ARMICS

The Virginia Department of Juvenile Justice is soliciting proposals for internal controls, agency risk management, and internal control standards (ARMICS) assessment and implementation, with proposals due June 10, 2026.

The scope requires the contractor to conduct comprehensive risk assessments, develop and implement risk management frameworks aligned with the Committee of Sponsoring Organizations (COSO) framework and Virginia state requirements, document control procedures, and establish internal control standards. Deliverables include a risk register, internal control policies and procedures documentation, training materials, and quarterly compliance reports. The contractor must provide staff training and ongoing monitoring and evaluation to ensure the Department of Juvenile Justice maintains effective internal controls and complies with state governance standards. The contractor will have access to departmental staff, systems, and documentation necessary to complete risk assessments and control evaluations and must maintain confidentiality of sensitive information and comply with all state procurement regulations and data security requirements applicable to juvenile justice records.

The contract term is two years with two optional one-year renewal periods, allowing potential extension through 2030. Pricing is structured as a fixed-fee arrangement with quarterly invoicing tied to milestone completion. Place of performance includes Richmond City and Roanoke City. No set-aside provisions or small business requirements are identified in the scope document.