Enterprise Risk Management and Internal Audit Services
Overview
Fit Score
Settle Intelligence
Settle helps teams find, evaluate, and respond to public RFPs. We continuously surface new opportunities, score them against your company strengths, and draft proposal responses so you can focus on the work that wins business.
SUMMARY
KEY REQUIREMENTS
BUDGET
VerifiedCONTRACT DURATION
TIMELINE
RFP issued on March 6th, 2026.
Questions due by March 20th, 2026.
Proposals due by March 26th, 2026.
Short list interviews from April 1st, 2026 to April 3rd, 2026.
Notice of Intent by April 10th, 2026.
Anticipated contract award by the week of April 20th, 2026.
Phase 1 (Enterprise Risk Assessment) deliverables (Organization Assessment & Primary Risk Area Identification, Documented Risk Tolerance by Scope Area) in Months 1-2.
Phase 1 deliverables (Internal Control Gap Analysis & Recommendations, Enterprise Risk Register (Initial)) in Month 3.
Phase 2 (Internal Audit Plan Development) deliverables (Independent Review of Risk Register) in Month 4.
Phase 2 deliverables (Draft Risk-Based Internal Audit Plan) in Month 5.
Phase 2 deliverables (Internal Audit Plan - Audit Committee Recommendation, Internal Audit Plan – Board Approval) in Month 6.
Phase 3 (Internal Audit Execution) deliverables (Audit Reports with Management Responses & Corrective Action Plans, Issues Tracking Log) in Months 7-9.
Phase 4 (Corrective Action & Risk Refresh) deliverables (Updated Enterprise Risk Register) in Months 10-11.
Phase 4 deliverables (Annual ERM Refresh Framework & Methodology) in Month 11.
Phase 4 deliverables (Engagement Close-Out Report) in Month 12.
QUESTION DEADLINE
Issuing Agency
New York City Public Housing Preservation Trust
Organization overview and procurement intelligence available on paid plans.
DESCRIPTION
A government authority in New York seeks a qualified vendor to provide enterprise risk management and internal audit services. The engagement includes developing a risk-based Internal Audit Plan and executing initial high-priority audits, supporting corrective action implementation, and establishing a recurring framework for annual Enterprise Risk Assessment refresh cycles.
The scope of work will address strategic organizational capabilities, including Capital Project Delivery, Financing, Resident Partnerships, as well as Oversight and Asset Management. The selected vendor will be expected to help the authority strengthen its internal controls, manage risks proactively, and enhance overall organizational accountability.
Source attribution
This Settle analysis is based on the issuing organization’s public RFP listing.