Financial and FISMA Audits

The Department of Justice Office of the Inspector General is conducting a sources sought notice (DOJ-PSS-2710) for financial and FISMA audit services, with responses due by November 9, 2026. The Government intends to issue separate task orders under a Blanket Purchase Agreement using GSA Federal Supply Schedule Special Item Number 541211. All firms must be independent as defined in Government Auditing Standards and hold a current Top Secret Facility Clearance.

Work encompasses two service categories: annual financial statement audits of the DOJ Consolidated entity and two standalone reporting components (Assets Forfeiture Fund/Seized Asset Deposit Fund and Federal Prison Industries, Inc.), and seven independent annual FISMA audits across six DOJ components and the Court Services and Offender Supervision Agency. Financial statement audit work involves the FBI, Bureau of Prisons, DEA, ATF, and other components; FBI audit work requires on-site performance at FBI headquarters using classified networked computers with specific data handling protocols. FISMA audits require evaluation of information security controls, IT systems, vulnerability assessments, and PII controls.

All contractor staff must meet security clearance requirements ranging from Tier 3 to Tier 5, with FBI-related positions requiring Tier 5 clearances. At least one FBI auditor must be capable of obtaining Sensitive Compartmented Information clearance. Contractor IT equipment must comply with DOJ cybersecurity standards and data encryption requirements. All contractor staff must be U.S. citizens or lawful permanent residents meeting specific residency requirements (three of the last five years in the U.S., with limited exceptions for DCSA-processed clearances). Responses should not exceed three pages each for financial statement and FISMA capabilities and must confirm vendor independence and facility clearance status. Submit to Allison.J.Polizzi@usdoj.gov.