Enterprise Risk Management (ERM) Planning and Reporting

The contract titled Enterprise Risk Management ERM Planning and Reporting requires the development and ongoing maintenance of enterprise-wide risk management plans to support comprehensive risk identification, assessment, and mitigation across the organization. Key responsibilities include conducting risk workshops with cross-functional teams, producing and updating risk registers, and designing actionable mitigation strategies that align with organizational objectives. The contractor will also play a critical role in supporting the annual Statements of Assurance and delivering executive-level risk reporting to ensure transparency and accountability in risk governance. This work is essential for maintaining compliance and informing strategic decision-making at the highest levels of the Department of Defense. Performed under a subcontract, the effort is tied to the Virginia Contracting Activity and has a place of performance in Washington DC with a ZIP code of 20340. It falls under NAICS code 541618 which corresponds to other management consulting services. The solicitation was posted on June 18, 2026, with responses due by June 26, 2026, at 8:00 PM Eastern Time. While no set-aside type is specified, the scope demands specialized expertise in enterprise risk frameworks and the ability to deliver high-quality documentation and presentations to senior leadership. The contractor must demonstrate proven experience in supporting federal agencies with risk reporting requirements and managing complex risk landscapes within defense operations.