Active Solicitation · DEPT OF DEFENSE

    REQUEST FOR INFORMATION (RFI) – RISK MANAGEMENT AND INTERNAL CONTROL (RMIC) SUPPORT SERVICES

    Sol. HHM402-2X-RMICSources SoughtWASHINGTON, DC
    Open · 7d remaining
    DAYS TO CLOSE
    7
    closes Jun 30, 2026
    POSTED
    Jun 18, 2026
    Publication date
    NAICS CODE
    541611
    Primary industry classification
    PSC CODE
    Product & service classification

    AI Summary

    The Virginia Contracting Activity is seeking information for Risk Management and Internal Control Support Services for the Defense Intelligence Agency. This RFI aims to identify potential sources capable of providing enterprise-wide support in classified environments. Responses will inform future acquisition strategies and may lead to a multi-year Blanket Purchase Agreement.

    Contract details

    Solicitation No.
    HHM402-2X-RMIC
    Notice Type
    Sources Sought
    Posted Date
    June 18, 2026
    Response Deadline
    June 30, 2026
    NAICS Code
    541611AI guide
    Primary Contact
    Dale Williams
    State
    DC
    ZIP Code
    203405100
    AI Product/Service
    service

    Description

    Request for Information (RFI) – Risk Management and Internal Control (RMIC) Support Services

    THIS IS A SOURCES SOUGHT NOTICE, REQUEST FOR INFORMATION (RFI). This is not a Request for Proposal (RFP) or Request for Quote (RFQ). This request for capability information does not constitute an RFP or RFQ and does not commit the Government to contract for any supply or service, whatsoever. Further, the Virginia Contracting Activity (VaCA) is not at this time seeking proposals or quotes and will not accept unsolicited proposals or quotations. Submission of any information in response to this market survey is purely voluntary.

    However, responses received will assist the Government if solicitation is issued in the future. The government assumes no financial responsibility for any costs incurred associated with this request for capability information. Not responding to this sources sought does not preclude participation in any future RFP or RFQ, if any is issued. Potential offerors are responsible for monitoring government websites such as GSA or SAM for any potential opportunities. Responses do not guarantee award nor exclude/include your company in any potential acquisition process. No feedback or evaluations will be provided to companies regarding their submissions.

    This RFI is being used as a Market Research tool for informational purposes and for preliminary planning purposes to identify potential sources that possess the required experience and expertise to provide the required support. Small and large businesses are encouraged to respond.

    1.  INTRODUCTION:

    The Virginia Contracting Activity (VaCA) invites interested contractors to respond to this Request for Information (RFI) for RMIC Support Services in support of the Defense Intelligence Agency (DIA). VaCA seeks information from qualified industry sources capable of providing enterprise-wide Enterprise Risk Management (ERM) and Risk Management Internal Controls (RMIC) support in highly classified environments.

    This RFI is part of VaCA’s market research efforts to better understand industry capabilities, innovative approaches, and best practices for Federal ERM and RMIC activities in accordance with DoDI 5010.40, OMB Circular A-123, GAO Green Book, GAO Fraud Risk Management (FRM) Framework, and Supply Chain Risk Management (SCRM). Information received may be used to shape acquisition strategy, refine technical requirements, evaluate small business opportunities, and support development of a future solicitation.

    2. PURPOSE:

    VaCA is conducting market research to inform of a potential upcoming acquisition for RMIC Support Services. VaCA expects to award a multi-year Blanket Purchase Agreement (BPA) to one or more sources for this initiative. Attachment 1 is the draft Performance Work Statement (PWS) for the BPA. The PWS may be updated on information gathered from this RFI based on industry review and comment.

    3.  BACKGROUND:

    In accordance with DoDI 5010.40, DIA is required to maintain an integrated Enterprise Risk Management (ERM) and Risk Management and Internal Control (RMIC) program. DIA requires support to plan, execute, and document ERM and RMIC activities across all applicable domains, including:

    • Internal Control Over Reporting for Financial Reporting (ICOR-FR)
    • Internal Control Over Reporting for Financial Systems (ICOR-FS)
    • Internal Control Over Reporting for Management Operations (ICOR-O)
    • Non-financial information technology systems
    • ERM
    • FRM, including payment integrity requirements
    • SCRM

    Please view the attached document for a fill description of the RFI and Draft PWS. 

    Key dates

    1. June 18, 2026Posted Date
    2. June 30, 2026Proposals / Responses Due

    AI search tags

    Frequently asked questions

    REQUEST FOR INFORMATION (RFI) – RISK MANAGEMENT AND INTERNAL CONTROL (RMIC) SUPPORT SERVICES is a federal acquisition solicitation issued by DEPT OF DEFENSE. Review the full description, attachments, and submission requirements on SamSearch before the response deadline.

    SamSearch Platform

    Stop searching. Start winning.

    AI-powered intelligence for the right opportunities, the right leads, and the right time.