AICPA Trust Services Criteria. • Provide kickoff meetings, draft reports, comment‑response cycles, final reports, and mandatory presentations to state stakeholders. • Maintain independence, pass peer‑review, and supply required insurance; all work products become works‑for‑hire owned by the State. • Submit separate technical and cost proposals via the NDBuys portal; cost proposal follows a prescribed template and is evaluated after the technical score. • Contract term runs from anticipated July 2026 start through February 2031 final deliverables, with a 60‑day offer‑held period after proposal submission.