Request for Information (RFI) – Risk Management and Internal Control (RMIC) Support Services
Closed Pre-Solicitation Posted
- Solicitation number
- HHM402-2X-RMIC
- Agency
-
Defense Intelligence Agency
Department of Defense
- Responses due
- Set-aside
- No set-aside
Opportunity facts
- NAICS code
- 541611 Administrative Management and General Management Consulting Services
- PSC
- Not on record
- Place of performance
- Washington, District of Columbia 20340, United States
- Points of contact
Notice details come from SAM.gov. Updated .
About this opportunity
The Virginia Contracting Activity is conducting a sources-sought market research effort for the Defense Intelligence Agency to inform a potential multi-year Blanket Purchase Agreement for Risk Management and Internal Control (RMIC) Support Services, with RFI responses due June 30, 2026 and an update reactivating submission window as of August 5, 2026. No set-aside is currently anticipated, though the Government will determine through market research whether small business or socioeconomic set-asides are appropriate.
Work is performed on-site at DIA facilities in the National Capital Region and other DIA locations; remote performance is prohibited due to classified system access requirements. All contractor personnel must possess and maintain Top Secret clearance with Sensitive Compartmented Information (TS/SCI) access prior to contract award; the Government will not sponsor facility clearances. The BPA will cover enterprise-wide Enterprise Risk Management and RMIC support across all domains including Internal Control Over Reporting for Financial Reporting, Financial Systems, and Management Operations, plus non-financial IT systems, Enterprise Risk Management, Fraud Risk Management, and Supply Chain Risk Management, aligned with DoDI 5010.40, OMB Circular A-123, GAO standards, and COSO frameworks.
The BPA structure comprises one 12-month base period with four optional 12-month periods, with individual call orders defining specific scope and deliverables. Initial call order scope is expected to cover Internal Control Over Reporting for Financial Reporting, Financial Systems, and PIIA Compliance. Key Personnel required include a Program Manager (bachelor's degree, minimum 10 years Federal financial management/audit/risk management experience, minimum 5 years managing complex Federal teams) and an RMIC Technical Lead (bachelor's degree, minimum 7 years Federal internal control experience, one of: CPA, CIA, CISA, CGFM, CGAP, or CDFM certification). The Government considers single or multiple awards. Responses limited to 15 pages are voluntary, do not guarantee award or exclude participation in future solicitation, and carry no Government financial responsibility.
Notice text
2 versions
Update #2 · Latest ·
Update (8/5/26): Providing RFI responses for the above RFI. This reactivation does not constitute the submission of any additional RFI submission or questions for Government consideration.
Request for Information (RFI) – Risk Management and Internal Control (RMIC) Support Services
THIS IS A SOURCES SOUGHT NOTICE, REQUEST FOR INFORMATION (RFI). This is not a Request for Proposal (RFP) or Request for Quote (RFQ). This request for capability information does not constitute an RFP or RFQ and does not commit the Government to contract for any supply or service, whatsoever. Further, the Virginia Contracting Activity (VaCA) is not at this time seeking proposals or quotes and will not accept unsolicited proposals or quotations. Submission of any information in response to this market survey is purely voluntary.
However, responses received will assist the Government if solicitation is issued in the future. The government assumes no financial responsibility for any costs incurred associated with this request for capability information. Not responding to this sources sought does not preclude participation in any future RFP or RFQ, if any is issued. Potential offerors are responsible for monitoring government websites such as GSA or SAM for any potential opportunities. Responses do not guarantee award nor exclude/include your company in any potential acquisition process. No feedback or evaluations will be provided to companies regarding their submissions.
This RFI is being used as a Market Research tool for informational purposes and for preliminary planning purposes to identify potential sources that possess the required experience and expertise to provide the required support. Small and large businesses are encouraged to respond.
1. INTRODUCTION:
The Virginia Contracting Activity (VaCA) invites interested contractors to respond to this Request for Information (RFI) for RMIC Support Services in support of the Defense Intelligence Agency (DIA). VaCA seeks information from qualified industry sources capable of providing enterprise-wide Enterprise Risk Management (ERM) and Risk Management Internal Controls (RMIC) support in highly classified environments.
This RFI is part of VaCA’s market research efforts to better understand industry capabilities, innovative approaches, and best practices for Federal ERM and RMIC activities in accordance with DoDI 5010.40, OMB Circular A-123, GAO Green Book, GAO Fraud Risk Management (FRM) Framework, and Supply Chain Risk Management (SCRM). Information received may be used to shape acquisition strategy, refine technical requirements, evaluate small business opportunities, and support development of a future solicitation.
2. PURPOSE:
VaCA is conducting market research to inform of a potential upcoming acquisition for RMIC Support Services. VaCA expects to award a multi-year Blanket Purchase Agreement (BPA) to one or more sources for this initiative. Attachment 1 is the draft Performance Work Statement (PWS) for the BPA. The PWS may be updated on information gathered from this RFI based on industry review and comment.
3. BACKGROUND:
In accordance with DoDI 5010.40, DIA is required to maintain an integrated Enterprise Risk Management (ERM) and Risk Management and Internal Control (RMIC) program. DIA requires support to plan, execute, and document ERM and RMIC activities across all applicable domains, including:
- Internal Control Over Reporting for Financial Reporting (ICOR-FR)
- Internal Control Over Reporting for Financial Systems (ICOR-FS)
- Internal Control Over Reporting for Management Operations (ICOR-O)
- Non-financial information technology systems
- ERM
- FRM, including payment integrity requirements
- SCRM
Please view the attached document for a fill description of the RFI and Draft PWS.
Update #1 ·
Request for Information (RFI) – Risk Management and Internal Control (RMIC) Support Services
THIS IS A SOURCES SOUGHT NOTICE, REQUEST FOR INFORMATION (RFI). This is not a Request for Proposal (RFP) or Request for Quote (RFQ). This request for capability information does not constitute an RFP or RFQ and does not commit the Government to contract for any supply or service, whatsoever. Further, the Virginia Contracting Activity (VaCA) is not at this time seeking proposals or quotes and will not accept unsolicited proposals or quotations. Submission of any information in response to this market survey is purely voluntary.
However, responses received will assist the Government if solicitation is issued in the future. The government assumes no financial responsibility for any costs incurred associated with this request for capability information. Not responding to this sources sought does not preclude participation in any future RFP or RFQ, if any is issued. Potential offerors are responsible for monitoring government websites such as GSA or SAM for any potential opportunities. Responses do not guarantee award nor exclude/include your company in any potential acquisition process. No feedback or evaluations will be provided to companies regarding their submissions.
This RFI is being used as a Market Research tool for informational purposes and for preliminary planning purposes to identify potential sources that possess the required experience and expertise to provide the required support. Small and large businesses are encouraged to respond.
1. INTRODUCTION:
The Virginia Contracting Activity (VaCA) invites interested contractors to respond to this Request for Information (RFI) for RMIC Support Services in support of the Defense Intelligence Agency (DIA). VaCA seeks information from qualified industry sources capable of providing enterprise-wide Enterprise Risk Management (ERM) and Risk Management Internal Controls (RMIC) support in highly classified environments.
This RFI is part of VaCA’s market research efforts to better understand industry capabilities, innovative approaches, and best practices for Federal ERM and RMIC activities in accordance with DoDI 5010.40, OMB Circular A-123, GAO Green Book, GAO Fraud Risk Management (FRM) Framework, and Supply Chain Risk Management (SCRM). Information received may be used to shape acquisition strategy, refine technical requirements, evaluate small business opportunities, and support development of a future solicitation.
2. PURPOSE:
VaCA is conducting market research to inform of a potential upcoming acquisition for RMIC Support Services. VaCA expects to award a multi-year Blanket Purchase Agreement (BPA) to one or more sources for this initiative. Attachment 1 is the draft Performance Work Statement (PWS) for the BPA. The PWS may be updated on information gathered from this RFI based on industry review and comment.
3. BACKGROUND:
In accordance with DoDI 5010.40, DIA is required to maintain an integrated Enterprise Risk Management (ERM) and Risk Management and Internal Control (RMIC) program. DIA requires support to plan, execute, and document ERM and RMIC activities across all applicable domains, including:
- Internal Control Over Reporting for Financial Reporting (ICOR-FR)
- Internal Control Over Reporting for Financial Systems (ICOR-FS)
- Internal Control Over Reporting for Management Operations (ICOR-O)
- Non-financial information technology systems
- ERM
- FRM, including payment integrity requirements
- SCRM
Please view the attached document for a fill description of the RFI and Draft PWS.
Files
Similar open opportunities
| Opportunity | Agency | Set-aside | Responses due |
|---|---|---|---|
| Request for Information (RFI) – RMIC | Defense Intelligence Agency | No set-aside | |
| Request for Information (RFI) – Audit Remediation Services | Defense Intelligence Agency | No set-aside | |
| Request for Information (RFI) – Financial Reporting & Accounting | Defense Intelligence Agency | No set-aside |
On GovTribe
Work this opportunity
- Track it in your pipeline
- Find teaming partners
- Similar opportunities
- Ask GovTribe AI about this opportunity