Request for Proposal information
Technology Audit Assessment
Housing Authority of the City of Hartford
180 John D Wardlaw Way
Hartford, CT 06106
The Housing Authority of the City of Hartford (HACH) is located at 180 John D Wardlaw Way in
Hartford, CT. The Agency’s primary mission is to administer subsidized rent programs throughout the
City of Hartford. These programs are funded by the U.S. Department of Housing and Urban
Development (HUD). The agency currently services over 3,000 households each month through various
rental assistance and low-income housing programs.
Purpose of the RFP
The HACH is seeking the services of a qualified firm experienced in assessing Information
Technology (IT) for the purpose of performing an Audit Assessment of the HACH’s IT environment and
developing a continuing IT audit plan. The successful proposer will review the existing equipment,
software, policies, and procedures for their reliable information technology systems and data storage.
Important Dates for the Solicitation
Issue Date: May 29, 2020
Deadline for Submittal of Proposals: June 18, 2020 2 PM
Scope of Services
Consultant will obtain an understanding of key business operations, the IT environment, new
and on-going IT initiatives, key data information flows, and IT risk management infrastructure (policy,
procedures, organization, etc.).
a. Consultant will analyze and evaluate the quality of processes, routines, and
controls of the following general IT processes:
Organization and management of IT operations
ii) Local area networks infrastructure
iii) Application development and maintenance
iv) Computer operations and disaster recovery plan
v) IT application, network and infrastructure security
vi) Identify opportunities for improvement and develop practical and cost -
effective recommendations for each opportunity identified
vii) System access control. Assessment should include evaluations specific
to the following functions:
IT Structure within organization
Cross training and skills of IT staff
Change control process and accompanying documentation
User id/password management and logical access controls
Local Area Network (LAN) and Wide Area Network (WAN)
Network, system, and application security control
Authentication and remote access infrastructure
Problem escalation, resolution
Maintenance and testing
Assets and infrastructure
Physical access and environmental controls
Standards used to evaluate third party vendors
Standards used in purchasing and maintenance
Software licensing audit
In house application development, maintenance, application roll
out and training
Security camera system for each apartment complex
Implementation and Deliverables
Consultant shall meet with the HACH’s management team to discuss an implementation
schedule for the tasks identified in the scope of services.
Consultant will provide the following:
Conduct weekly meeting or a deemed necessary to discuss progress and unique
issues that may have surfaced
Provide a weekly status report against each contact performance measure to
the management team
Prepare a detailed listing of each of the assessment activities performed by
phase, with links to reports and outputs created by all of the tools used during the assessment
Provide a list of key security measures already in place and depiction of the
network environment that was assessed, including reliability of hardware, software for
secure/reliable data storage
A list of the IT issues identified the risk they pose, and recommendation for
Identify opportunities for improvement and develop practical and cost-effective
recommendations for each opportunity identified
The assessment completion date shall be within two months after receipt of Notice to Proceed.
Proposal Submission Requirements
The Consultant shall be responsible for preparing an effective, clear, and concise proposal.
Proposals must contain the following information:
Provide a list of similar engagements that the firm has performed within the last
Provide a list of name(s) and professional qualification, responsibilities and
resumes of the managerial, technical and support staff identified to conduct the engagement.
III. Provide at a minimum, one (1) audit professional with valid Certified
Information Systems Security Professional (CISSP) certificate or equivalent credentials, and one
(1) Project Manager dedicated to project oversight and communication with HACH.
IV. Reference check. Provide a minimum of three (3) references of similar projects,
including date of project, contact person and phone number and brief description of the project.
V. Fee Schedule. Provide a standard fee schedule (hours rates, or other fee
schedule) for the personnel who would be assigned to this project.
VI. Provide number of years firm has been in business and the firm’s qualifications
and experience performing similar IT reviews/audits.
Each proposal received will be evaluated and a determination will be made if it meets the minimum
requirements. Failure to meet these requirements will be a cause for eliminating the proposal from
The HACH reserves the right to reject any and all proposals, to waive any technicalities,
informalities and irregularities, to accept or reject all or part of the proposal, and to be the sole judge of
the suitability of the proposals offered.
In addition to evaluating written proposals, oral interviews may be requested. Proposals will be
evaluated generally on the following criteria, which is neither weighted nor prioritized:
Ability, capacity, and skill of the Proposer to perform the scope of work
II. Proposed fee structure that is the most advantageous to HACH
III. Staff qualifications – quality of staff/team members assigned to the project
IV. Reference check
All submittals in response to this solicitation are public records and available for inspection and
copying upon request.
HACH reserves the right to reject any and all proposals submitted in response to the solicitation.
The HACH is under no obligation to award any Agreement as a result of this solicitation.
The HACH strongly encourages minority-owned and women-owned businesses, socially and
economically disadvantaged business enterprises, and small businesses to submit proposals, to
participate as partners, or to participate in other business activity in response to this solicitation.
The firm awarded the contract agrees to use its best efforts to subcontract and employ minority
business enterprises and/or women business enterprises. The HACH is an equal opportunity employer
and requires its entire contractor to comply with policies and regulations concerning equal employment
Terms and Conditions
Housing Authority Contacts:
Questions must be directed to firstname.lastname@example.org. No questions will be accepted after 5
pm on June 11, 2020.
The contract resulting from this solicitation will be in the form of a standard HACH purchase
order with the rider attached to this solicitation attached to the PO.
1. Section 8/Public Housing Management Software –HACH’s core Section 8/Public Housing
Management software is Emphasys Elite.
2. Financial Management Software –HACH’s financials are managed through Emphasys Elite.
3. Payroll and Benefits –HACH’s payroll and benefits data is managed by ADP currently and is being
transitioned to NeoGov.
THE ATTACHED PURCHASE ORDER IS SUBJECT TO THE FOLLOWING:
The following contract clauses are required in contracts pursuant to 24 CFR 85.36(i) and Section 6002 of the Solid Waste
Disposal Act, as amended by the Resource Conservation and Recovery Act. United States Department of Housing and Urban
Development (“HUD”) is permitted to require changes, remedies, changed conditions, access and records retention, suspension
of work, and other clauses approved by the Office of Federal Procurement Policy. The Housing Authority of the City of Hartford
(the “PHA”) and the vendor identified on the attached purchase order (the “Contractor”) are also subject to other Federal laws
including the U.S. Housing Act of 1937, as amended, Federal regulations, and state law and regulations. The purchase order and
this attachment are referred to herein as the “Contract.”
Examination and Retention of Contractor’s Records. The PHA, HUD, or Comptroller General of the United States, or any of
their duly authorized representatives shall, until three years after final payment under this Contract, have access to and the right to
examine any of the Contractor’s directly pertinent books, documents, papers, or other records involving transactions related to
this Contract for the purpose of making audit, examination, excerpts, and transcriptions.
Right in Data and Patent Rights (Ownership and Proprietary Interest). The PHA shall have exclusive ownership of, all
proprietary interest in, and the right to full and exclusive possession of all information, materials, and documents discovered or
produced by Contractor pursuant to the terms of this Contract, including, but not limited to, reports, memoranda or letters
concerning the research and reporting tasks of the Contract.
Energy Efficiency. The Contractor shall comply with all mandatory standards and policies relating to energy efficiency which
are contained in the energy conservation plan issued in compliance with the Energy Policy and Conservation Act (Pub.L. 94-163)
for the State in which the work under this Contract is performed.
Procurement of Recovered Materials
In accordance with Section 6002 of the Solid Waste Disposal Act, as amended by the Resource Conservation and Recovery Act,
the Contractor shall procure items designated in guidelines of the Environmental Protection Agency (EPA) at 40 CFR Part 247
that contain the highest percentage of recovered materials practicable, consistent with maintaining a satisfactory level of
competition. The Contractor shall procure items designated in the EPA guidelines that contain the highest percentage of
recovered materials practicable unless the Contractor determines that such items: (1) are not reasonably available in a reasonable
period of time; (2) fail to meet reasonable performance standards, which shall be determined on the basis of the guidelines of the
National Institute of Standards and Technology, if applicable to the item; or (3) are only available at an unreasonable price. (b)
Paragraph (a) of this clause shall apply to items purchased under this Contract where: (1) the Contractor purchases in excess of
$10,000 of the item under this Contract; or (2) during the preceding Federal fiscal year, the Contractor: (i) purchased any amount
of the items for use under a contract that was funded with Federal appropriations and was with a Federal agency or a State agency
or agency of a political subdivision of a State; and (ii) purchased a total of in excess of $10,000 of the item both under and
outside that contract.
Termination for Cause and for Convenience (contracts of $10,000 or more).
(a) The PHA may terminate this Contract in whole, or from time to time in part, for the PHA’s convenience or the failure of the
Contractor to fulfill the Contract obligations (cause/default). The PHA shall terminate by delivering to the Contractor a written
Notice of Termination specifying the nature, extent, and effective date of the termination. Upon receipt of the notice, the
Contractor shall: (1) immediately discontinue all services affected (unless the notice directs otherwise), and (2) deliver to the
PHA all information, reports, papers, and other materials accumulated or generated in performing the Contract, whether
completed or in process.
(b) If the termination is for the convenience of the PHA, the PHA shall be liable only for payment for services rendered before
the effective date of the termination.
(c) If the termination is due to the failure of the Contractor to fulfill its obligations under the Contract (cause/default), the PHA
may (1) require the Contractor to deliver to it, in the manner and to the extent directed by the PHA, any work described in the
Notice of Termination; (2) take over the work and prosecute the same to completion by contract of otherwise, and the Contractor
shall be liable for any additional cost incurred by the PHA; and (3) withhold any payments to the Contractor, for the purpose of
set-off or partial payment, as the case may be, of amounts owned by the PHA by the Contractor. In the event of termination for
cause/default, the PHA shall be liable to the Contractor for reasonable costs incurred by the Contractor before the effective date
of the termination. Any dispute shall be decided by the Contracting Officer.
Indemnification – PHA Required Contract Term
Contractor shall indemnify PHA against all losses arising out of any claim against PHA by a non-party to this Contract
(“Claim”), except to the extent that PHA negligently or intentionally caused those losses. To assume the defense of a Claim,
Contractor must notify PHA that it is doing so and shall retain independent legal counsel that is reasonably acceptable to PHA.
PHA is entitled to participate in the defense of a Claim. Contractor shall pay any litigation expenses that PHA incurs in
connection with defense of any Claim.