I'm assisting with the write up of a Request for Proposals for IA services for a government agency and hope someone can help me with a few technical questions. For example, given that this is for a government agency, would the IA be required to follow Generally Accepted Government Auditing Standards? Or just the IIA standards? Is it reasonable to require minimum qualifications that the IA be a CPA? Or is that too restrictive?
Do IA firms have peer reviews? If yes, what guidelines do they follow -- GAGAS? Or Something else?
Are contracts usually fixed price (not to exceed)?
I have more questions but would like to see what kind of responses I get before I go further.