HHM402-2X-RMIC_RFI responses_8_5_26.pdf

Classification: UNCLASSIFIED# UNCLASSIFIED

Question Answer Vendor

Will the Government consider FCL sponsorship for a qualified small business, or does it expect each respondent to hold a company TS/SCI FCL at the time of award?

An existing TS/SCI facility clearance issued by DCSA is required to access classified information. Advent

Does the Government intend to encourage or require teaming arrangements (for example, a platform/automation provider teamed with a credentialed audit-domain firm) to meet the full scope?

The Government will not require a teaming agreement. The contractors may propose a teaming agreement as they see fit.

Advent

Is ServiceNow IRM the sole system of record, and are complementary automation and integration tools (operating within the accredited boundary) permitted alongside it?

Yes, ServiceNow IRM is the sole system of record for ERM/RMIC. The vendor may recommend tools to be integrated within ServiceNow, but it is out of scope of this requirement to propose a license.

Advent

What ServiceNow IRM modules, configurations, and integration interfaces are currently in production for RMIC, and is integration documentation available to performers?

ServiceNow modules, configurations, and integration interfaces in production may be shared with the vendor upon contract award.

Advent

Will the Government provide existing risk profiles, risk registers, prior-year test plans, and the standing deficiency and CAP inventory as Government furnished information at call-order start?

Yes, the Government will provide detailed information in each call order for the contractor to propose to.

Advent

What is the anticipated total cleared staffing level and the expected mix across the RMIC domains (ICOR-FR, ICOR-FS, ICOR-O, IT systems, ERM, FRM, and SCRM)?

We can not provide an answer for the expected RMIC domain staffing level and mix at this time. All personnel are expected to be cleared at the start of each Call Order.

Advent

RMIC RFI Q&A Compiled

# Classification: UNCLASSIFIED UNCLASSIFIED

For SCRM, what classified threat and counterintelligence inputs will be furnished, and through what governance structures (for example, the FASC and ODNI SCRM Task Force)?

The Government cannot provide an answer at this time.

Advent

Will the Government accept AI- or automation-assisted evidence compilation and analytics, consistent with NDAA FY2025 direction, under defined human-review and approval controls?

Yes, as reviewed and approved by the Government. The Government plans to provide training and specific policies for any authorized AI tools. Advent

What are the expected on-site locations and seat counts in the National Capital Region, and is any work performable from a contractor-operated

SCIF?

The Government cannot provide a seat count at this time. The work cannot be performed from a contractor-operated SCIF. Advent

Will a single award or multiple awards be made, and what is the anticipated initial call-order scope used for the requested ROM?

The Government is considering all options in awarding this BPA. The initial call order scope is expected to cover ICOR-FR, ICOFR-FS, and PIIA Compliance.

Advent

Is the scope of services described in this RFI currently being performed under one or more existing contracts? If so, would the Government be willing to identify the incumbent contractor(s), contract vehicle(s), contract number(s), and current period(s) of performance for the existing support, if available?

Yes, the work is currently being performed.

The Government declines to disclose this information at this time.

Keystone Advisors

As part of this market research effort, is the Government evaluating this requirement for potential participation by small businesses, large businesses, or a combination of both?

Additionally, is the Government considering any specific small business acquisition strategies or socioeconomic set-aside approaches based on the capabilities being assessed through this RFI?

Yes, as part of the market research the Government will determine if a small business set aside is approriate. The market research will determine if a socio-eeconomic set aside is the right strategy.

Keystone Advisors

Can the Government provide an estimated level of effort, anticipated staffing profile, or historical staffing information to assist industry in understanding the anticipated scope and scale of this requirement?

No, the Government is anticipating industry to provide estimates based on the scope of our requirement. Keystone Advisors