SBA - Enterprise Risk Management (ERM) Services - MRAS

The U.S. Small Business Administration (SBA), in collaboration with the General Services Administration (GSA), is conducting market research to enhance its Enterprise Risk Management (ERM) and Internal Controls Division (ICD) capabilities. The SBA's mission is to support Americans in starting, growing, and building resilient businesses. Within the agency, the Office of Performance, Planning, and the Chief Financial Officer (OPPCFO) plays a crucial role in managing resources efficiently and effectively. The Office of Strategic Management and Enterprise Integrity (OSMEI), a part of OPPCFO, focuses on financial management, enterprise risk management, internal controls, and ensuring compliance with laws and regulations.

The SBA seeks to procure ERM Online Subscriptions and Advisory Services aimed at supporting its ERM Program and ICD. This initiative involves providing consulting services to key personnel such as the Chief Risk Officer (CRO), Senior Policy Advisor for ERM, and Director of ICD. Additionally, 50 users will receive online subscription licenses granting access to self-service tools, templates, case studies, best practices insights, project guides, training resources, personalized expert guidance on critical initiatives and decisions.

The scope of work includes facilitating online events tailored to support strategic technology trends decision-making processes. The services will also offer contract review assistance designed to save time while reducing risks associated with enterprise operations. These efforts are intended to drive risk-informed decision-making across SBA's approximately 4,000 employees by enabling them with tools that help manage complex risk landscapes effectively.

Key objectives include identifying emerging risks through new management tools while increasing the impact of enterprise programs via performance improvements diagnostics supported by best practice research advisory teams' guidance; accelerating digital transformation within internal control functions using technology; building next-generation ERM functions leveraging peer organizations' benchmarks alongside comprehensive libraries containing essential execution-supportive tools/templates.