Agency Risk Management & Internal Control Standards (ARMICS) Consulting Services

This solicitation seeks consulting services to develop, assess, and implement the Agency Risk Management & Internal Control Standards (ARMICS) framework for the Virginia Information Technologies Agency. The contractor will provide expertise in risk management, internal control design, compliance assessment, and training to ensure agency-wide adoption of ARMICS best practices. • Conduct a comprehensive risk assessment of agency processes and systems. • Develop and document internal control standards aligned with ARMICS guidelines. • Deliver training workshops and support materials for agency staff. • Perform periodic compliance reviews and recommend remediation actions. • Produce final reports and actionable recommendations for senior leadership.