Request for Information (RFI) to obtain information regarding Financial and Federal Information Security Modernization Act (FISMA) Audit Services

The Morris K. Udall and Stewart L. Udall Foundation has issued a Request for Information (RFI) to conduct market research for potential Financial and Federal Information Security Modernization Act (FISMA) Audit Services. This RFI seeks to gather information from potential contractors about performing comprehensive audit functions for the agency. The Financial Audit requires non-personal financial auditing services at an enterprise level, adhering to U.S. Generally Accepted Government (GAO) Auditing Standards. The FISMA Audit is a mandated evaluation designed to ensure the agency's information security program meets federal standards for protecting information and information systems. The RFI is a civilian agency initiative aimed at identifying qualified vendors for these critical audit services.

Contractors interested in responding to this RFI must submit their capabilities statements by February 20, 2025, at 2:00 PM MST to Terri L. Harrison via email. Submission requirements include an 11-page document consisting of a 10-page capabilities statement and a 1-page cover letter, which must detail company information, past performance examples, and technical capabilities addressing both audit requirements. The FISMA audit will have a performance period beginning after FISMA IG Metrics are available, with a final report due by July 15 to meet the CyberScope data call deadline. The Financial Audit report must be completed within 41 days of fiscal year-end (by November 10th). The opportunity is open to both small and large businesses, and partial responses addressing some technical specifications will be accepted. Vendors should be prepared to demonstrate their ability to conduct comprehensive audits across the five FISMA functional areas: Identify, Protect, Detect, Respond, and Recover.