HAM Sam RFI Requirements - 05 Jan 26 - V1.0.xlsx

This is a Requirements document for the DFAS IT Asset Management (ITAM) Hardware Asset Management/Software Asset Management (HAM/SAM) software solution. The Defense Finance and Accounting Service is seeking a Commercial Off-the-Shelf (COTS) product to discover, organize, and integrate DFAS-hosted hardware and software assets into their existing ServiceNow CMDB/Service Catalog environment. The solution must comply with federal security standards including DoDI 8510.01 Risk Management Framework, DISA Security Technical Implementation Guides (STIGs), NIST SP 800-53, and DoD Cloud Security requirements. The product must support DoD personal Identity Verification (PIV) Card, CAC, and Public Key Infrastructure (PKI) security controls with FIPS 140-2 cryptographic compliance and must meet Section 508 accessibility standards for both software applications and web-based interfaces.

The HAM/SAM product must provide automated matching of software and hardware assets to DFAS devices, configurable roles and permissions, automatic tracking of warranty periods, contract information, and hardware lifecycle management. Key functional requirements include automated configuration management of virtual and shared environments, HAM/SAM audit process automation, direct integration into ServiceNow CMDB, integration with industry discovery sources, and automated license tracking for desktop, Azure Virtual Desktop (AVD), and server software. The solution must support software installation request packaging, software versioning and end-of-life tracking, contract management with customizable reporting metrics, and automated software installation/removal reporting. DFAS requires comprehensive training materials and documentation to enable organic sustainment of the software, and the product must support reporting capabilities through Microsoft Power Platform products and allow filtering and mapping of discovery source data based on user requirements.