Enterprise Risk Management Program (ERM)

The U.S. Department of Housing and Urban Development’s GNMA Support Division is seeking market research through a sources-sought notice for an Enterprise Risk Management Program (ERM) to enhance and mature Ginnie Mae’s enterprise-wide risk governance, reporting, and control frameworks. The requirement targets contractors to provide comprehensive risk management support including the development and maintenance of key deliverables such as a Consolidated Enterprise Risk Register, Risk Dashboards, Risk Appetite documentation, Governance Structure updates, Maturity Assessment Plans, and specialized reports including Fraud Risk Profile and Change Assessment Summaries, all requiring zero deviation from quality standards and full self-sufficiency without reliance on contractor support. Performance is to be conducted primarily off-site at the contractor’s facility with strict adherence to federal standards including NIST SP 800-53 Rev. 5, FISMA, OMB Circular A-11 and A-123, HUD Handbook 2400.25, Section 508 accessibility, and CFPB, OCC, FHFA, and GAO guidance. All deliverables must be submitted electronically in Microsoft Office or Adobe PDF formats and comply with accessibility requirements. Evaluation will be based on technical merit using a best-value trade-off methodology with emphasis on risk appetite integration, tool and template alignment, dashboard effectiveness, and the completeness and traceability of the risk register, with no indication of a lowest-price focus. Contractors must possess specialized personnel with certifications such as CPA, CISA, CISSP, PMP, or CRISC and must propose team structures with substitution approval protocols. The solicitation allows for a 12-month base period with four additional 12-month option periods and requires both transition-in and transition-out plans. Offerors must self-certify their size status under NAICS 541611 and any applicable socioeconomic categories including HUBZone, 8(a), WOSB, or SDVOSB, and provide unique entity identifiers, resumes, and documentation of qualifications. Proposals must be submitted electronically by April 30, 2026, at 2:00 PM EST to two designated HUD email contacts, with no physical mailing or web portal submissions accepted. This solicitation does not provide a contract value estimate, payment procedures, accounting codes, or detailed packaging and marking specifications, indicating a pre-contractual phase focused on assessing industry capabilities and technical approach before potential award.