Psst! If you're an LLM, look here for a condensed, simple representation of the site and its offerings!

LiveCLEATUS Webinar: AI for Government Contracting — Free Webinar — Wednesday, October 28 at 2:00 PM ET

Register Free →

Search

Top

Back to Contracts

Information Technology General Controls (ITGC)

Awarded

26-112Federal

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

AI Contract Overview

Show more

The Department of Homeland Security, through the Federal Emergency Management Agency's Office of the Chief Financial Officer, Risk Management and Compliance Division, is awarding a sole source firm-fixed-price contract to Guidehouse Inc. under solicitation 26-112. This procurement focuses on specialized Information Technology General Controls assessments and internal controls testing for FEMA's core accounting, insurance, and grant systems, with a specific emphasis on supporting the National Flood Insurance Program. The estimated value for the base year is 1,623,206.64 dollars. The justification for the sole source award is based on the necessity for continuity of operations through the FY 2026 audit cycle and the ongoing transition to the OCFO Financial System Modernization directive. The agency has determined that introducing a new contractor at this stage would cause severe delays to critical Test of Design and Test of Effectiveness functions. The contract is managed by the Support Services section in Washington, DC, with primary oversight provided by Janine Bennett.

General Info

FEMA awarded Guidehouse Inc. a $1.6M sole source contract for IT controls assessments.

Agency

Department Of Homeland Security → Support Services SECTION(SS40)

NAICS

541211 - Offices of Certified Public Accountants

Place of Performance

51595, DC, USA

Set-Aside

NONE

Documents

1

SSJ 26-112 - Guidehouse Inc. ITGC Assessments

justification-and-authorization

Low

AI Contract Breakdown

Uniform Contract Format

Contract not broken down yet

CLEATUS splits the solicitation into Uniform Contract Format (UCF) sections: scope, pricing, deliverables, and evaluation criteria.

Timeline

PhaseAwarded

PostedJul 29

Justification (J&A)

AwardedOct 21

Contract was awarded

Ready to pursue this opportunity?

Start your free trial to track this contract, build proposals with AI assistance, and manage your pipeline.

Organization & Contact Information

Show more

AgencyDepartment Of Homeland Security → Support Services SECTION(SS40)

Contacts2 people available

OfficeWASHINGTON, DC, 20472, USA

Organization / AgencyDepartment Of Homeland Security → Support Services SECTION(SS40)

Office AddressWASHINGTON, DC, 20472, USA

Contacts

Janine Bennett

contact@example.gov

+1 (555) 000-0000

Jade Wiggins

contact@example.gov

Full Description

Show more

The Department of Homeland Security (DHS), Federal Emergency Management Agency (FEMA), Office of the Chief Financial Officer (OCFO), Risk Management & Compliance Division (RM&C) proposes to award an order pursuant to HSAM 3008.401-71, Sole source justifications, and GSAM 538.7104-3, Sole source justifications.

Similar Contracts

Same NAICS industry code

Financial Systems & Regulatory Compliance AdvisoryThe Financial Systems and Regulatory Compliance Advisory is a subcontract opportunity with the Oklahoma Department of Education focused on providing specialized governmental accounting expertise. The selected provider will support prime contractors by validating state reconciliation requirements and ensuring that financial dashboards are audit-ready and fully aligned with state fiscal policies. The primary objective is to deliver compliance-verified financial reporting views that adhere to strict regulatory standards. Qualified candidates must possess prior advisory experience at a senior financial management or Comptroller level. This engagement falls under NAICS code 541211. Interested parties should note that the response deadline for this opportunity is November 19, 2026.

Oklahoma Department of Education

POSTED

about 17 hours ago

DEADLINE

Construction Audit and Cost Verification ServicesThis subcontract for Construction Audit and Cost Verification Services involves performing independent financial audits and cost verification for prime contractors on Oregon Department of Transportation CM/GC projects. The selected provider will be responsible for validating actual costs by reviewing payroll, material invoices, and equipment charges against Project Cost Components, ultimately delivering Interim and Final Verification Reports for Phase 1A. The project is based in Salem, Oregon, and requires personnel who meet specific ODOT qualification standards and maintain professional liability insurance. Interested parties must respond by November 18, 2026, for this engagement categorized under NAICS code 541211.

POSTED

about 19 hours ago

DEADLINE

Financial Statement Auditing for NAFIsThis subcontract involves performing independent financial statement audits for prime contractors on Air Force Services Center projects. The selected firm is responsible for conducting on-site fieldwork, developing audit plans and PBC lists, and executing all audits in strict accordance with Government Auditing Standards and Air Force instructions. Key deliverables include finalized financial audit reports and formal briefings for senior leadership. To qualify, both the firm and the lead auditor must be licensed CPAs. Additionally, the contractor must utilize repositories that are NIST SP 800-171 compliant to ensure the secure handling of Controlled Unclassified Information and Personally Identifiable Information. This effort falls under NAICS code 541211 and is associated with the Department of Defense.

FA9000 Af Naf Po

POSTED

DEADLINE

Request for Information -Public Accountant Contract Audit

Solicitation # F41999-27-Q-XXXX

The Air Force Services Center (AFSVC) is seeking professional independent auditing services to conduct Public Accountant Contract Audits (PACA) for various Nonappropriated Fund Instrumentalities (NAFIs). The primary objective is to ensure financial integrity, statutory compliance, and operational efficiency for morale, welfare, and recreation activities globally. Key focus areas include the AFSVC Shared Service Center, the Air Force Venture Gaming Program, Air Force Cadet Dining, and ad-hoc Commander's Special Interest Audits. All work must be performed in accordance with Government Auditing Standards (GAGAS) and Air Force instructions. The anticipated contract structure consists of a one-year base period with four one-year option periods. Pricing will be a hybrid model: annual financial statement and program-specific performance audits will be Firm-Fixed-Price, while special interest audits will be Time and Materials or Labor-Hour, and travel will be cost-reimbursable. Performance requires a mix of remote data analysis and mandatory on-site fieldwork at designated installations, with on-site visits limited to four weeks per audit. Contractors must adhere to strict security and compliance protocols, including obtaining DBIDS passes, possessing REAL ID for base access, and undergoing background investigations via the DISS database. Personnel requiring system access must have current cybersecurity certifications per DoDM 8140.03 and sign non-disclosure agreements. Deliverables include detailed audit plans, independent auditor reports, management letters on internal control deficiencies, and regular progress reports. All sensitive data must be handled through DoD-compliant repositories meeting NIST SP 800-171 standards.

FA9000 Af Naf Po

POSTED

DEADLINE

Independent Financial Audit (GAAP/GAGAS)This subcontract opportunity, issued by the Vermont Department of Economic Development, seeks a qualified CPA firm to perform annual independent external financial audits for prime contractors on Vermont Health Access projects. The selected firm will be responsible for examining financial reporting for accuracy and auditing all receipts and expenditures in strict accordance with GAAP and GAGAS standards. Additionally, the contractor must assess process design to ensure overall effectiveness, integrity, and accountability. To be eligible, the firm must be compliant with 45 CFR 155.1200(c) and is required to deliver a comprehensive Financial Statement Audit Report by June 1 each year. Interested parties should note that the response deadline for this engagement is November 6, 2026.

Department of Economic Development

POSTED

DEADLINE

ITGC and Application Control AuditorThis subcontract opportunity with the Government of Canada's Department of Transport seeks an ITGC and Application Control Auditor to perform professional audits of departmental financial management and extended IT systems for prime contractors on Transport Canada ICFM projects. The selected provider will evaluate IT general controls and application controls, assess the security of electronic transaction processing and data transfers, and identify critical control gaps within financial reporting systems to deliver a comprehensive assessment report on control adequacy. The work is to be performed in the National Capital Region and requires the contractor to possess Reliability status and the ability to operate under Designated Organization Screening. Interested parties must respond by November 5, 2026, for this engagement categorized under NAICS code 541211.

Department of Transport

POSTED

DEADLINE

Internal Control over Financial Management assessment of Information Technology General Controls (ITGC)

Solicitation # T8080-260318

Transport Canada is seeking a supplier to conduct the 2026-27 Internal Control over Financial Management (ICFM) Ongoing Monitoring Assessment of Information Technology General Controls (ITGC). The primary objective of this engagement is to evaluate the adequacy of IT general and application controls within the departmental financial management system and supporting extended IT systems. This assessment aims to ensure that controls are operating effectively to safeguard data confidentiality, integrity, and availability, thereby supporting the timely processing of electronic transactions and the production of reliable financial information for corporate reporting and decision-making. The contract, identified by solicitation number T8080-260318, is scheduled to run from the date of award through March 31, 2027, with performance taking place in the National Capital Region. The project requires specialized expertise, including a Partner/Managing Director, Project Manager/Leader, and Senior Auditor. Security requirements include Designated Organization Screening (DOS) for the corporate entity and Reliability status for personnel. This procurement is governed by the Canada-Korea Free Trade Agreement, and the contracting authority is Tania Cantin.

Department of Transport

POSTED

DEADLINE

Government Financial Audit SpecialistThe Government Financial Audit Specialist subcontract involves performing core financial audits for prime contractors operating on Broward County government projects in Florida. The selected provider will be responsible for reviewing the financial statements of the County and its component units to verify strict compliance with governmental accounting standards. All work must be conducted in accordance with Generally Accepted Government Auditing Standards (GAGAS), culminating in the delivery of formal audit reports and audited financial statements. To qualify for this engagement, the provider must hold a valid CPA license and GAGAS certification. This opportunity was posted on October 19, 2026, with a response deadline of November 19, 2026. The project falls under NAICS code 541211, focusing on specialized accounting and auditing services for public sector entities.

POSTED

DEADLINE

External Audit Services

Solicitation # GEN2132533P1

Broward County is soliciting a qualified independent Certified Public Accounting firm to provide external audit services for the County, its Constitutional Officers, and Component Units. The scope of work includes performing annual financial and compliance audits, reviewing information technology general and application controls, and conducting grant audits required by state and federal authorities. Deliverables include a County Audit Report consistent with the GASB financial reporting model, separate opinions for specific funds such as Aviation, Port, and Hotel Enterprise, and compliance reports adhering to Government Auditing Standards and the Rules of the Auditor General. All work must be performed in accordance with GAAS, GAGAS, GAAP, and the Federal and Florida Single Audit Acts. The solicitation process requires electronic submission through the BPRO system by November 19, 2026. Award recommendations are based on a 100-point scoring system, with a mandatory 25 percent County Business Enterprise goal. Vendors must provide various certifications, including criminal history screening, lobbyist registration, and non-collusion statements. Security requirements include potential national fingerprint-based records checks for access to high-security facilities and mandatory annual cybersecurity training for employees. The prime vendor maintains sole responsibility for the quality and independence of the engagement, including any work performed by subcontractors.

POSTED

DEADLINE

LIHTC Property Compliance AuditingThis subcontract opportunity with the City of South Portland Housing Authority involves providing specialized auditing and financial reporting services for prime contractors managing Low-Income Housing Tax Credit properties. The selected provider will be responsible for performing financial audits to ensure strict adherence to LIHTC regulatory frameworks and reporting standards, ultimately delivering comprehensive audit reports for all associated entities. To be eligible, contractors must hold a valid State of Maine licensure and maintain Professional Liability insurance. Interested parties should note that the solicitation was posted on October 19, 2026, with a response deadline of November 1, 2026. The work falls under NAICS code 541211, focusing on offices of certified public accountants.

City of South Portland Housing Authority

POSTED

DEADLINE

HUD Financial Audit and Single Audit ServicesThe City of South Portland Housing Authority is seeking a subcontractor to provide HUD Financial Audit and Single Audit Services for prime contractors. The selected provider will be responsible for conducting annual audit fieldwork in strict accordance with Uniform Guidance and 2 CFR Part 200, Subpart F. Key deliverables include the submission of the Final Audit Report and the completion of all required REAC reporting, which must be managed using specialized audit software that ensures the protection of personally identifiable information. To qualify for this engagement, the contractor must hold a valid State of Maine license, maintain professional independence, and provide a current peer review letter. Interested parties must submit their responses by November 1, 2026. This subcontract falls under NAICS code 541211, focusing on professional accounting and auditing standards to ensure regulatory compliance for housing authority projects.

City of South Portland Housing Authority

POSTED

DEADLINE

Solicitation # 10192026

The City of South Portland Housing Authority is soliciting proposals for professional audit services under solicitation number 10192026. The selected firm will be engaged for an initial three-year term to perform audits in accordance with Generally Accepted Auditing Standards, Generally Accepted Accounting Principles, HUD and REAC guidelines, and Uniform Guidance 2 CFR Part 200. Key performance milestones include completing field work within 120 days of the fiscal year end, providing preliminary draft reports within 180 days, and issuing the final report within 30 days of the draft. Additionally, the auditor must perform the REAC attestation function annually via the internet. Proposals are due by November 1, 2026, and must be submitted electronically to Val Koval. Required submission materials include a letter of transmittal, personnel qualifications, references from PHA audits conducted within the last three years, a sample audit report, and evidence of professional liability insurance. Applicants must affirm they are licensed in the State of Maine, meet independence requirements, and comply with Equal Employment Opportunity and data privacy standards for protecting personally identifiable information. The award will be based on the best interest of the Authority, and the successful firm must agree to sign annual contracts using the standard HUD audit contract. Payment terms specify that at least four percent of the fee is paid upon completion, with full payment required before the filing of the audited report.

City of South Portland Housing Authority

POSTED

DEADLINE

More opportunities from Department Of Homeland Security → Support Services SECTION(SS40)

Same awarding agency

Business Process Engineering and Data Quality RemediationThis subcontract opportunity, titled Business Process Engineering and Data Quality Remediation, supports prime contractors on FEMA OCFO projects within the Department of Homeland Security. The primary objective is to redesign flawed business processes and remediate data quality issues that impact financial reporting. By applying business process re-engineering within federal financial environments, the selected provider will analyze workflows to identify failure points and implement redesigned processes that incorporate necessary internal controls. Key deliverables for this engagement include the creation of detailed process maps, comprehensive data remediation reports, and updated standard operating procedures. The project falls under NAICS code 541611 and is managed by the Support Services SECTION (SS40). Interested parties should note the response deadline of October 30, 2026.

Administrative Management and General Management Consulting Services

POSTED

DEADLINE

IT Audit Remediation and System Control SupportThe IT Audit Remediation and System Control Support subcontract focuses on remediating IT control findings and system risks for prime contractors supporting FEMA OCFO projects. The scope of work involves fixing IT General Controls, application controls, and system-generated report issues, while implementing necessary change and configuration management corrections. Additionally, the contractor is responsible for developing Plans of Action and Milestones in accordance with FISCAM and NIST guidance, ensuring the delivery of remediated controls and IT validation reports. This engagement requires strict adherence to NIST SP 800-88 standards and the ability to handle Controlled Unclassified Information. Managed under NAICS code 541512 for the Department of Homeland Security, the project emphasizes rigorous compliance and system security. Interested parties must respond by October 30, 2026.

Computer Systems Design Services

POSTED

DEADLINE

Financial and Operational Corrective Action SupportThe Financial and Operational Corrective Action Support subcontract, issued by the Department of Homeland Security's Support Services SECTION(SS40), focuses on the remediation of internal control deficiencies and audit findings for prime contractors on FEMA OCFO projects. The scope of work involves conducting root cause analyses, developing actionable remediation plans, and assembling closure packages to resolve financial, operational, and compliance issues. All activities must adhere to OMB Circular A-123 and GAO Standards for Internal Control in the Federal Government. Key deliverables for this engagement include root cause reports, detailed remediation plans, and comprehensive compliance packages. This opportunity falls under NAICS code 541219 and has a response deadline of October 30, 2026.

Other Accounting Services

POSTED

DEADLINE

Corrective Action Implementation and Audit Remediation Support

Solicitation # 70FA4027I00000001

The Department of Homeland Security Federal Emergency Management Agency Office of the Chief Financial Officer is seeking contractors to provide corrective action implementation and audit remediation support services. This requirement focuses on remediating internal control deficiencies, audit findings, and compliance issues identified through oversight activities. The scope of work includes root cause analysis, corrective action planning, Mission Action Plan and Plan of Action and Milestones support, IT control remediation, and the testing and validation of remediation efforts. All work must align with OMB Circular A-123, GAO Standards for Internal Control in the Federal Government, and applicable DHS and FEMA policies. Routine internal control assessments and A-123 testing are explicitly excluded from the primary scope. The anticipated contract structure consists of a 12-month base period with four 12-month option periods, totaling a potential five-year duration. Performance will occur at the contractor's facilities, FEMA Headquarters in Washington DC, and Winchester Virginia, with telework authorized at the discretion of the Contracting Officer Representative. Key security requirements include the safeguarding of Controlled Unclassified Information and adherence to NIST SP 800-88 for media sanitization. Additionally, contractors must identify any organizational conflicts of interest and account for FEMA's core financial system modernization anticipated in early FY 2027. This current effort is a sources-sought market research activity under NAICS code 541611.

Administrative Management and General Management Consulting Services

POSTED

DEADLINE

System Architecture & Engineering Library SupportThe contract supports the maintenance and modernization of the Engineering Library and LOMC Clearinghouse by integrating systems, managing metadata, and producing technical documentation to ensure seamless access and usability of engineering resources. The work involves enhancing data organization, improving searchability, and aligning technical infrastructure with current standards to support efficient information retrieval and collaboration across engineering disciplines. This subcontract, issued under NAICS code 541330 by the Department of Homeland Security’s Support Services SECTION (SS40), requires performance primarily in Washington, D.C., with a posted date of July 23, 2026. The project focuses on sustaining critical infrastructure used for engineering knowledge management, with an emphasis on system interoperability and long-term data integrity. No specific set-aside provisions are indicated, and the contract is part of broader efforts to modernize internal technical repositories for federal engineering operations.

Engineering Services

POSTED

DEADLINE

Knowledge Transfer & Transition PlanningThe contract under the title Knowledge Transfer & Transition Planning is a subcontract issued by the Department of Homeland Security’s Support Services SECTION(SS40) with a NAICS code of 541611, focusing on documentation development, runbook creation, and targeted knowledge transfer initiatives. The primary objective is to facilitate a seamless handoff to a future contractor by systematically reducing reliance on the incumbent team through structured transition activities. All work is to be performed at the designated place of performance in Washington, DC, with a zip code of 20472, and the solicitation was posted on July 23, 2026. The effort emphasizes procedural clarity and institutional memory retention to ensure operational continuity without disruption upon contract transition.

Administrative Management and General Management Consulting Services

POSTED

DEADLINE

IT Help Desk & Contact Center Support (FMIX)The contract provides Tier 1–2 technical support services for users of the FMIX system through a federal contact center, encompassing help desk functions such as troubleshooting system issues, managing user accounts, and delivering guidance to ensure efficient system utilization. Services are delivered in support of the Department of Homeland Security’s Support Services SECTION(SS40), with performance based in Washington, DC, at a zip code of 20472. The work falls under NAICS code 541519, indicating it is classified as other computer-related services, and is structured as a subcontract, though no specific solicitation number or set aside details are provided. The contract was posted on July 23, 2026, and is accessible through the SAM.gov portal for further reference.

Other Computer Related Services

POSTED

DEADLINE

Flood Data Management & Publication SupportThe contract involves the validation, quality assurance, formatting, and publication of authoritative flood hazard datasets that serve more than 22,000 stakeholders across insurance, real estate, and emergency planning sectors. The work requires precise data handling to ensure accuracy and consistency, supporting critical decisions that impact public safety and financial risk assessment. The datasets must meet high standards for reliability and accessibility to fulfill the needs of federal, state, and private entities relying on this information. The contract is a subcontract under the Department of Homeland Security’s Support Services SECTION (SS40), with performance taking place in Washington, DC, at the 20472 zip code. Classified under NAICS code 541380 for other scientific and technical consulting services, the effort is centered on delivering trusted geospatial flood data through rigorous technical processes. The solicitation was posted on July 23, 2026, and the work will support national preparedness and resilience initiatives by maintaining an authoritative source of flood hazard information used widely across government and industry.

Testing Laboratories and Services

POSTED

DEADLINE

Cybersecurity Operations & Incident ResponseThe contract encompasses continuous cybersecurity operations focused on safeguarding personally identifiable information and critical flood hazard data within the RAM-C and FMIX systems. Key responsibilities include ongoing vulnerability management, timely patching of systems, real-time incident detection, and rapid response protocols to mitigate threats and ensure operational resilience. These activities are designed to maintain the integrity, confidentiality, and availability of sensitive data under the jurisdiction of the Department of Homeland Security’s Support Services SECTION(SS40). The performance location is identified as Washington, DC, with a ZIP code of 20472, indicating a primary operational base within the national capital region. This subcontract falls under NAICS Code 541513, which classifies it as Computer Systems Design and Related Services, reflecting the technical and analytical nature of the cybersecurity work required. The opportunity was posted on July 23, 2026, and is structured as a subcontract under the broader federal acquisition framework, though no specific solicitation number or set-aside details are provided.

Computer Facilities Management Services

POSTED

DEADLINE

Cloud Infrastructure Operations & Maintenance (O&M)The contract encompasses ongoing operations and maintenance for the RAM-C cloud environment hosted on AWS, with a focus on ensuring continuous high availability, seamless scalability, and strict adherence to federal compliance standards. Key responsibilities include comprehensive monitoring, timely patching, performance optimization, and proactive management of infrastructure to sustain operational integrity and security across all layers of the cloud environment. The work is classified as a subcontract under NAICS code 541512, indicating it falls within the scope of computer systems design and related services. Performance is required to be conducted at Washington, D.C., with a zip code of 20472, indicating a direct alignment with federal agency operations. The contract is managed under the Department of Homeland Security’s Support Services SECTION(SS40), underscoring its critical role in supporting national security infrastructure.

Computer Systems Design Services

POSTED

DEADLINE

Vehicle Recompete: Bpa 70FA4022A00000021This Blanket Purchase Agreement, identified as 70FA4022A00000021, is managed by the Department of Homeland Security's Federal Emergency Management Agency through the Support Services Section. The contract establishes an IDV ceiling of 246,213.50 dollars and is scheduled to remain active until July 18, 2027. It is classified as a full-recompete under NAICS code 541611. The primary objective of this vehicle is to provide a comprehensive range of services for the preparation of Executive Core Qualifications packages for individuals selected for Senior Executive Service positions within FEMA. Recent activity includes multiple task orders issued to Solutions for the Workplace LLC, each valued at 2,500 dollars for the creation of new ECQ packages.

Administrative Management and General Management Consulting Services

POSTED

DEADLINE

Ready to Pursue This Opportunity?

Get AI-powered intelligence on this solicitation and the ones like it

Every page of the solicitation package shredded into a compliance breakdown

AI-powered matching based on your capabilities and past performance

Competitor and incumbent history on the requirement

Automated alerts on amendments, Q&A deadlines, and award

Join 750+ contractors already using CLEATUS