OCFO Risk Management and Compliance Division, Internal Control and Compliance Support Services
Inactive on SAM.gov — responses were due 30 Sep 2026 · Unrestricted (full and open) · Federal Emergency Management Agency (FEMA), DHS · Washington, DC · Solicitation 70FA3126I00000007
A newer version of this notice has been posted. SAM.gov republished solicitation 70FA3126I00000007 on 10 September 2026. This page is kept because it is a real record, but the current requirement, dates and attachments are on the latest version. Read the latest version →
What happened next
SAM.gov marked this notice inactive — responses were due 30 September 2026.
No award notice on SAM.gov yet. Not every award is posted there, so this does not mean it went unawarded.
Email me when the award is announced. One email, when SAM.gov posts the award notice. Not every award is posted there; if none appears within six months we'll tell you and stop. No account needed.
The Federal Emergency Management Agency (FEMA), Office of the Chief Financial Officer (OCFO), Financial Management Division (FMD), Risk Management and Compliance (RMC) Branch, is seeking information from qualified contractors capable of providing specialized support services to assist with internal control assessment, compliance monitoring, control documentation, control testing, risk analysis, insurance management controls, data analysis, information technology control testing, and financial management support. The purpose of this effort is to help FEMA maintain and strengthen its internal control and compliance environment in accordance with applicable federal requirements, including Office of Management and Budget (OMB) Circular A-123, the Government Accountability Office (GAO) Standards for Internal Control in the Federal Government, federal financial management requirements, information technology control guidance, Department of Homeland Security (DHS) policy, and FEMA guidance. The contractor shall provide technical, analytical, documentation, reporting, and advisory support to assist FEMA in evaluating control design, testing control operating effectiveness, monitoring compliance activities, identifying risks and control gaps, assessing compliance requirements, and providing management insight. The anticipated scope of support may span FEMA s financial management, disaster assistance, grants, flood insurance, information technology, financial reporting, and mission support processes. Specific support may include internal control assessments, compliance monitoring, control documentation, control testing, risk assessments, data analysis, flood insurance controls, information technology general control and application control testing, and general financial management support. Through these activities, the contractor may identify findings, risks, deficiencies, control gaps, and compliance issues and recommend improvements based on assessment, testing, monitoring, and analysis. Corrective action implementation, remediation execution, and closure support for identified deficiencies are outside the primary scope of this requirement and are expected to be addressed under a separate Corrective Action and Audit Remediation Support Services requirement. This separation is intended to preserve clarity of roles, reduce overlap between assessment and remediation activities, and ensure objectivity in FEMA s internal control and compliance environment.
Version history
SAM.gov has posted 2 notices under solicitation 70FA3126I00000007, oldest first.
FedSift reads the full solicitation package — every attachment — and pre-extracts the compliance matrix, evaluation factors, key risks, win themes and deal-breakers, each with a verbatim quote and the exact PDF page it came from. It scores the opportunity against your company profile, tells you whether to bid as prime or sub, and ranks teaming partners who could close your gaps.
Source: this notice on SAM.gov. FedSift republishes public federal procurement data and is not affiliated with the U.S. Government. Always confirm dates and requirements against SAM.gov before responding.
