What does the IIA recommend regarding the request for proposal, criteria for selection, and the selection process?

Organizations should request proposals from providers that are acceptable to the  CAE, approved by the audit committee, and possibly management. The providers should be required to perform the assessment using a methodology similar to that described in The IIA's Quality Assessment Manual. The organization should require the team to be qualified  Including one member of team being a CIA.