Sources SoughtPosted Jun 18, 2026·Responses due Jun 26, 2026

Request for Information (RFI) � Risk Management and Internal Control (RMIC) Support Services

Department of Defense (all) · VIRGINIA CONTRACTING ACTIVITY

Stage
Early notice (sources sought, presolicitation or special notice)
NAICS
541611
Value
Not stated
Solicitation
HHM402-2X-RMIC
Set-aside
No Set aside used
PSC
Not stated
Place
Washington, DC, USA
Contact
Dale Williams (dale.williams2@dodiis.mil)
Loading your pipeline and notes…
CSV Email

Capture briefs (a one-page, shareable copy of this page) are part of Pro. The CSV here holds the notice, its timeline and past awards.

Where this opportunity stands

Every notice posted under solicitation HHM402-2X-RMIC in this department, oldest first.

Early notice
  • Jun 18, 2026
    Sources Sought
    Open
  • Jun 18, 2026 · this notice
    Sources Sought
  • Aug 5, 2026
    Sources Sought
    Open
  • Aug 5, 2026
    Sources Sought
    Open
Solicitation
None posted
Award
Not yet. Too few past cases at this agency to estimate timing (2 found; 10 needed).

Next steps for this stage

Standard steps for the notice type; not advice about this buyer.

  • Answer the notice: this is when the requirement can still be shaped.
  • Contact the contracting officer named on the notice.
  • Check who won similar work; they are the likely bidders.

What the notice says

Request for Information (RFI) � Risk Management and Internal Control (RMIC) Support Services THIS IS A SOURCES SOUGHT NOTICE, REQUEST FOR INFORMATION (RFI). This is not a Request for Proposal (RFP) or Request for Quote (RFQ). This request for capability information does not constitute an RFP or RFQ and does not commit the Government to contract for any supply or service, whatsoever. Further, the Virginia Contracting Activity (VaCA) is not at this time seeking proposals or quotes and will not accept unsolicited proposals or quotations. Submission of any information in response to this market su… (show all)

rvey is purely voluntary. However, responses received will assist the Government if solicitation is issued in the future. The government assumes no financial responsibility for any costs incurred associated with this request for capability information. Not responding to this sources sought does not preclude participation in any future RFP or RFQ, if any is issued. Potential offerors are responsible for monitoring government websites such as GSA or SAM for any potential opportunities. Responses do not guarantee award nor exclude/include your company in any potential acquisition process. No feedback or evaluations will be provided to companies regarding their submissions. This RFI is being used as a Market Research tool for informational purposes and for preliminary planning purposes to identify potential sources that possess the required experience and expertise to provide the required support. Small and large businesses are encouraged to respond. 1. INTRODUCTION: The Virginia Contracting Activity (VaCA) invites interested contractors to respond to this Request for Information (RFI) for RMIC Support Services in support of the Defense Intelligence Agency (DIA). VaCA seeks information from qualified industry sources capable of providing enterprise-wide Enterprise Risk Management (ERM) and Risk Management Internal Controls (RMIC) support in highly classified environments. This RFI is part of VaCA�s market research efforts to better understand industry capabilities, innovative approaches, and best practices for Federal ERM and RMIC activities in accordance with DoDI 5010.40, OMB Circular A-123, GAO Green Book, GAO Fraud Risk Management (FRM) Framework, and Supply Chain Risk Management (SCRM). Information received may be used to shape acquisition strategy, refine technical requirements, evaluate small business opportunities, and support development of a future solicitation. 2. PURPOSE: VaCA is conducting market research to inform of a potential upcoming acquisition for RMIC Support Services. VaCA expects to award a multi-year Blanket Purchase Agreement (BPA) to one or more sources for this initiative. Attachment 1 is the draft Performance Work Statement (PWS) for the BPA. The PWS may be updated on information gathered from this RFI based on industry review and comment. 3. BACKGROUND: In accordance with DoDI 5010.40, DIA is required to maintain an integrated Enterprise Risk Management (ERM) and Risk Management and Internal Control (RMIC) program. DIA requires support to plan, execute, and document ERM and RMIC activities across all applicable domains, including: Internal Control Over Reporting for Financial Reporting (ICOR-FR) Internal Control Over Reporting for Financial Systems (ICOR-FS) Internal Control Over Reporting for Management Operations (ICOR-O) Non-financial information technology systems ERM FRM, including payment integrity requirements SCRM Please view the attached document for a fill description of the RFI and Draft PWS.

Who won similar work

111 award notices on SAM.gov in the last 24 months. Matched by: Same agency (Department of Defense (all)), same NAICS 541611.

Single-winner award sizes (104): middle half $1.1M to $39.7M, median $5.7M; range $27K to $999.8M.

WinnerAwardsValueLast
BOOZ ALLEN HAMILTON INC · $BAH · $10.7B3$1.0B + 1 sharedSep 30, 2026
Guidehouse Inc.3$840.1MSep 30, 2026
BCG FEDERAL CORP.3$138.5MMay 27, 2026
DELOITTE CONSULTING LLP3$4.5M + 1 sharedFeb 3, 2026
CONCEPT PLUS, LLC2$9.8MMar 10, 2026
MERCER (US) LLC2$8.0MJan 23, 2026
D&G SUPPORT SERVICES LLC2$2.4MSep 17, 2026
Ignite Digital Federal Services, LLC1$999.8MSep 30, 2026
SERCO INC1$977.5MSep 30, 2026
Multiple Awardees Springfield VA USA1$947.0MSep 19, 2025

Value counts single-winner awards. "Shared" awards are multiple-award contracts that list every winner with the same total ceiling; that ceiling is not one company's win, so it is not added in. Revenue next to a ticker is the company's last annual revenue from its 10-K.

Investor context
  • $BAH reported $10.7B revenue in FY2026. The median single-winner award in these 104 past awards, $5.7M, is under 0.1% of that. 10-K

One award's total value against one year of revenue; many awards are paid over several years.

Latest awards

Materiality: one award's value as a share of the winner's revenue over the latest 12 months in its SEC filings (or its last fiscal year, as noted when you point at it). Low under 1%, Medium 1 to 5%, High 5% or more. Many awards are paid over several years, so this overstates a single year's share.

Competitive landscape

For the 8 most frequent past winners above. Lobbying is matched by the company's exact name or exact ticker; agencies are as named on the filings.

  • 1 of these past winners lobbied Defense, Dept of (DOD) or Office of the Secretary of Defense or Joint Chiefs of Staff since 2024 (6 filings)
  • 0 of their lobbyists list a past Defense, Dept of (DOD) or Office of the Secretary of Defense or Joint Chiefs of Staff job
  • $76K from their corporate PACs since 2024 to members of House Committee on Appropriations, House Committee on Armed Services, Senate Committee on Appropriations, Senate Committee on Armed Services
  • 1 foreign-agent (FARA) registrations
See who and the source records with Pro

Policy around it

Bills the past winners named while lobbying this agency's issues, rules from the department, and executive orders that name the agency, last 12 months.

  • 0 bills named on the past winners' lobbying filings
  • 32 rules from the department in the last 12 months
  • 0 executive orders naming the agency in the last 12 months
See who and the source records with Pro

Market

For past winners matched exactly to a listed company. Insider trades are open-market buys and sells (Form 4) in the last 90 days, shown as facts; our own study found insiders do not reliably buy ahead of awards. A sale marked 10b5-1 was made under a trading plan set up in advance.

  • 1 of the past winners are listed companies
  • 0 insider buys and 1 insider sells at them in the last 90 days
See who and the source records with Pro

Sources: SAM.gov notices and award notices; Senate LDA lobbying filings; FEC filings; FARA; Federal Register; congress.gov; SEC Form 4. Every row above links to its record.

Companies are matched to tickers by exact name only. A company we could not match shows no market rows; that is a miss, not a finding.