IT Procurement and Contract Negotiation Process Checklist

In reviewing the procurement and contract negotiation process, the IT auditor can look for the following tasks to be accomplished:

1. Does the contract accurately re. ect the organization’s requirements and have appropriate levels within the organization veri. ed them?
2. Have the requirements been translated into measurable acceptance criteria that can be monitored and verified?
3. Ensure that the RFP contains the needs and requirements.
4. A process for evaluating the contractor bids includes thorough evaluation of how they will meet requirements.

Review the negotiation process:
1. Was the legal counsel or contracting o. cer present at all meetings and documentation of proceedings recorded?
2. What changes or agreements were reached in re. ning contract terms and were they verified with management?
3. A contract has been executed and monitored to assure customer’s rights.
4. Acceptance tests are performed on all products or services provided and tests are documented and reviewed by management.
5. Acceptance tests are documented, evaluated, and the results are reviewed and signed off by customers at affected levels including management. Your organization exercises its right to accept or decline the contract, and documentation from above supports its decision.