Oregon State Treasury - Oregon Buys - Agency Bids & RFPs

The Oregon State Treasury is seeking an external firm to audit private markets sub-programs of private equity and real assets. The audit period is for twelve months. Proposals are due July 18, 2025, 12:00 PM Pacific Time. Proposers must meet minimum qualification requirements, including certifications (CPA, CFA, or CIA). A pre-proposal conference is not scheduled. Protests must be submitted in writing, by email or hand-delivery, at least seven calendar days prior to the closing date. Additional information, including required attachments (sample contract, disclosure exemption affidavit, certification sheet, reference check form, price proposal, cobid certification outreach plan, responsibility inquiry form), is detailed in the RFP document. The final contract will address whether the state will provide laptops or if the vendor will use their own IT equipment for the audit. Compliance with information security standards (e. g. , ISO ****, SOC 2 Type II, NIST CSF) is required. All audit data must be encrypted. The selected firm will conduct interviews, verify risks, controls, and develop a risk control matrix, conduct fieldwork, walkthroughs of the program, sampling testing procedures, entrance and exit meetings with private market key stakeholders and complete deliverables as outlined in Exhibit 1.

This is a sole source procurement notice for Albert sensor monitoring services. The Oregon State Treasury intends to award a contract to Center for Internet Security, Inc. (CIS) for cybersecurity services. Protests regarding the sole source determination must be submitted via email to the specified contact by the bid opening date. Protests must include a detailed statement of legal and factual grounds, a description of resulting harm, and the requested relief. The anticipated contract amount is $145,000.