RFP for IT audits/scans

Hello!  I am putting together an RFP for IT audits and I have a couple of questions. 1. What IT audits/scans do you outsource and how often do you have them performed?2. Who is your provider (if you are happy with your services)?3. If you have an RFP that you are willing to share, I would appreciate it.4. The biggest issue that we have run into with multiple providers is an unwillingness/inability to go more in depth than the automated scan results.  We end up getting a lot of false positives, no human interaction, etc.  If you have overcome this hurdle, I would especially like to hear about that. Thanks in advance for your feedback.  You can reply here or email me - jrue@fcfcu.com  Jennifer Rue Financial Center FCU