Specifications include, but are not limited to: The proposed audit engagement should cover the current fiscal year ended June 30, 2021 and fiscal years ending June 30 thereafter. As described in the FAQ’s, the firm’s deliverables under this proposal must include audited financial statements of HSRI together with an auditor’s report and a report describing compliance and instances of non-compliance with the financial and programmatic elements of HSRI. The FAQ’s in Appendix C more fully outline deliverable requirements and should be reviewed in the development of the response to this RFP. The audit firm must gain an understanding of HSRI in order to properly determine the work to be performed, including planning audit procedures and a process to gain an understanding of internal control sufficient to plan the audit. It is expected that the proposal submitted will consider the use of the Service Organization Control (SOC) reports over the Exchange’s Service Organizations as they relate to the CMS Audit as well as the Trust audit report issued in November 2021.
