Scope: Test the design and operating effectiveness of IT general and application controls for IRIS (CGI Advantage ERP) and ALDER (data warehouse/reporting), including completeness of management assertions.
Periods: May 1, 2026–April 30, 2027, and May 1, 2027–April 30, 2028.
Standards: AICPA attestation standards and TSP 100 Trust Services Criteria, with revised 2022 points of focus.
Deliverables: Separate CPA-certified reports for each system annually, findings and recommendations, prior finding status, supporting workpapers, and presentation of results.
Schedule: Fieldwork starts April 12, 2027, and April 17, 2028. Draft reports are due June 14, 2027, and June 12, 2028; final reports June 28, 2027, and June 26, 2028.
On-site work: At least 55% of engagement time in Juneau; include travel, lodging, meals, and incidentals in pricing.
Team: CPA certifying officer; senior staff with CISA and CISSP or equivalent credentials; relevant ERP controls review experience.
XL Eagle