Central IT security audit?

["David L. Wasley" <david.wasley () UCOP EDU>]

Can anyone on the list recommend an external firm (consulting or auditing or..) that you feel has done a good job of 
performing a comprehensive security audit on a central IT organization?  In the same vein, can anyone offer or point me 
to an RFP for such a security audit?  The goal of this audit would be primarily recommendations, as opposed to 
comparing practice with procedures.

Thanks,
        David

**********
Participation and subscription information for this EDUCAUSE Discussion Group discussion list can be found at 
http://www.educause.edu/memdir/cg/.