DOL RFI: Audit Management Information System

Notice ID: OAA-24-00164

The DOL is comprised of several agencies that respond to audit activity.  The contractor shall provide services for enterprise audit management and tracking.  The DOL seeks a cloud-based, interoperable, and modern audit management system consistent with IT modernization goals that will improve accuracy and timeliness of audit activity while providing insights into performance and vulnerabilities.  Under this PWS, the DOL will identify capabilities that support the full audit management lifecycle to include:

• Preparing for audits
• Selecting audit criteria
• Measuring performance level
• Making improvements
• Sustaining improvements

Infrastructure Requirements

• Communicates clearly defined software patch and upgrade schedules to afford proper planning
• Performs testing prior to patch/upgrade installations to production environment to ensure functionality
• Provide the ability to extract all data from off-premise cloud (FedRAMP certification required)
• Ensure compatibility with Windows 10 or higher
• Ensure compatibility with MS Office 365 and above
• Supports load-balancing (i.e. high availability, failover, clustering) to ensure seamless operations
• Must support virtual machines and/or virtual desktop infrastructure (VDI) to provide flexibility for a broad user base
• Must support single user sign-on/PIV cards consistent with federal employee access and credentials
• Must handle slow or latent connections via VPN or remote connections to ensure availability and performance

Security

• Provides full logging of user activity to support agency reporting requirements
• Provides access to logs and activity reports to ensure availability of information for analysis and decision-making
• Must be FIPS 140-02 encryption capable
• PIV access required, must be supported

System Configuration and Centralized Management

• Provides user-friendly, intuitive graphical interface to ensure usability and accessibility for all users
• Must be compliant with revised Section 508 accessibility standards to ensure accessibility, meeting all Section 508 criteria
• Provides the ability to create multiple project templates to ensure new projects include all required steps based on their type, so unique work efforts can follow out-of-the-box or ad hoc workflows
• Provides ability to create templates for auditors/analysts to document work, including designated fields to ensure unique business needs
• Ability to create and assign permissions on user roles such as administrator, supervisor, manager, independent referencer, reviewer, preparer, or combination of roles
• Ability to assign users to different projects with different roles and permissions specific to each project to ensure flexibility …

Read more here.

🔊 Listen to Story