RFI - OHC Audit Services.docx

Request for Information (RFI) and Market Research Independent Audit Services of Office of Human Capital Records

1. Purpose The Office of Human Capital (OHC) is conducting market research to identify qualified vendors capable of performing an independent, comprehensive audit of OHC records. This RFI is issued solely for planning and market-research purposes and does not constitute a solicitation, request for proposal, commitment, or obligation by the Government to award a contract.

Information received will assist OHC in determining the availability of capable sources, assessing potential acquisition approaches, developing an independent government cost estimate, and refining the scope for a potential future procurement.

2. Background OHC maintains records that support human-capital operations, personnel actions, workforce management, and applicable records-management requirements. OHC seeks an independent contractor to evaluate the completeness, accuracy, organization, retention, accessibility, and overall management of applicable OHC records.

The audit should provide an objective assessment of the current state of OHC records and identify corrective actions, risks, and opportunities to strengthen records-management practices.

OHC anticipates that the audit may be completed within 90 to 180 calendar days after award, depending on the volume, condition, format, and location of records; availability of Government personnel; and final scope.

3. Scope of Work The selected contractor would be expected to perform a comprehensive audit of OHC records, which may include electronic and paper records, as applicable. The anticipated scope includes the following:

a) Project Planning and Kickoff

· Conduct an initial kickoff meeting with OHC stakeholders.

· Develop an audit plan, methodology, schedule, and data-request list.

· Identify records populations, systems, repositories, and offices within the audit scope.

b) Records Inventory and Assessment

· Inventory applicable OHC records and record repositories.

· Assess records for completeness, accuracy, consistency, organization, duplication, and accessibility.

· Evaluate alignment with applicable Federal, DHS, component, and OHC records-management policies and retention requirements.

· Identify potentially missing, duplicate, misfiled, improperly retained, or improperly disposed records.

c) Compliance and Internal-Control Review

· Assess existing policies, procedures, internal controls, governance, and oversight mechanisms related to OHC records.

· Evaluate roles and responsibilities for records creation, maintenance, access, retention, and disposition.

· Identify compliance gaps, operational risks, and control weaknesses.

d) Findings and Recommendations

· Provide documented findings, risk ratings, and recommended corrective actions.

· Develop a prioritized remediation roadmap, including short-, medium-, and long-term actions.

· Recommend improvements to records-management processes, training, controls, and governance.

e) Final Deliverables and Briefing

· Provide a draft audit report for OHC review and comment.

· Deliver a final audit report incorporating Government feedback.

· Provide a senior-leadership briefing summarizing methodology, findings, risks, and recommendations.

· Provide supporting workpapers, inventories, and other documentation produced under the engagement.

4. Desired Vendor Qualifications Interested vendors should demonstrate experience in one or more of the following areas:

· Independent auditing, internal controls, compliance assessments, or records-management reviews.

· Federal human-capital, personnel, or human-resources records environments.

· Federal records management requirements, including records retention and disposition practices.

· Audits involving electronic records, shared drives, document-management systems, and paper records.

· Privacy, information governance, data quality, and access-control assessments.

· Development of corrective-action plans and implementation roadmaps.

· Work in environments that require appropriate personnel suitability, security, and handling of sensitive Government information.

5. Requested Vendor Response Information Interested vendors should provide a concise response that includes:

1. Company name, address, UEI, CAGE code, and primary point of contact.

2. Business size and socioeconomic status.

3. A description of relevant capabilities and experience.

4. Proposed audit methodology and project-management approach.

5. Recommended labor categories, staffing levels, and estimated period of performance.

6. Identification of any assumptions, dependencies, or Government-furnished information needed to perform the work.

7. Estimated pricing, preferably as:

· Firm-fixed-price estimate for the complete audit; and/or

· Labor-hour estimate by labor category, hourly rate, estimated hours, and total estimated cost.

ble.

8. Identification of relevant contract vehicles available for use by the Government and any Government Wide Acquisition Contracts (GWACs) your company holds.

6. Submission Instructions Responses should be submitted electronically to Kelsey.D.Nelson@ice.dhs.gov no later than 11/27/2026. Responses should be limited to Ten pages, excluding resumes, relevant past-performance summaries, and pricing information.

Questions regarding this RFI should be submitted to Kelsey Nelson by 11/22/2026.

7. RFI Disclaimer This RFI is for market research and planning purposes only. It is not a solicitation and does not obligate the Government to issue solicitation, award a contract, or reimburse any costs associated with responding to this RFI. The Government may use information submitted in response to this RFI to refine requirements and inform acquisition planning.