RSCA Tool-Draft SSN.docx

Sources Sought Notice RCS-T-2026-00023

Description: Risk and Controls Self-Assessment (RCSA) Tool

The Department of Housing and Urban Development (HUD), Ginnie Mae Office of Enterprise Risk, Operational Risk Analysis Division (ORAD) is issuing this Sources Sought (SSN) synopsis as a means of conducting market research to identify parties having an interest in, and the resources to support, this requirement for providing a Risk and Controls Self-Assessment (RCSA) Tool Services to identify, assess, report and monitor risk and controls associated with operational processes, people, systems, and external events. The result of this market research will contribute to determining the method of procurement. The applicable North American Industry Classification System (NAICS) code and Product Service Code (PSC) assigned to this procurement are:

· 541611 – Administrative Management and General Management Consulting Services with a size standard of $24.5M; and

· R408 Program Management Support

This requirement seeks Contractors holding the Multiple Award Schedule (MAS) SIN 541611 Management and Financial Consulting, Acquisition and Grants Management Support, and Business Program and Project Management Services/ Professional Services/ Business Administrative Services, There is no solicitation at this time. This request for capability information does not constitute a request for proposals; submission of any information in response to this market survey is purely voluntary; the government assumes no financial responsibility for any costs incurred. This is not an evaluation of proposals but an assessment of vendors’ capabilities. Therefore, a high-level assessment of the capability statements will be performed. Generic brochures are not being requested. Vendors should provide information to stress their competencies, differentiators, and past performance showing or demonstrating:

· Core Competencies to demonstrating the following expertise:

· Certified Public Accountant (CPA)

· Certified Information Systems Auditor (CISA)

· Certified Internal Auditor (CIA)

· Certified Fraud Examiner (CFE)

· Committee of Sponsoring Organizations (COSO)

· Certified Government Financial Manager (CGFM)

· Project Management Professional (PMP) certification

· Certified Information Systems Security Professional (CISSP)

· Certified Information Security Manager (CISM)

· Certified Cloud Service Provider (CCSP)

· Certified in Risk and Information Systems Controls (CRISC)

· Certified Operational Risk Professional (CORP)

· Cybersecurity risk-related certification

· Brief description of experience providing support for requirements similar to the requirement in the Draft PWS to include identification of the experience as Federal or Commercial.

· Differentiator’s listing/discussing unique factors and benefits of the services that set them apart from others.

· While the government will not respond to any questions from this SSN, we are interested in any feedback your company has on the overall content/composition of the draft PWS as a result of reviewing the document.

If your organization has the potential capacity to perform these contract services, please provide the following information: 1) organization name, address, email address, website address, telephone number, and size and type of ownership for the organization; and 2) tailored capability statements addressing the particulars of this effort, with appropriate documentation supporting claims of organizational and staff capability. If significant subcontracting or teaming is anticipated in order to deliver technical capability, organizations should address the administrative and management structure of such arrangements.

The government will evaluate market information to ascertain potential market capacity to 1) provide services consistent in scope and scale with those described in this notice and otherwise anticipated; 2) secure and apply the full range of corporate financial, human capital, and technical resources required to successfully perform similar requirements; 3) implement a successful project management plan that includes: compliance with program schedules; cost containment; meeting and tracking performance; hiring and retention of personnel and risk mitigation; and 4) provide services under a performance based service acquisition contract.

Based on the responses to this Sources Sought Notice/Market Research, this requirement may be further set aside for any of the socio-economic programs, set-aside for small business competition, procured through full and open competition, procured through GSA, etc. Interested potential offerors must clearly specify the following: their Unique Entity Identifier (UEI), business size applicable to NAICS, socioeconomic business categories, GSA contract number (if applicable), and any other applicable GWAC numbers. Telephone inquiries will not be accepted or acknowledged, and no feedback or evaluations will be provided to companies regarding their submissions.

Submission Instructions: Interested parties who consider themselves qualified to perform the above-listed services are invited to submit a response to this Sources Sought Notice by April 30, 2026 on or before 2:00 PM EST. All responses under this Sources Sought Notice must be emailed to Cheri Redding at Cheri.L.Redding@hud.gov and Diane Toledo-Gaskins at Diane.e.Toledo-Gaskins@hud.gov. Additional information on the required services is listed below.

If you have any questions concerning this opportunity, please contact the Contracting Officer, Cheri Redding at Cheri.L.Redding@hud.gov and the Contract Specialist, Diane Toledo-Gaskins at Diane.e.Toledo-Gaskins@hud.gov.

Background:

· See PWS, Section 1.2.

General Description of Work:

The Contractor will review, analyze and assess governance documentation, manuals, and other materials provided by all eight (8) of Ginnie Mae’s Offices, update Process Flow Charts, Risk Register Control Matrices, Narratives for each Office and other RCSA documents on an annual basis. This includes templates, Process and SOP inventories, and other similar documentation.

The support services shall include but not be limited to:

· Project Work Plan

· Transition Services

· RCSA Program Execution

· RCSA Annual Maintenance

· Special Projects

Detailed descriptions of specific tasks are provided in Section 5 Specific Tasks and Deliverables.

Below are the characteristics of the requirement: The tasks require a set of skill categories based on but not limited to the following approximate breakdown:

· Project Manager

· Senior Associates/SMEs

· Associates

Qualifications can be found in PWS Sections 9.1 and 9.2.

Contemplated performance metrics:

· See Draft Performance Works Statement (PWS), and Performance Requirements Summary

Contemplated report requirements:

· See Draft PWS, Deliverables

Contemplated dollar value of the project:

· N/A

Contemplated place of performance:

· At the Contractor's facility.

image1.emf