Performance Work Statement Summary

This Performance Work Statement (PWS) establishes broad, enterprise-level requirements for a Blanket Purchase Agreement (BPA) to support the Defense Intelligence Agency's (DIA) Risk Management and Internal Control (RMIC) program. The BPA is structured as a non-personal services contract with a 12-month base period and four optional 12-month extension periods. The contractor shall provide qualified personnel, methodologies, and management necessary to support DIA's RMIC program activities across highly classified and compartmented environments, including assessment, testing, corrective actions, and mission assurance efforts. Work shall be performed on-site at Government facilities in the National Capital Region and other DIA locations as specified in individual call orders, unless remote performance is explicitly authorized in writing.

The core performance requirements encompass risk assessment and planning using ServiceNow IRM as the designated repository; internal control testing and evaluation against GAO FISCAM and Fraud Risk Management Framework standards; development and maintenance of workpapers and evidence packages; identification and reporting of material weaknesses and significant deficiencies; corrective action plan support; Statement of Assurance preparation; Supply Chain Risk Management alignment; information systems risk management activities; and process documentation. The contractor must establish a Quality Control program and provide quarterly Program Management Reviews. Key Personnel include a Program Manager requiring a bachelor's degree in accounting, finance, business, information systems or related field; minimum 10 years of federal financial management or ERM/RMIC experience; minimum 5 years managing complex federal professional services teams; and PMP certification is preferred. All contractor personnel require Top Secret/Sensitive Compartmented Information clearances with CI Polygraph completed prior to performance. Deliverables include Call Order Work Plans (due within 15 business days), quarterly PMR briefing packages, and updated Personnel Rosters, formalized through DD Form 1423 CDRLs and submitted via Government-designated repository.