Internal Control Program Management System

SOL #: PR20156857Sources Sought

Overview

Buyer

Homeland Security

Us Customs And Border Protection

ADMINISTRATION FACILITIES TRAINING CONTRACTING DIVISION

WASHINGTON, DC, 20229, United States

Place of Performance

Washington, DC

NAICS

Custom Computer Programming Services (541511)

PSC

Support Services, Delivered As A Service Contract (Saa S Or Subscription) Involved With The Analysis, Design, Development, Code, Test And Release Packaging Services Associated With Application Development Projects, As Well As Off The Shelf Business Software. (DA10)

Set Aside

No set aside specified

Original Source

https://sam.gov/opp/afa1060c3500403e9ac4c08dad21bb51/view

Timeline

Posted

Mar 3, 2026

Last Updated

Mar 4, 2026

Response Deadline

Apr 3, 2026, 5:00 PM

Qualification Details

Fit reasons

NAICS alignment with historical contract wins in similar service areas.
Scope strongly matches core technical capabilities and delivery model.

Risks

Past performance thresholds may require one additional teaming partner.
Potential clarification needed on staffing minimums before bid/no-bid.

Next steps

Validate eligibility requirements, assign capture owner, and schedule partner outreach to confirm teaming strategy before submission planning.

Quick Summary

The U.S. Customs and Border Protection (CBP), under the Department of Homeland Security, has issued a Sources Sought notice for an Internal Control Program Management System. CBP is seeking either a Commercial Off-The-Shelf (COTS) or tailored solution to automate the management of large volumes of internal control and testing data, currently handled manually across numerous Microsoft Excel workbooks. The goal is to centralize Office of Management and Budget (OMB) Circular A-123 control data, facilitate deliverables for DHS Risk Management and Assurance (RM&A), manage deficiencies, and provide comprehensive management reporting. Responses are due by April 3, 2026.

Scope of Work

CBP currently relies on a mix of Microsoft products (Excel, Power BI, PowerApps) to manage its internal control workload, involving over 90 Excel workbooks and 165 individual tabs. The desired solution will replace this manual process by providing a single, integrated platform. Key functionalities include:

Centralized collection of OMB Circular A-123 control data.
Automated population of deliverables for DHS RM&A.
Robust deficiency management processes.
Comprehensive management reporting and dashboarding capabilities.

Key Requirements & Questions

CBP is seeking detailed information from potential vendors on various aspects of their solutions, including:

Solution Capabilities: Data ingestion/export (especially for defined templates), support for all internal control phases (Test of Design, Test of Effectiveness, deficiency management), workflows, automated testing, and version control.
Technical Aspects: Pricing models, licensing, hosting (with FEDRAMP certification for cloud solutions), technical requirements, integration with Microsoft products (PowerApps, SharePoint, Teams, Outlook) and SAP systems (ECC, S4/HANA, GRC), mobile device support, and authentication methods (SSO).
User Experience & Support: User interface options, customizable in-application help, visual modification options, user roles, training, documentation, and ongoing maintenance requirements.
Innovation: Potential leverage of Artificial Intelligence (AI) models relevant to federal users, specifically DHS and CBP.

Contract & Timeline

Type: Sources Sought / Market Research
Set-Aside: None specified
Response Due: April 3, 2026, 5:00 PM ET
Published: March 3, 2026

Additional Notes

This notice is for market research purposes only to identify potential sources and capabilities. It does not constitute a solicitation or a request for proposals, nor does it guarantee a future award.