Audit Management Software

The Department of Veterans Affairs Office of Inspector General is seeking a commercial off-the-shelf (COTS), web-based, cloud-hosted audit management software solution that is FedRAMP-authorized to potentially replace its current system. The procurement encompasses not only the software itself but also installation and configuration services, user and administrator training to ensure adoption, and data migration from the existing platform. Key requirements include support for a minimum of 200 concurrent users across multiple locations, 95 percent system availability, compliance with federal security standards (FIPS, NIST, and FedRAMP), integration capabilities with Microsoft Office products and Adobe, and the ability to handle large data repositories (250+ GB) with individual projects ranging from 150 MB to 1 GB. The solution must provide comprehensive audit management functionality including dashboards, role-based permissions, findings and recommendations management, multi-level review processes, sensitive information tagging, and robust search capabilities. The pre-solicitation notice was posted on January 27, 2026, with a response deadline of February 27, 2026, allowing potential vendors one month to indicate their interest and capability to meet the government's requirements.

This procurement carries no set-aside designation and is available to all eligible vendors. The VA OIG has operated audit management software for over 20 years, with the current contract expiring in August 2027, providing vendors with a transition timeline and indicating an established incumbent solution that will be replaced. The RFI documents do not specify a formal award value or budget range, though the requirement to support approximately 300 users with enterprise-level functionality, 24/7 availability, and multi-year support commitments (minimum five years) suggests a significant contract value. The successful vendor must commit to at least five years of customer support, provide scheduled software release cycles with vulnerability patches deployed within 30 days, and maintain comprehensive implementation support throughout the transition period. This opportunity is classified under NAICS code 541519 (Other Computer Related Services) and represents a strategic technology modernization initiative for the VA Office of Inspector General.