SW-117303 - USA (Massachusetts) - Cloud-Based Internal Audit Management Software - Deadline August 10,2026

(1) Vendor needs to provide cloud–based internal audit management software.– Solution must support the complete internal audit lifecycle and provide a scalable foundation for future expansion into selected governance, risk, and compliance capabilities.– Risk assessment and scoring, including inherent risk, control effectiveness, residual risk, professional judgment overrides, rationale, evidence, and approval workflow.– Enterprise Risk Management: risk registers, risk taxonomy, risk appetite/tolerance, KRIs, mitigation plans, risk ownership, heat maps, and audit coverage linkages.– Automated reminders, alerts, and escalations for review notes, requests, management responses, overdue action plans, and expiring due dates.– Ability to support confidential investigations or restricted audits with additional access controls.– Time tracking for audit and non–audit activities, including weekly timesheets, budget–to–actual, utilization, and portfolio–level capacity reporting.– Engagement planning and execution, including configurable audit programs, procedures, tasks, budgets, scope and objective documentation, risk and control matrices, engagement–level status tracking, and workflow controls for assignment, review, and approval.(2) The contract period will be for five years.