The entity is seeking proposals from firms to evaluate and make substantive recommendations
regarding the processes used by the universities in preparing and completing their universitywide
IT risk assessments. The firm will also evaluate how the universities’ administrations use
the results of the risk assessments, and will assist internal audit in prioritizing risks and
identifying and ranking critical IT audits for purposes of constructing the IT portion of the
annual audit plans. All drafts and the final report shall be confidential.