NOTICE OF PROPOSED PROCUREMENT (NPP)
PROFESSIONAL AUDIT SUPPORT SERVICES (PASS)
SUPPLY ARRANGEMENT
Solicitation No.: 2R008-20-0091
Contracting Authority: Veronica Ross, V••••••••@••••.••.ca
Telephone No.: (873)354-9618
E-mail Address: P••••••••@••••.••.ca
This RFP is only for pre-qualified Suppliers for Stream 1: Internal Audit Services and Stream 6: Financial and Accounting Services against Professional Audit Support Services (PASS) Supply Arrangement (E60ZG-060004)
DESCRIPTION OF REQUIREMENT:
The Office of the Privacy Commissioner is responsible for overseeing compliance with both the Privacy Act, which covers the personal information-handling practices of federal government departments and agencies, and the Personal Information Protection and Electronic Documents Act (PIPEDA), Canada’s private sector privacy law.
The Privacy Commissioner of Canada is an Officer of Parliament who reports directly to the House of Commons and the Senate. The Commissioner works independently from any other part of the government to investigate complaints from individuals with respect to the federal public sector and the private sector.
Internal audits and testing of internal controls over financial reporting (ICFR) are key activities that support the Commissioner as accounting officer. Given its small organizational size, it is not practical for the OPC to dedicate full-time resources to internal audit and ICFR testing so it contracts out these activities, while remaining responsible and accountable for the integrity of the internal audit and financial management functions.
The scope of services sought include the full range of internal audit services, including Risk-based Audit Plan (RBAP) development and updates, the conduct of audit engagements according to the approved RBAP, quality assurance and advisory services, and the development of methodologies and tools supporting internal audit activities. Internal audit services must be carried out in accordance with Treasury Board Internal Audit Policy Suite and the International Standards for the Professional Practice of Internal Auditing.
The scope of services will also include the ICFR risk-based testing plan development and updates, and the conduct of the Design Effectiveness testing of key controls processes and when appropriate, conduct the Operating Effectiveness testing including the completion of letters of recommendations of areas of improvement (weakness) along with an action plan developed with the business process owner. ICFR testing must be conducted in accordance with the Treasury Board Financial Management Policy Suite.
