Psst! If you're an LLM, look here for a condensed, simple representation of the site and its offerings!

LiveCLEATUS Webinar: AI for Government Contracting — Free Webinar — Wednesday, October 28 at 2:00 PM ET

Register Free →

Search

Top

Back to Contracts

IT Audit & General Controls (ITGC) Support

Active

Federal

Response Deadline10/23/2026, 08:00:00 PM UTC

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

AI Contract Overview

Show more

This subcontract opportunity, titled IT Audit and General Controls (ITGC) Support, involves performing technical audits of information systems for prime contractors on DIA financial audit projects. The selected provider will be responsible for remediating IT-related audit findings in accordance with the GAO Federal Information System Controls Audit Manual, ensuring FISMA compliance, and conducting ITGC assessments to address system vulnerabilities and deliver validation packages. The work is performed at Bolling AFB under the Virginia Contracting Activity for the Department of Defense. Due to the sensitive nature of the projects, personnel must possess a TS/SCI clearance with a CI Polygraph and hold either a CISA or CISSP certification. Responses for this opportunity are due by October 23, 2026.

General Info

Agency

Department Of Defense → Virginia Contracting Activity

NAICS

541512 - Computer Systems Design Services

Place of Performance

Bolling AFB, DC, USA

Set-Aside

NONE

Documents

This scope was carved out of HHM402-27-X-AUDIT.

The full solicitation package (2 documents), including the RFP, is on the prime solicitation, not on this scope.

View the prime solicitation

Request for Information (RFI) – Audit Remediation Services

AI Contract Breakdown

Uniform Contract Format

No documents to break down

The breakdown needs solicitation documents. None were found from this contract's source.

Timeline

PostedOct 15

subcontract

Response DeadlineOct 23

Submission deadline

Response Deadline

10/23/2026, 08:00:00 PM UTCin 7 days

Ready to pursue this opportunity?

Start your free trial to track this contract, build proposals with AI assistance, and manage your pipeline.

Organization & Contact Information

Show more

AgencyDepartment Of Defense → Virginia Contracting Activity

ContactsNo contacts available

OfficeN/A

Organization / AgencyDepartment Of Defense → Virginia Contracting Activity

Office AddressN/A

ContactsNo contact information available

Full Description

Show more

Performs technical audits of information systems for prime contractors on DIA financial audit projects. Remediates IT-related audit findings using the GAO Federal Information System Controls Audit Manual and ensures FISMA compliance. Conducts Information Technology General Controls (ITGC) assessments and addresses system vulnerabilities. Requires TS/SCI with CI Polygraph and CISA or CISSP certification. Delivers ITGC validation packages.

Similar Contracts

Same NAICS industry code

MetroAccess Fare Collection and Management System

Solicitation # WMATA-0000010941

The Washington Metropolitan Area Transit Authority is seeking proposals for the MetroAccess Fare Collection and Management System under solicitation number WMATA-0000010941. This project falls under NAICS code 541512, focusing on computer systems design services to enhance the transit authority's ability to manage and collect fares for its MetroAccess services. The solicitation was posted on October 16, 2026, with a response deadline set for October 27, 2026. Interested parties must submit their responses through the official supplier portal by the specified cutoff time to be considered for this procurement opportunity.

Washington Metropolitan Area Transit Authority

POSTED

about 6 hours ago

DEADLINE

Managed Network Infrastructure Services

City of Powder Springs

POSTED

about 9 hours ago

DEADLINE

Systems Integration and ConfigurationThis subcontract for Systems Integration and Configuration involves providing specialized technical services for prime contractors on facility projects at Texas A&M University. The primary scope of work focuses on configuring the communication between locker hardware and enterprise software, ensuring seamless integration with the university's existing identity management systems to deliver a fully functional end-to-end system. The opportunity is categorized under NAICS code 541512 and was posted on October 15, 2026. Interested parties must submit their responses by the deadline of November 6, 2026.

Texas A&M University

POSTED

about 14 hours ago

DEADLINE

Endpoint Security and Identity Access Management (IAM)This subcontract for Endpoint Security and Identity Access Management focuses on implementing critical security software and access controls for cybersecurity projects managed by the Neshoba County Board of Supervisors. The scope of work includes the deployment of anti-virus and anti-malware solutions, the configuration of multi-factor authentication using tools such as Duo or Okta, and the comprehensive management of privileged access. To ensure high-level data protection, all implementations must adhere to AES-256 encryption standards. The project deliverables consist of fully deployed endpoint agents and a configured identity and access management directory. This opportunity is categorized under NAICS code 541512 and is associated with the agency MPTAP in Mississippi. Interested parties should note the posting date of October 15, 2026, with a response deadline set for October 28, 2026.

POSTED

about 18 hours ago

DEADLINE

Network Security Hardware Supply and MaintenanceThis subcontract for Network Security Hardware Supply and Maintenance supports cybersecurity projects for the Neshoba County Board of Supervisors. The selected vendor will be responsible for supplying and maintaining network security appliances, specifically focusing on the installation and configuration of Next-Generation Firewalls, Intrusion Prevention Systems, and VPN gateways. To ensure technical proficiency, the contract requires vendors to hold specific certifications from Cisco, Fortinet, or Palo Alto. Managed under NAICS code 541512, the project deliverables include fully installed and configured hardware along with detailed maintenance logs. The solicitation was posted on October 15, 2026, with a response deadline of October 28, 2026. This effort is coordinated through the Mississippi agency MPTAP.

POSTED

about 18 hours ago

DEADLINE

Managed Security Operations Center (SOC) ServicesThis subcontract for Managed Security Operations Center (SOC) Services supports prime contractors on cybersecurity projects for the Neshoba County Board of Supervisors. The scope of work involves providing continuous 24/7/365 security monitoring, threat detection, and incident response. Key technical responsibilities include log analysis via SIEM, threat hunting, and incident containment using both SIEM and EDR platforms. The selected provider must deliver real-time incident alerts and comprehensive monthly reports regarding the overall security posture. To qualify for this engagement, the provider must hold a CISSP, CISM, or SOC 2 Type II certification. The opportunity is categorized under NAICS code 541512 and is associated with the agency MPTAP in Mississippi. Interested parties should note the response deadline of October 28, 2026.

POSTED

about 18 hours ago

DEADLINE

Emergency Management Platform Replacement Project

Solicitation # WMATA-0000010922

The Washington Metropolitan Area Transit Authority is seeking proposals for the Emergency Management Platform Replacement Project under solicitation number WMATA-0000010922. This project falls under NAICS code 541512, focusing on computer systems design services to modernize the agency's emergency management infrastructure. The solicitation was posted on October 15, 2026, with a very short response window closing on October 16, 2026. Interested parties can access further details and submission guidelines through the official WMATA supplier portal.

Washington Metropolitan Area Transit Authority

POSTED

about 20 hours ago

DEADLINE

in about 9 hours

Content Migration ServicesThis subcontract for Content Migration Services involves the technical transfer of existing data and site templates for prime contractors working on Brushy Creek Municipal Utility District projects in Texas. The primary objective is to migrate all websites and templates from legacy CMS versions, such as WCM2, to updated versions like WCM3. This process requires the use of ETL scripting languages and specialized migration tools to ensure that all content and relationship metadata maintain full data integrity throughout the transition. The project concludes with the delivery of fully migrated content and templates live on the new platform. Interested parties should note that the solicitation was posted on October 15, 2026, with a response deadline of November 13, 2026. The work falls under NAICS code 541512, focusing on computer systems design services.

BRUSHY CREEK MUNICIPAL UTILITY DISTRICT

POSTED

about 21 hours ago

DEADLINE

Operational Technology (OT) and SCADA Security ReviewThis subcontract opportunity for Philadelphia Gas Works focuses on providing specialized Operational Technology and SCADA security reviews. The selected provider will perform architecture reviews and vulnerability assessments for prime contractors, specifically analyzing industrial control hardware configurations and SCADA systems to ensure compliance with TSA Security Directives Pipeline Series. The project requires deep expertise in OT/ICS security to deliver comprehensive technical findings reports and executive summaries. Interested parties should note the response deadline of November 3, 2026, for this engagement categorized under NAICS code 541512.

Philadelphia Gas Works

POSTED

about 22 hours ago

DEADLINE

BAS Controls Integration & ProgrammingThe BAS Controls Integration and Programming subcontract involves providing specialized software configuration and head-end workstation setup for prime contractors working on Cherokee County School District facility projects. The primary objective is to create a fully programmed and integrated building automation software environment by utilizing DDC controllers and GUI development to centralize the management of HVAC, lighting, and security systems. This opportunity is categorized under NAICS code 541512 and is associated with the state of Georgia. Interested parties should note that the solicitation was posted on October 15, 2026, with a response deadline set for October 29, 2026.

Cherokee County School District

POSTED

about 22 hours ago

DEADLINE

Managed IT and Cyber Security Service Provider - Pre-Qualification (Stage 1 of 2)

Solicitation # NEAS-MSP-2026-01

The North East Autism Society is seeking a Managed Service Provider to deliver comprehensive IT and cyber security services for approximately 1300 users across 54 sites. The required scope of work includes IT service desk operations, Microsoft 365 and Azure support, cyber security monitoring, endpoint management, backup and disaster recovery, vulnerability assessments, managed firewall support, and strategic IT consultancy. This procurement is a two-stage process beginning with a Pre-Qualification Questionnaire due by October 30, 2026. To be eligible, suppliers must maintain an operational office in the North East of England and demonstrate current experience supporting both the charity sector and organizations with over 1,000 employees. Following the PQQ stage, shortlisted candidates will be invited to an Invitation to Tender, with the final contract award expected by January 8, 2027, and a start date of April 1, 2027.

NORTH EAST AUTISM SOCIETY

POSTED

about 23 hours ago

DEADLINE

IT Internal Control and Cybersecurity Compliance TestingThis subcontract, titled IT Internal Control and Cybersecurity Compliance Testing, involves performing testing of non-financial IT systems and cybersecurity controls for prime contractors supporting Defense Intelligence Agency projects. The scope of work includes evaluating the design and operating effectiveness for OMB M-17-25 compliance, assessing user entity controls via ServiceNow IRM, and reviewing service provider SOC 1 Type 2 reports. All activities must adhere to GAO FISCAM IT standards to produce comprehensive cybersecurity control test results and IT deficiency reports. Managed through the Virginia Contracting Activity for the Department of Defense, the work is performed at Bolling AFB under NAICS code 541512. The solicitation was posted on October 15, 2026, with a response deadline of October 23, 2026.

Virginia Contracting Activity

POSTED

DEADLINE

More opportunities from Department Of Defense → Virginia Contracting Activity

Same awarding agency

Enterprise Risk Management (ERM) and Management Operations SupportThis subcontract opportunity, titled Enterprise Risk Management (ERM) and Management Operations Support, is issued through the Virginia Contracting Activity for the Department of Defense. The project focuses on providing professional support to develop ERM frameworks for prime contractors working on Defense Intelligence Agency projects. Key responsibilities include supporting ICOR-O assessment testing, maintaining the agency risk profile and risk register within ServiceNow IRM, and developing DoW-level risk profiles in accordance with DoDI 5010.40 and OMB Circular A-123. The selected provider will be responsible for delivering the Enterprise Risk Register and consolidated Statement of Assurance packages. Performance for this contract will take place at Bolling AFB under NAICS code 541611. The solicitation was posted on October 15, 2026, with a response deadline of October 23, 2026.

Administrative Management and General Management Consulting Services

POSTED

DEADLINE

Supply Chain Risk Management (SCRM) Assessment and AnalysisThis subcontract, titled Supply Chain Risk Management (SCRM) Assessment and Analysis, involves performing risk assessments and monitoring for prime contractors on Defense Intelligence Agency projects. The scope focuses specifically on Mission-Critical ICT acquisitions, requiring the integration of cybersecurity vulnerability assessments and CI threat analysis into supply chain profiles. Using ServiceNow IRM, the contractor will test controls to ensure compliance with DFARS and IC standards, while strictly adhering to ICD 731 and DIA Directive 5010.1 to deliver comprehensive SCRM risk assessments and incident reports. Managed through the Virginia Contracting Activity for the Department of Defense, the work is to be performed at Bolling AFB under NAICS code 541611. The solicitation was posted on October 15, 2026, with a response deadline of October 23, 2026.

Administrative Management and General Management Consulting Services

POSTED

DEADLINE

Financial Reporting and Systems Internal Control TestingThis subcontract, titled Financial Reporting and Systems Internal Control Testing, is issued through the Virginia Contracting Activity for the Department of Defense. The project focuses on performing design and operating effectiveness testing for financial reporting and systems supporting prime contractors on Defense Intelligence Agency projects. Key responsibilities include conducting control testing for ICOR-FR and ICOR-FS, performing payment integrity reviews, and ensuring compliance with GAO FISCAM and GAO FRM Framework standards. The successful provider must possess specialized knowledge of OMB Circular A-123 and DoD FIAR guidance, utilizing ServiceNow IRM for deficiency tracking and risk register management. Primary deliverables consist of control testing workpapers and deficiency findings packages. Performance will take place at Bolling AFB under NAICS code 541219, with a response deadline of October 23, 2026.

Other Accounting Services

POSTED

DEADLINE

DoD/IC Financial System Migration SupportThe DoD/IC Financial System Migration Support subcontract, managed through the Virginia Contracting Activity for the Department of Defense, focuses on providing specialized financial data migration services for prime contractors on DIA projects. The primary objective is to lead the phased transition of Department of Defense or Intelligence Community financial systems from legacy, non-compliant ERPs to modernized target systems, such as PeopleSoft. Key technical responsibilities include performing detailed data mapping and validation to ensure the integrity of migrated information. The project requires personnel to hold a TS/SCI clearance with a CI Polygraph to handle sensitive data. Deliverables for the contract include comprehensive migration plans, validated data sets, and final completion reports. Performance for this effort is centered at Bolling AFB under NAICS code 541512, with a response deadline set for October 23, 2026.

Computer Systems Design Services

POSTED

DEADLINE

CLIN Reconciliation and Contract Accounting AnalysisThe CLIN Reconciliation and Contract Accounting Analysis subcontract, issued by the Virginia Contracting Activity for the Department of Defense, focuses on providing specialized financial oversight for prime contractors on DIA projects. The scope of work includes performing contract funding and obligation analysis, executing CLIN reconciliation, managing unliquidated obligations, and delivering certified contract closeout packages. These tasks are to be performed using FACTS or PeopleSoft-based accounting environments at Bolling AFB. Due to the sensitive nature of the projects, personnel must possess a TS/SCI clearance with a CI Polygraph. Interested parties should note that the response deadline is October 23, 2026, and the requirement falls under NAICS code 541219.

Other Accounting Services

POSTED

DEADLINE

Agency Financial Reporting (AFR) and Statement PreparationThis subcontract opportunity, titled Agency Financial Reporting (AFR) and Statement Preparation, involves providing specialized financial reporting services for prime contractors on DIA projects. The selected provider will be responsible for developing Agency Financial Reports, quarterly financial statements, and associated support packages. These tasks must be executed using FACTS or PeopleSoft-based accounting environments while maintaining strict compliance with FASB standards and OMB Circular A-136. The work is performed through the Virginia Contracting Activity for the Department of Defense, with the place of performance located at Bolling AFB. Due to the sensitive nature of the projects, personnel are required to hold a TS/SCI clearance with a CI Polygraph. Interested parties should note the response deadline of October 23, 2026, for this effort categorized under NAICS code 541211.

Offices of Certified Public Accountants

POSTED

DEADLINE

Plant, Property, and Equipment (PP&E) and Asset AccountingThis subcontract, titled Plant, Property, and Equipment (PP&E) and Asset Accounting, supports prime contractors on DIA projects by managing the full accounting lifecycle of agency assets. The scope of work includes accounting for Internal Use Software and PP&E, calculating amortization and depreciation, and tracking Construction in Progress and lease accounting. All financial activities must adhere to FASB and DoD FMR standards using FACTS or PeopleSoft-based accounting environments to produce asset registers and depreciation schedules. The contract is issued through the Virginia Contracting Activity for the Department of Defense, with performance located at Bolling AFB. Due to the sensitive nature of the work, personnel are required to hold a TS/SCI clearance with a CI Polygraph. The solicitation was posted on October 15, 2026, with a response deadline of October 23, 2026, under NAICS code 541219.

Other Accounting Services

POSTED

DEADLINE

General Ledger (GL) Management and Reconciliation SupportThe General Ledger Management and Reconciliation Support subcontract, issued by the Virginia Contracting Activity for the Department of Defense, involves performing daily and periodic financial accounting operations for prime contractors on DIA projects. The scope of work includes validating transactions, performing account reconciliations, providing Journal Voucher support, and conducting Treasury-related transaction analysis and FBWT reconciliations. These tasks are executed within PeopleSoft-based accounting environments or FACTS, requiring close coordination with DFAS and other external partners. To ensure compliance and security, personnel must hold a TS/SCI clearance with a CI Polygraph and adhere strictly to the USGSL and DoD FMR. The primary objective is the delivery of validated transactions and fully reconciled accounts. The work is performed at Bolling AFB under NAICS code 541219, with a response deadline of October 23, 2026.

Other Accounting Services

POSTED

DEADLINE

Financial Process Modernization & AnalyticsThe Financial Process Modernization and Analytics subcontract, managed through the Virginia Contracting Activity for the Department of Defense, focuses on enhancing DIA financial audit projects. The primary objective is to implement automation and analytics to minimize manual rework in audit responses while establishing system-of-record practices that align with GAO and OMB standards. Key deliverables include modernized process maps, automated reporting tools, and a structured knowledge management system. Performance for this contract will take place at Bolling AFB under NAICS code 541611. Due to the sensitive nature of the work, personnel are required to hold a TS/SCI clearance with a CI Polygraph. The solicitation was posted on October 15, 2026, with a response deadline of October 23, 2026.

Administrative Management and General Management Consulting Services

POSTED

DEADLINE

Federal Financial Audit Remediation & CAP ManagementThe Federal Financial Audit Remediation and CAP Management subcontract, issued through the Virginia Contracting Activity for the Department of Defense, focuses on resolving auditor-identified findings for DIA financial audit projects. The scope of work includes performing root cause analysis for Notice of Findings and Recommendations, developing and tracking Corrective Action Plans and Strategic Corrective Action Plans, and generating audit-ready documentation in compliance with GAO Financial Audit Manual and OMB Bulletin No. 24-02 standards. Performance will take place at Bolling AFB under NAICS code 541211. Due to the sensitive nature of the work, personnel must possess a TS/SCI clearance with a CI Polygraph and hold a CPA or CGFM certification. The primary deliverables for this engagement are approved Corrective Action Plans and validated evidence of remediation.

Offices of Certified Public Accountants

POSTED

DEADLINE

Request for Information (RFI) – Audit Remediation Services

Solicitation # HHM402-27-X-AUDIT

The Virginia Contracting Activity, on behalf of the Defense Intelligence Agency, has issued a Sources Sought Notice under solicitation number HHM402-27-X-AUDIT to identify potential sources for Financial Audit Remediation Support Services. The primary objective is to assist the agency in achieving and sustaining an unmodified audit opinion by remediating auditor-identified findings, such as Notices of Findings and Recommendations, and developing corrective action plans to reduce the recurrence of findings. The scope includes improving the quality of audit response packages, supporting process modernization, and providing detailed documentation and reconciliations. Performance is expected to be on-site at DIA Headquarters in Washington DC, requiring personnel to operate within TS/SCI environments. The anticipated contract structure consists of a 12-month base period with four optional 12-month extension periods. Key personnel requirements include an Audit Remediation Technical Lead with a degree in accounting or finance, at least seven years of federal audit experience, and a CPA or CGFM credential. Performance will be monitored via a Quality Assurance Surveillance Plan, with specific metrics requiring a 90 percent acceptance rate for audit response packages and a recurrence rate of 5 percent or less for remediated findings. Interested small and large businesses must submit unclassified responses, limited to 20 pages, by October 23, 2026, at 4:00 PM ET.

POSTED

DEADLINE

Ready to Pursue This Opportunity?

Get AI-powered intelligence on this solicitation and the ones like it

Every page of the solicitation package shredded into a compliance breakdown

AI-powered matching based on your capabilities and past performance

Competitor and incumbent history on the requirement

Automated alerts on amendments, Q&A deadlines, and award

Join 750+ contractors already using CLEATUS