Internal Control Program Management System

SOL #: PR20156857Sources Sought

Overview

Buyer

Homeland Security

Us Customs And Border Protection

ADMINISTRATION FACILITIES TRAINING CONTRACTING DIVISION

WASHINGTON, DC, 20229, United States

Place of Performance

Washington, DC

NAICS

Custom Computer Programming Services (541511)

PSC

Support Services, Delivered As A Service Contract (Saa S Or Subscription) Involved With The Analysis, Design, Development, Code, Test And Release Packaging Services Associated With Application Development Projects, As Well As Off The Shelf Business Software. (DA10)

Set Aside

No set aside specified

Original Source

https://sam.gov/opp/1495ea2f888844bda020623d0c543917/view

Timeline

Posted

Mar 3, 2026

Last Updated

Mar 4, 2026

Response Deadline

Apr 3, 2026, 5:00 PM

Qualification Details

Fit reasons

NAICS alignment with historical contract wins in similar service areas.
Scope strongly matches core technical capabilities and delivery model.

Risks

Past performance thresholds may require one additional teaming partner.
Potential clarification needed on staffing minimums before bid/no-bid.

Next steps

Validate eligibility requirements, assign capture owner, and schedule partner outreach to confirm teaming strategy before submission planning.

Quick Summary

The U.S. Customs and Border Protection (CBP), under the Department of Homeland Security, is conducting market research for an Internal Control Program Management System (ICPMS). This Request for Information (RFI) seeks either a Commercial Off-The-Shelf (COTS) or tailored solution to automate the manual workload of managing OMB Circular A-123 control data. The goal is to centralize data, facilitate deficiency management, and provide management reporting, replacing an estimated 90+ Microsoft Excel workbooks. Responses are due April 3, 2026.

Scope of Work

CBP aims to acquire, develop, and implement a system that will:

Automate the management of large amounts of repetitive control and testing data.
Consolidate data from approximately 90+ Microsoft Excel workbooks (165 individual tabs).
Centralize all Office of Management and Budget (OMB) Circular A-123 control data.
Populate deliverables for submission to Department of Homeland Security (DHS) Risk Management and Assurance (RM&A).
House the deficiency management process.
Provide comprehensive management reporting.

Vendors are requested to provide capabilities statements and address specific questions regarding pricing, hosting (including FEDRAMP certification), technical requirements, data ingestion/export, reporting/dashboarding, integration with Microsoft products (PowerApps, SharePoint, Teams, Outlook), user interface options, support for internal control program phases (Test of Design, Test of Effectiveness, deficiency management), in-application help, AI integration, visual customization, maintenance, SAP integration (ECC, S4/HANA, Business Warehouse, GRC Process Control), version control, user roles, training/documentation, mobile device support, authentication methods (SSO), ability to ingest control population datasets, and automation of emails/reminders and testing workflows.

Contract & Timeline

Type: Sources Sought / Request for Information (RFI)
Set-Aside: None specified
Response Due: April 3, 2026, 5:00 PM ET
Published: March 4, 2026
PSC: DA10 - Support Services, Delivered As A Service Contract (SaaS or Subscription)
Place of Performance: Washington, DC

Evaluation

Responses will be used for market research and requirements development to help CBP understand available solutions and inform future requirements. This RFI is for planning purposes only and does not constitute a solicitation.