NRC - Financial Statement and FISMA Audits - MRAS

The U.S. Nuclear Regulatory Commission (NRC), through the General Services Administration (GSA), is conducting market research to identify qualified contractors capable of providing independent public accounting services. The NRC's Office of the Inspector General (OIG) is seeking to enhance its oversight functions by ensuring that financial operations and reporting are conducted with integrity, economy, and efficiency. Established as a statutory entity in 1989, the OIG plays a critical role in auditing agency programs and operations, detecting fraud and mismanagement, and keeping both the agency head and Congress informed about potential issues.

The work requested involves comprehensive auditing services for financial statements, information technology systems, security measures, and related audits for both the NRC and the Defense Nuclear Facilities Safety Board (DNFSB). These audits are mandated by various legislative acts including the Chief Financial Officers Act of 1990, Government Management Reform Act of 1994, Accountability of Tax Dollars Act of 2002, Payment Integrity Information Act of 2019 (PIIA), and Federal Information Security Modernization Act of 2014 (FISMA). The contractor must conduct these audits according to Government Auditing Standards (GAS) which include U.S. Generally Accepted Government Auditing Standards (GAGAS), AICPA Statements on Auditing Standards, OMB Bulletins/Circulars, and guidelines from the Financial Audit Manual issued by GAO.

Specifically, annual financial statement audits are required to assess compliance with laws governing financial reporting for federal agencies like NRC. These audits will ensure that financial statements are accurately represented to stakeholders such as Congress and OMB. Additionally, under PIIA requirements, risk assessments must be conducted to identify vulnerabilities in payment processes which may lead to improper payments. Under FISMA regulations, an annual independent assessment is necessary to evaluate information security policies' effectiveness across agency systems.

The objective is to engage an Independent Public Accounting firm licensed as a Certified Public Accountant capable of conducting these rigorous audit processes. The firm will be responsible for rendering opinions on financial statements while evaluating internal controls over financial reporting for compliance with applicable laws. This contract will span a base period with four optional extensions under a fixed-price agreement structure.