Requesting proposals from qualified firms to perform an external audit of their information technology environment.