Request for Information (RFI) – Audit Remediation Services

Request for Information (RFI)

This RFI is issued by the Virginia Contracting Activity (VaCA) for the Defense Intelligence Agency (DIA) to conduct market research for potential Audit Remediation Support Services. The goal is to identify qualified industry sources capable of providing enterprise-wide audit remediation and sustainment support, including in highly classified environments. This RFI is for informational and planning purposes only and does not constitute a solicitation or commitment to contract. A draft Statement of Objectives (SOO) is provided for review and comment.

Respondents are requested to provide information on:

• Corporate Capability and Relevant Experience (e.g., Federal financial statement audit remediation, audit sustainment, NFR/CAP remediation, evidence quality, recurrence reduction, audit liaison, DoD/IC support, TS/SCI on-site performance).

• Technical Approach (e.g., NFR inventory management, root cause analysis, CAP development/tracking, SCAP support, audit response timeliness, evidence quality management, process improvement, knowledge management).

• Staffing and Clearance Sustainment (e.g., staffing models for BPA/call orders, TS/SCI clearance strategy, key personnel).

• Transition and Continuity (e.g., transition-in approach, risks, mitigations).

• Contracting and Pricing Input (e.g., recommended contract types, ordering vehicle approach, BPA/call order structure).

• Performance Standards/Metrics (e.g., measurable standards for audit remediation, surveillance methods).

• Risks and Recommendations (e.g., key risks, recommended mitigations, edits to draft SOO, OCI identification).

• Draft Document Feedback (e.g., recommended edits to the draft SOO).

• The potential acquisition is for Audit Remediation Support Services using a Blanket Purchase Agreement (BPA).

• Performance is expected to require on-site work in TS/SCI environments.

• Funding is subject to availability of FY27 funding.

• Response Due Date: June 30, 2026, at 4:00 p.m. EST.

• Submission Method: Email electronic submission.

• Subject Line: "RFI Response – Audit Remediation BPA".

• Page Limit: 15 pages, excluding attachments.

• Questions due by [Insert date] to [Insert POC].

• Responses should be organized using the headings in Section 5 and include a capability statement, relevant experience/past performance, proposed staffing, ROM estimate, contract vehicle information, and comments on Attachment 1.

• Small and large businesses are encouraged to respond.

• Offerors must have a UEI and be registered in SAM by the time of award.

• This RFI is a market research tool. No feedback or evaluations will be provided.

• Not responding does not preclude future participation.

• Respondents should not submit classified information. Proprietary information must be clearly marked.

Statement of Objectives (SOO)

This Statement of Objectives (SOO) establishes enterprise-wide objectives for a Blanket Purchase Agreement (BPA) for the Defense Intelligence Agency (DIA) to provide expert audit remediation and audit sustainment support services. The goal is to resolve Notices of Findings and Recommendations (NFRs) and advance the Agency toward a clean financial audit opinion. Specific requirements will be executed through individual call orders.

The BPA covers enterprise-wide audit remediation and audit sustainment support across DIA, including work in highly classified environments. Services include root cause analysis, corrective action planning, remediation execution, sustainment, and audit response readiness for financial reporting deficiencies. This is for non-personal services.

• NFR Remediation and Closure: Support remediation, downgrade, and closure of auditor-issued NFRs, including strategy development, Corrective Action Plan (CAP) or Substantive Corrective Action Plan (SCAP) support, and evidence quality.

• Audit Sustainment and Recurrence Reduction: Develop sustainable practices to reduce the recurrence of findings.

• Audit Liaison and Data Request Support: Coordinate and facilitate audit data requests and support meeting suspense dates.

• Process Improvement and Automation: Identify opportunities to improve remediation processes and propose modernized, data-driven approaches.

• Secure On-Site Operations: Provide cleared Subject Matter Experts (SMEs) for on-site support within DIA facilities and Sensitive Compartmented Information Facilities (SCIFs).

• Internal Control Program Coordination: Align remediation efforts with DIA's Internal Control testing program.

• This is a BPA. Specific requirements, deliverables, and timelines will be established at the call-order level.

• Call orders may include Government-developed task descriptions or Performance Work Statement (PWS) language.

• Work is expected to be performed on-site at DIA unless otherwise authorized.

• A DD Form 254 will specify classification and TS/SCI requirements.

• Offeror Response Expectations (BPA Level): Contractors must describe their approach to supporting the objectives, including staffing, quality control, progress tracking, and process improvement identification.

• Call Order Work Plan: Required within 15 business days after call order award, detailing task approach, staffing, schedule, risks, quality control, and coordination.

• Program Management Review (PMR): Quarterly reviews of BPA health and performance.

• BPA Personnel Roster: Maintain and provide a roster of all contractor personnel supporting the BPA and active call orders.

• Appendix A lists Contract Data Requirements Lists (CDRLs) for deliverables such as the Call Order Work Plan, Quarterly PMR Briefing Package, and BPA Personnel Roster.