Internal Audit Services

The State Office of Administrative Hearings in Texas is seeking a qualified vendor to provide comprehensive Internal Audit Services under solicitation 360-26-001, with proposals due by July 17, 2026. The vendor will be responsible for conducting a thorough risk assessment across key agency functions including management and administration, finance and accounting, human resources, information services, and docketing and hearings to develop a prioritized annual audit plan. This plan must be submitted by November 1 of each fiscal year and implemented within 60 days of approval, followed by the execution of at least two audits annually and the delivery of a final audit report prior to August 31. The vendor must ensure the report is promptly submitted to oversight entities such as the Governor’s Office, Texas State Auditor’s Office, and the Legislative Budget Board within 30 days of finalization. All services must adhere to the Standards for the Professional Practice of Internal Auditing, the Institute of Internal Auditors’ Code of Ethics, generally accepted auditing standards, the Texas Internal Auditing Act, and guidelines from the State Auditor’s Office. The contract, initially effective September 1, 2026, through August 31, 2027, includes options for up to three additional one-year renewals and a potential one-year extension at SOAH’s discretion. Award will be based on best value, determined through a weighted evaluation of competence and ability to perform (50%), past performance (30%), and likelihood of timely delivery (20%), with mandatory pass/fail gates for financial stability and VetHUB good-faith effort compliance. Proposals must include a certified Cost Proposal using Attachment C format, detailing all costs including time, travel, and business expenses, with firm pricing guaranteed for the contract term. Vendors must complete and sign Attachment B, certifying their qualifications and financial capability, and submit a VetHUB Subcontracting Plan per Attachment D. Strict confidentiality requirements mandate protection of sensitive data including personally identifiable information, financial account details, and social security numbers, while indemnification obligations require the vendor to defend and hold SOAH harmless against claims arising from their performance. Insurance coverage must include workers’ compensation and commercial general liability with personal and advertising injury protection. All submissions must be emailed to [email hidden], properly organized, zipped, and numbered, with an executive summary capped at five pages. The vendor must also disclose any actual, potential, or perceived conflicts of interest