Independent Audit of Office of Human Capital Records - Draft Performance Work Statement

Performance Work Statement (PWS)
Independent Audit of Office of Human Capital Records

1. Scope

The Contractor shall perform an independent, comprehensive audit of Office of Human Capital (OHC) records. The audit shall assess the completeness, accuracy, organization, accessibility, retention, disposition practices, internal controls, and overall management of records within the approved audit scope. The Contractor shall evaluate both electronic and physical records, as applicable, including records maintained in authorized systems, shared repositories, document-management platforms, network locations, and physical storage locations identified by the Government. The Contractor shall provide an objective assessment of OHC’s current records-management environment; identify risks, deficiencies, and potential compliance gaps; and recommend prioritized corrective actions to strengthen records governance, controls, and operational practices. The Contractor shall not make determinations or decisions regarding benefits adjudication, credentialing, vetting, legal or civil investigation, enforcement actions, or other actions affecting an individual’s rights or safety. The Contractor’s work shall be limited to records-management and process-audit functions within the approved scope.

2. Objectives

The objectives of this effort are to:
Establish a reliable inventory of OHC records, repositories, and records-management practices within the approved scope. Assess whether records are complete, accurate, appropriately organized, accessible to authorized personnel, and maintained in accordance with applicable requirements. Evaluate OHC records-management policies, procedures, governance, roles, responsibilities, training, and internal controls. Identify duplicate, missing, misfiled, improperly retained, inaccessible, or otherwise deficient records. Identify records-management risks and prioritize corrective actions. Deliver an actionable remediation roadmap that OHC can use to improve its records-management program.

3. Applicable Documents and Standards

The Contractor shall perform work in accordance with the most current versions of applicable Federal, DHS, Component, and OHC policies, procedures, directives, handbooks, records schedules, privacy requirements, and information-security requirements provided or identified by the Government. Applicable documents may include, as relevant:
Federal records-management requirements and National Archives and Records Administration guidance.