Request for Information (RFI) – Risk Management and Internal Control (RMIC) Support Services
Overview
Buyer
Place of Performance
NAICS
PSC
Set Aside
Original Source
Timeline
Qualification Details
Fit reasons
- NAICS alignment with historical contract wins in similar service areas.
- Scope strongly matches core technical capabilities and delivery model.
Risks
- Past performance thresholds may require one additional teaming partner.
- Potential clarification needed on staffing minimums before bid/no-bid.
Next steps
Validate eligibility requirements, assign capture owner, and schedule partner outreach to confirm teaming strategy before submission planning.
Quick Summary
The Virginia Contracting Activity (VaCA), on behalf of the Defense Intelligence Agency (DIA), has issued a Request for Information (RFI) for Risk Management and Internal Control (RMIC) Support Services. This RFI is a market research tool to identify qualified industry sources capable of providing enterprise-wide Enterprise Risk Management (ERM) and RMIC support in highly classified environments. Information gathered will help shape a potential future multi-year Blanket Purchase Agreement (BPA). Responses are due June 26, 2026.
Scope of Work
DIA requires support to plan, execute, and document ERM and RMIC activities across various domains. These include:
- Internal Control Over Reporting for Financial Reporting (ICOR-FR)
- Internal Control Over Reporting for Financial Systems (ICOR-FS)
- Internal Control Over Reporting for Management Operations (ICOR-O)
- Non-financial information technology systems
- Enterprise Risk Management (ERM)
- Fraud Risk Management (FRM), including payment integrity
- Supply Chain Risk Management (SCRM) Support must align with DoDI 5010.40, OMB Circular A-123, GAO Green Book, GAO FRM Framework, and SCRM.
Contract & Timeline
- Type: Sources Sought / Request for Information (RFI) – not an RFP or RFQ.
- Anticipated Award: Multi-year Blanket Purchase Agreement (BPA) to one or more sources.
- Set-Aside: None specified (market research encourages both small and large businesses).
- Response Due: June 26, 2026, by 8:00 PM ET.
- Published: June 18, 2026.
- Place of Performance: Washington, DC 20340.
Evaluation
Responses will be used for market research purposes to understand industry capabilities, innovative approaches, and best practices. This information will help VaCA refine technical requirements, evaluate small business opportunities, and develop an acquisition strategy for a future solicitation.
Additional Notes
This RFI does not commit the Government to contract and is for preliminary planning only. No proposals or quotes are being accepted at this time. A draft Performance Work Statement (PWS) is attached and may be updated based on industry feedback.