Risk Management & Internal Control Services (RMIC) - (Request for Information)

Description: Risk assessment and planning: The Contractor shall DIA in conducting periodic risk assessments across all RMIC domains, identifying key risks key controls, and control owners. The Contractor shall develop draft test plans, test scripts, sampling methodology, and test schedules for Government review and approval. The Contractor shall support maintaining DIA's risk profile and risk register (IAW DIA guidance), documentation for DoD-level enterprise risk profiles, GAO audit recommendation tracking, and top DoD management challenges, as directed. Support to DIA’s risk profile and risk register may include risk identification workshops, developing risk scoring methodologies, coordinating with risk owners, supporting governance forums, preparing executive risk reporting, and conducting risk analysis. ServiceNow IRM is the chosen tool for DIA’s ERM/RMIC program. See attached file.