Project Information

Bid Title

Internal Control Program Management System

Issuing Agency

HOMELAND SECURITY, DEPARTMENT OF

Location

District of Columbia

Published Date

Mar 3, 2026

Closing Date

Apr 3, 2026

Government Level

Federal

Status

Closed

Ref. #

PR20156857

Original Source

Join to Access Full Details

Bid Inquiries

Join to Access Full Details

Bid Documents

Join to Access Full Details

Project Description

Follow

Internal Control Program Management System

Active

Contract Opportunity

Notice ID

PR20156857

Related Notice

Department/Ind. Agency

HOMELAND SECURITY, DEPARTMENT OF

Sub-tier

US CUSTOMS AND BORDER PROTECTION

Office

ADMINISTRATION FACILITIES TRAINING CONTRACTING DIVISION

Looking for contract opportunity help?

(opens in new window)

APEX Accelerators are an official government contracting resource for small businesses. Find your local APEX Accelerator (opens in new window) for free government expertise related to contract opportunities.

APEX Accelerators are funded in part through a cooperative agreement with the Department of Defense.

The APEX Accelerators program was formerly known as the Procurement Technical Assistance Program (opens in new window) (PTAP).

General Information

• Contract Opportunity Type: Sources Sought (Original)
• Original Published Date: Mar 03, 2026 07:24 am EST
• Original Response Date: Apr 03, 2026 01:00 pm EDT
• Inactive Policy: 15 days after response date
• Original Inactive Date: Apr 18, 2026
• Initiative:
  • None

Classification

• Original Set Aside:
• Product Service Code: DA10 - IT AND TELECOM - BUSINESS APPLICATION/APPLICATION DEVELOPMENT SOFTWARE AS A SERVICE
• NAICS Code:
  • 541511 - Custom Computer Programming Services
• Place of Performance:
  Washington , DC 20004
  USA

Description

Internal Control Program Management System

Customs and Border Protection (CBP) is looking to acquire, develop, and implement either a Commercial Off-The-Shelf (COTS) or tailored solution to automate the current manual workload of managing large amounts of repetitive control and testing data across an estimated 90+ Microsoft Excel workbooks with around 165 individual excel tabs. Once developed, this tool would facilitate collection of all Office of Management and Budget (OMB) Circular A-123 control data in one central location and populate deliverables for submission to Department of Homeland Security (DHS) Risk Management and Assurance (RM&A), house the deficiency management process, and provide for management reporting. Currently the Audit Oversight and Internal Controls Division utilizes a mix of Microsoft products (Excel, Power BI, PowerApps, etc.) to manage this workload.

1. What is the pricing model for your solution? Are licenses required for all user types?


2. How is the software hosted? If cloud hosted, is it Federal Risk and Authorization Management Program (FEDRAMP) certified?


3. What are the technical requirements for your solution?


4. What options do you have available to ingest and leverage defined templates from an outside source (for example, Department of Homeland Security defines the data elements that must be populated and reported on)? What options are available for exporting information into user defined templates? How easily modifiable are these capabilities should the defined templates change (new fields, remove fields, new risks/control objectives, etc.)?


5. What options for management reporting and dashboarding are available in your solution? Are they easily customizable and/or modifiable?


6. Describe how your solution integrates with Microsoft PowerApps and other Microsoft products (SharePoint, Teams, Outlook).


7. Describe user interface options available.


8. Does your solution facilitate the various phases of an internal control program (walkthrough, Test of Design and Test of Effectiveness test plans, deficiency management, reporting)? If so, please describe capabilities for each phase included.
   
   
   
   • Test of Design (TOD)
   
   
   • Test of Effectiveness (TOE)
   
   
   
   


9. What real-time, in-application help is available on-screen (during a transaction)? Can in-application help be customized, and if so, how?


10. Does your application leverage any artificial intelligence (AI) models available to federal users, specifically to Department of Homeland Security and Customs and Border Protection users? If so, please describe how these capabilities are integrated into your solution.


11. Visually, what options do you offer to modify the format (or layout, structure) of your solution?


12. What maintenance requirements are needed for your solution?


13. Please describe your solution's integration capabilities with SAP ECC, SAP S4/HANA, SAP Business Warehouse and/or SAP Governance, Risk, and Compliance (GRC) Process Control.


14. Does your solution include version control for data housed within? If so, please describe document retention capabilities.


15. What user roles are used to manage your solution, for example, Administrator, Content Manager, Reports Only, etc.? Please describe each role.


16. What training, documentation, and support would you provide to Customs and Border Protection resources who will implement and support the solution?


17. Please describe the support your solution provides for mobile devices. Specifically, indicate which operating systems (for example, Apple iOS, Google Android) and device types (for example, smartphones, tablets) are supported, and whether the solution offers native mobile applications, responsive web interfaces, or other mobile access options.


18. What authentication methods does your solution support (for example, username/password, multi-factor authentication, certificate-based authentication)? Does your solution integrate with Single Sign-On (SSO) platforms? Please describe the Single Sign-On capabilities and any limitations.


19. Does the solution have the ability to ingest control population datasets (for example, manual upload, system interface, data connection, etc.) and determine samples using different methods (random, judgmental, etc.)? If so, please describe the capabilities.


20. Does the system have the ability to generate emails, due outs, and reminders to process owners for Test of Design/Test of Effectiveness Provided By Client (PBC) items to include tracking completion and storing responses/documents? If so, please describe the capabilities.


21. Does the solution have the ability for workflows for the testing of a key control to include both internal (internal control team) and external users (program offices responsible for providing Provided By Client items)? If so, please describe the capabilities.


22. Can the solution automate or perform certain testing plans on behalf of the internal control assessment team? If so, please describe capabilities and provide examples.

Attachments/Links

Contact Information

Contracting Office Address

• 1300 PENNSYLVANIA AVE NW
• WASHINGTON , DC 20229
• USA

Primary Point of Contact

• Dana L. Blake
• Dana.L.Blake@cbp.dhs.gov
• Phone Number N/A
• Fax Number N/A

Secondary Point of Contact

• Mr. Ronie B. Namata
• ronie.b.namata@cbp.dhs.gov
• Phone Number N/A
• Fax Number N/A

History

• Mar 03, 2026 07:24 am ESTSources Sought (Original)

Commodity Codes

• FSC DAutomatic Data Processing and Telecommunication Services

• NAICS 541511Custom Computer Programming Services

Related bids

Mar 4, 2026

[Sources Sought (Updated)] Internal Control Program Management System

* Disclaimer: Government BidHub provides information on bids, RFPs (Requests for Proposals), and RFQs (Requests for Qualifications) solely for convenience and informational purposes. This site is not an official public notice board. For official details, responses, or inquiries, please contact the relevant government agency directly.