The successful tenderer will be required to:

• Undertake and report in writing an initial risk assessment of the organisation. This risk assessment is to include consideration of the SRW Assurance Map and the associated effectiveness of control assurance provided by existing third party advises and auditors.
• In consultation with management and taking into consideration findings from the initial risk assessment report, prepare a four-year risk assurance program for all enterprise risks included in the SRW risk register. This four-year risk assurance program will include an internal audit plan which identifies those risks which will be subject to internal audit. The internal audit plan being based on 330 hours per annum.
• Each August, submit to the ARGC an update to the four-year risk assurance program. As part of this report, facilitate ARGC approval of the internal audit reviews for the next twelve months (these internal audit reviews cross-referenced to the four-year risk assurance program).
• Propose a detailed methodology to be used to achieve the objectives of this service.
• Provide internal audit services for a period in accordance with the approved audit program.