HQMC published its FY27 guidance for the Marine Corps Risk Management and Internal Control (RMIC) program in late October 2026. This sets the agenda for internal financial controls, audit readiness, and risk assessments across the enterprise for the coming fiscal year. Some command-level administrative requirements are paused this year as the Corps shifts to a centralized assessment model, but that does not let commanders off the hook for maintaining controls and fixing deficiencies.
Heads up: If you are a commander, director, functional advocate, or process owner, you still own your organization's internal controls even while certain reporting requirements are paused.
Who it affects
This is directed at HQMC offices, commanders, directors, functional advocates, and process owners across the enterprise. If you are a staff officer, G-8 rep, or in a resource management billet, this touches your work. Individual reservists with no financial management or command responsibilities are unlikely to have any action here. IMA Marines filling billets in relevant functional areas should check with their supported command.
What you need to do
For most SMCR and IMA Marines: awareness only. No action required at the individual level.
If you are in a command or process owner role:
- Respond to ETMS-2 taskers when they come. Provide access to personnel, documentation, and systems as directed.
- Ensure any identified control deficiencies have corrective action plans with real milestones, accountable owners, and documentation. Administrative closure alone is not acceptable.
- Prepare for an Enterprise Governance, Risk, and Compliance (eGRC) system transition. P&R RMIC Branch is standing this up in FY27. Increased command-level responsibility for top-down assessments begins in FY28.
- Elevate material risks or delays to leadership. Do not let significant issues sit.
- Watch the RMIC Practitioners Microsoft Teams channel for updates and implementation guidance from P&R RMIC Branch.
Key dates
- Oct 2026 to Jan 2027: Assessment planning and training
- Dec 2026 to Jul 2027: Control walkthroughs and testing
- 30 Jun 2027: Fraud Risk Impact Memorandums due
- Jul 2027: Assessment results and deficiency identification
- Aug to Sep 2027: Corrective action planning and Commandant's Certification Statement support
- 31 Aug 2027: Final FY28 business process narratives and risk and control matrices due
The official version
MARADMIN 536/26 is the primary source. Detailed FY27 requirements, templates, and submission instructions are in the FY27 HQMC Enterprise-Wide RMIC Annual Guidance (referenced as Ref C in the MARADMIN). Contact Thomas Birchall at thomas.birchall@usmc.mil or (703) 614-3598, or LtCol Isaac Baker at (703) 693-9823 with questions.
This is written by a reservist, for reservists. It is not an official publication of HQMC or MARFORRES. Always verify guidance with your command or unit S-1 before acting on any article or summary.