Request for Information (RFI) – RMIC

The Defense Intelligence Agency, via the Virginia Contracting Activity (VaCA), is issuing a Request for Information (RFI) on Risk Management and Internal Control (RMIC) Support Services, with responses due October 23, 2026, to support market research and preliminary planning for a single-award Blanket Purchase Agreement. This is not a solicitation and does not commit the Government to award; responses are voluntary and confidential market research only.

The anticipated contract vehicle is a BPA with initial issuance to DIA's Office of the Comptroller, structured as a 12-month base period with four optional 12-month extension periods. Work will be performed on-site at Government facilities in the National Capital Region and other DIA locations in highly classified and compartmented environments.

Respondents must demonstrate experience supporting DIA's enterprise-wide Enterprise Risk Management (ERM) and Risk Management Internal Controls (RMIC) programs across multiple domains: Internal Control Over Reporting (ICOR-FR, ICOR-FS, ICOR-O), non-financial IT systems, Enterprise Risk Management, Fraud Risk Management, and Supply Chain Risk Management. Contractors must have experience with ServiceNow's Integrated Risk Management (IRM) solution as the system of record, DoD governance bodies, and GAO FISCAM frameworks. All contractor personnel require Top Secret/Sensitive Compartmented Information clearances with Counterintelligence Polygraph completed prior to performance.

The Program Manager must hold a bachelor's degree in accounting, finance, business, information systems, or related field; possess minimum 10 years of federal financial management or ERM/RMIC experience; and demonstrate minimum 5 years managing complex federal professional services teams. PMP certification is preferred.

Scope encompasses risk assessment and planning, control testing, deficiency identification and reporting, corrective action support, Statement of Assurance preparation, repository discipline, quality control, and transition services. Responses are limited to 20 pages, excluding attachments, and must be submitted to dasol.robinson@dodiis.mil and shanika.richardson@dodiis.mil.