OCFO RMC Corrective Action Request for Information

Federal Emergency Management Agency (FEMA)

OCFO Financial Management Division
Corrective Action Implementation and Audit Remediation Support Request for Information (RFI)
October 9, 2026
REQUEST FOR INFORMATION (RFI) SUMMARY: The Department of Homeland Security (DHS), Federal Emergency Management Agency (FEMA), Office of the Chief Financial Officer (OCFO), Financial Management Division, Risk Management and Compliance (RMC) Branch, is conducting market research to identify contractors capable of providing corrective action and audit remediation support services.
The anticipated requirement is focused on corrective action implementation and remediation support after internal control deficiencies, audit findings, risks, or compliance issues have been identified through audits, assessments, monitoring, management reviews, or other oversight activities. Support may include corrective action planning, Mission Action Plan support, Plans of Action and Milestones support, business process and internal control remediation, IT control remediation, remediation documentation, testing and validation of remediation efforts, reporting, stakeholder coordination, and knowledge transfer. Note: Routine internal control assessment, recurring compliance monitoring, baseline control testing, and A-123 testing activities are outside the primary scope of this requirement and may be addressed through a separate Internal Control and Compliance Support Services requirement. This separation is intended to preserve clarity of roles, reduce overlap between assessment and remediation activities, and support appropriate objectivity in FEMA’s internal control and compliance environment.
GENERAL INFORMATION: This RFI is issued solely for information gathering purposes to identify sources capable of supporting FEMA OCFO RMC. The anticipated support will supplement Federal resources with technical expertise to strengthen FEMA’s internal control environment, improve audit readiness, address financial, operational, IT, and compliance risks, and align remediation activities with OMB Circular A-123, GAO Standards for Internal Control in the Federal Government, federal financial management requirements, DHS policy, and FEMA guidance. This RFI is issued solely for market research and acquisition planning under RFO FAR 10.001(c) and (e), as implemented by DHS FAR Class Deviation 25-06, and RFO FAR 15.101(c), as implemented by DHS FAR Class Deviation 26-08. The Government does not currently intend to award a contract on the basis of