This Sources Sought opportunity from Department Of Homeland Security was posted on September 10, 2026. The submission period has ended. Browse the details below for market research, or find similar active opportunities.
OCFO Risk Management and Compliance Division, Internal Control and Compliance Support Services
Contract Overview
Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.
Active Opportunities Like This One
AI Contract Overview
The Federal Emergency Management Agency (FEMA) Office of the Chief Financial Officer is seeking specialized support services to strengthen its internal control and compliance environment. The scope of work involves providing technical, analytical, and advisory support for internal control assessments, compliance monitoring, risk analysis, and financial management. Key activities include testing control design and operating effectiveness, performing IT general control and application control testing, and managing flood insurance controls. These efforts must align with OMB Circular A-123, GAO Standards for Internal Control in the Federal Government, and various Department of Homeland Security policies. The contractor will be expected to identify risks and control gaps and recommend improvements, though the actual execution of corrective actions and audit remediation is excluded from this specific scope to maintain objectivity. The contract is structured with a 12-month base period and four 12-month option periods, totaling five years. Performance will occur at the contractor's facilities, FEMA Headquarters in Washington, DC, and in Winchester, Virginia, with telework authorized at the discretion of the Contracting Officer Representative. A critical component of the requirement is supporting FEMA's transition to modernized core financial, procurement, and asset management systems anticipated in early FY 2027. The contractor must adhere to strict security standards, including the safeguarding of Controlled Unclassified Information and compliance with NIST SP 800-88 for media sanitization. Additionally, the contractor must utilize the DHS Trusted Tester for Web Methodology Version 5.0 for accessibility testing of digital content.
General Info
Place of Performance
Washington, DC, 20472, USASet-Aside
Timeline
Submission Closed
Organization & Contact Information
Full Description
The Federal Emergency Management Agency (FEMA), Office of the Chief Financial Officer (OCFO), Financial Management Division (FMD), Risk Management and Compliance (RMC) Branch, is seeking information from qualified contractors capable of providing specialized support services to assist with internal control assessment, compliance monitoring, control documentation, control testing, risk analysis, insurance management controls, data analysis, information technology control testing, and financial management support.
The purpose of this effort is to help FEMA maintain and strengthen its internal control and compliance environment in accordance with applicable federal requirements, including Office of Management and Budget (OMB) Circular A-123, the Government Accountability Office (GAO) Standards for Internal Control in the Federal Government, federal financial management requirements, information technology control guidance, Department of Homeland Security (DHS) policy, and FEMA guidance. The contractor shall provide technical, analytical, documentation, reporting, and advisory support to assist FEMA in evaluating control design, testing control operating effectiveness, monitoring compliance activities, identifying risks and control gaps, assessing compliance requirements, and providing management insight.
The anticipated scope of support may span FEMA’s financial management, disaster assistance, grants, flood insurance, information technology, financial reporting, and mission support processes. Specific support may include internal control assessments, compliance monitoring, control documentation, control testing, risk assessments, data analysis, flood insurance controls, information technology general control and application control testing, and general financial management support. Through these activities, the contractor may identify findings, risks, deficiencies, control gaps, and compliance issues and recommend improvements based on assessment, testing, monitoring, and analysis.
Corrective action implementation, remediation execution, and closure support for identified deficiencies are outside the primary scope of this requirement and are expected to be addressed under a separate Corrective Action and Audit Remediation Support Services requirement. This separation is intended to preserve clarity of roles, reduce overlap between assessment and remediation activities, and ensure objectivity in FEMA’s internal control and compliance environment.
More opportunities from Department Of Homeland Security → Support Services SECTION(SS40)
Same awarding agency
Earlier notices in this NAICS code
Posted before this notice, open and closed
Find Active Opportunities Like This
Get AI-powered intelligence on the opportunities still open
Every page of the solicitation package shredded into a compliance breakdown
AI-powered matching based on your capabilities and past performance
Competitor and incumbent history on the requirement
Automated alerts on amendments, Q&A deadlines, and award
Join 750+ contractors already using CLEATUS
