OCFO Risk Management and Compliance Division, Internal Control and Compliance Support Services

Description: The contractor shall propose a solution that achieves the following performance requirements: 1. OMB Circular A-123 Business Process Internal Control Support: FEMA requires support to maintain an effective internal control program that enables management to assess risk, document business processes and controls, evaluate control design and operating effectiveness, perform routine monitoring, and support internal control reporting requirements. The contractor’s solution should support reliable, consistent, and well-documented internal control assessment activities aligned with applicable federal standards and FEMA priorities. 2. A-123 IT General Control and Application Control Testing Support: FEMA requires support to plan, scope, assess, test, and report on IT general controls, application controls, system-generated reports, interface controls, and other system-related controls that support financial reporting, operations, compliance, and data integrity. The contractor’s solution should support risk-based A-123 ITGC assessment activities, including control documentation, stakeholder engagement, evidence review, design and operating effectiveness testing, issue identification, risk assessment, system-level reporting, and summary deficiency analysis. See attached file.