RFQ 735-16-6189 Auditing Services-Information Security Compliance Audit

Midwestern State University is seeking a qualified firm to conduct an information‑security compliance audit focused on NIST SP 800‑53 Priority‑1 controls that were required to be implemented by February 2015. The vendor must assess existing security measures, evaluate the university’s IT environment, staff qualifications, and related policies, then deliver a comprehensive written report with findings, risk analysis, and a prioritized corrective‑action plan. The audit work must be performed in a defined window in the summer of 2016, with a final report due later that year, and the firm must meet specific experience, certification, and licensing requirements. • Audit NIST 800‑53 P1 controls for a Texas public university. • Deliver a full written report with risk assessments and remediation recommendations by the contract‑specified deadline. • Must be a CPA‑licensed firm with at least two years of relevant IT audit experience and staff holding CISA or CISSP certifications. • Submission limited to a 20‑page PDF qualification statement, due early June 2016.