IT Audit & Advisory Services

Solicitation #:TBD
Issue Date:02/03/2026
Proposal Due:02/27/2026 - 4:00 PM
Classification:Professional Services
Type:Request for Proposal (RFP)
Status:New
Contract Terms
3 Years with Two Additional One Year Renewal Options
Location Where Goods to be Delivered or Service Performed
515 Broadway, Albany NY, 12207

In accordance with State Finance Law § 139-j and § 139-k, this solicitation includes and imposes certain restrictions on communications between DASNY personnel and a Proposer during the procurement process. The Designated Representative for this procurement is Haley Birr, Email: ([email protected]). Contacts made to other DASNY personnel regarding this procurement may disqualify the Proposer and affect future procurements with governmental entities in the State of New York. Please refer to DASNY’s website www.dasny.org for DASNY policy and procedures regarding this law, or the OGS website (https://ogs.ny.gov/acpl) for more information about this law. All proposers, domestic and foreign, must be in compliance with New York State business registration requirements. Contact the NYS Department of State regarding compliance. In addition, business entities proposing to provide professional engineering services must obtain a Certificate of Authorization to Provide Engineering Services in New York State from the State Education Department. Proposals must be submitted in the full legal name of the proposer, or the full legal name plus a registered assumed name of the proposer, if any.

Primary Contact

Haley Birr

Asst Procurement Administrator

DASNY

Procurement

515 Broadway

Albany, NY 12207

United States

Phone: 518-257-3342

Email: [email protected]

Secondary Contact

Nicole White

Procurement Administrator

DASNY

Purchasing

515 Broadway

Albany, NY 12207-2964

United States

Phone: 518-257-3076

Email: [email protected]

Submit To Contact

Haley Birr

Asst Procurement Administrator

DASNY

Procurement

515 Broadway

Albany, NY 12207

United States

Phone: 518-257-3342

Email: [email protected]

Company Name Contact Name Phone Email Website Fax Designation Goods/Services
4Consulting, Inc. Vivek Anand 9723330041 [email protected] www.fourci.com
  • Minority Owned Business (MBE)
  • Women Owned Business (WBE)
  • NYS Certified Minority Owned Business (NYS-Cert. MBE)
  • NYS Certified Women Owned Business (NYS-Cert. WBE)
  • Equal Employment Opportunity (EEO)
CampusGuard Jen 6122076336
Comtech Global Inc Sridhar nannapaneni [email protected] https://www.comtechglobal.com/about
  • Minority Owned Business (MBE)
  • NYS Certified Minority Owned Business (NYS-Cert. MBE)
CST Group Inc. Lisa Brown 518-483-4100 [email protected] www.cstsupport.com 518-483-2848
  • NYS Certified Women Owned Business (NYS-Cert. WBE)
1. Perform Risk Assessment testing quarterly and review with client to constantly evaluate protocols to improve cyber security posture on an ongoing basis.
2. As a Managed Service Provider, CST Group Inc. specializes in protecting our clients technology. We deploy, manage and protect our clients to decrease risk of cyber incident all while meeting compliance guidelines set by governing agencies.
Horizon Plus Luke Beck 6125624280 [email protected] https://horizonplus.co/ Development & Technical Capabilities:
Custom enterprise software systems
Structured operational platforms with long-term scalability
Workflow, role, and subscription management systems

Creative & Design:
User research and interface design
Branding and digital content creation
Full lifecycle product support

Digital Transformation:
Process automation and integration
ERP/CRM solutions
Workflow modernization and operational systems

Cybersecurity & Consulting:
Security frameworks and monitoring
IT strategy and digital resilience services
Innovee Consulting LLC Sachin Garg 646-531-4899 [email protected] www.innovee.com
  • NYS Certified Minority Owned Business (NYS-Cert. MBE)
  • NYS Certified Women Owned Business (NYS-Cert. WBE)
JOEE Solutions, LLC Esther Obanero Ogedengbe [email protected] www.joee.solutions
  • NYS Certified Minority Owned Business (NYS-Cert. MBE)
  • NYS Certified Women Owned Business (NYS-Cert. WBE)
Leighton & Alex Distributors, Inc. Leighton Lee 9293953141 [email protected] www.leightonalex.com
  • Minority Owned Business (MBE)
  • NYS Certified Minority Owned Business (NYS-Cert. MBE)
IT Infrastructure, Construction.
Red Hill Consulting LLC Kirtan Stoute 9143597750 [email protected] https://redhillconsulting.com/
  • Minority Owned Business (MBE)
  • Service Disabled Veteran Owned Business (SDVOB)
  • NYS Certified Minority Owned Business (NYS-Cert. MBE)
  • NYS Certified Service Disabled Veteran Owned Business (NYS Cert. SDVOB)
  • Disadvantaged Business Enterprise (DBE)
Led comprehensive compliance risk transformations, IT risk & GRC strategies, operational risk remediation, and enterprise RCSA facilitation for global financial institutions. Designed and implemented governance frameworks, standardized controls and risk taxonomies, facilitated enterprise‑wide workshops, consolidated disparate data and control environments, and developed key risk and performance indicators. Provided strategic advisory for shared‑services transformation and vendor‑cybersecurity programs, including cross‑agency coordination, process mapping, technology integration, electrification roadmapping and data‑driven procurement strategies. Delivered modernization blueprints, governance models, and change‑management programs that improved regulatory alignment, reduced risk exposure, and accelerated digital transformation timelines.
Uparrowkey Andrea Geiger 3474570385 https://www.uparrowkey.com
  • Minority Owned Business (MBE)
  • Women Owned Business (WBE)
WithumSmith+Brown, PC David Hansen IT Audits and Risk Advisory
Wolf & Company, P.C. William Nowik 6174285469 https://www.wolfandco.com/
  • Equal Employment Opportunity (EEO)
We provide both outsourced and co‑sourced IT audit services, covering a full suite of IT General Controls (ITGC), including:

Information security
IT operations and management
Third‑party/vendor risk management
Business continuity and disaster recovery
Infrastructure and network security
Application‑level audits

We also routinely perform the IT audit risk assessment and develop multi‑year audit plans to guide Internal Audit strategy.

Beyond traditional audit services, our technical assessment division provides specialized evaluations such as:

Penetration testing
NIST Cybersecurity Framework (CSF) assessments
NIST AI Risk Management Framework audits
Cloud security assessments

This breadth allows us to support both operational audit needs and deep technical risk areas as environments evolve.