Audit Documentation & POAM Management

The contract requires the development and management of Plans of Action and Milestones for audit findings, ensuring timely tracking of remediation progress and coordination with IT teams using GRC or project management tools. The scope centers on maintaining accurate audit documentation and facilitating cross-functional communication to resolve compliance gaps, with an emphasis on structured tracking and reporting mechanisms that align with federal and state audit standards. The work must be executed in a manner that supports accountability, transparency, and measurable outcomes throughout the remediation lifecycle. Performance is to be carried out in San Bernardino, California, with a response deadline of April 11, 2026, and the solicitation is classified as a subcontract under NAICS code 541618 for other scientific and technical consulting services. The contracting entity is the Auditor-Controller/Treasurer/Tax Collector of California, indicating a public sector context with stringent compliance and documentation requirements. While no specific set-aside status is indicated, the nature of the work suggests a need for vendors with demonstrated experience in government audit support, information security frameworks, and structured remediation workflows within complex organizational environments.