RFP SAH 2018-09 - Request for Proposal For Internal Audit Function

The intent is that the selected proponent, within the allotted budget, will carry out internal audit services on a cyclical basis, focusing upon the area and processes where risk assessed by management is deemed to be highest.  At present, SAH is in the process of developing and enhancing its Enterprise Risk Management (ERM) registry.  The ideal future state will see this registry, and the risk assessment within, be used to determine the area of focus for each audit year.
 
SAH is still in the process of developing and enhancing its Enterprise Risk Management (ERM) registry.  A formal risk assessment for the whole organization has not yet occurred.  Using its knowledge of the healthcare industry, the selected proponent will recommend an area for the focus of the F2018/19 audit and subsequent audits until which time SAH has a mature risk register. Management will use this recommendation and its understanding of the control environment for the recommended areas to select the area to be audited.   
 
Specifically, SAH is expecting that one internal audit is completed in F2018/19 and two internal audits are completed in subsequent years.  Please bear in mind the fiscal environment under which hospitals are operating when preparing your proposed submission. SAH will carefully consider the value of the proposed work in light of the fee being assessed