Justification (SSS) DCAA Asset Mgmt DCSOR22333_Redacted.pdf

CONTROLLED UNCLASSIFIED INFORMATION; SOURCE SELECTION SENSITIVE – SEE FAR 2.101 & 3.104

DCAA is adapting to changing requirements for IT consolidation under Defense Information Systems Agency (DISA) for 4th-Estate Agencies, but the timeline for this transition has been repeatedly postponed.

Market research was performed to determine if there are other viable solutions in the marketplace that could satisfy DCAA's requirement. Details on this research are provided in DCAA's Market Research Report. The research was conducted by DCAA's Office of Information Technology (OITR) staff contacting the incumbent and three (3) other vendors (ServiceNow, Top Desk, and BMC-Remedy). All four (4) vendors are considered major entities in the IT Service Management marketplace as stated on the Gartner Research website at: Best IT Service Management Platforms Reviews 2023 | Gartner Peer Insights .

DCAA met separately with each vendor and explained their end-state requirements and requested estimates for providing DCAA with a fully functional system. DCAA provided each vendor with the same written specifications of the requirements. DCAA also contacted the incumbent to confirm availability of their product and requested a rough order of magnitude (ROM) for market research purposes. Because Ivanti's system is already in place, DCAA would only require licensing and support to continue its use. The three (3) other vendors DCAA contacted do not sell Ivanti licenses or support; each vendor has their own competing full-scale Information Technology Service Management (ITSM) applications. These other vendors all required substantial start-up costs for the purchase and implementation of their specific application.

Each vendor responded with ROMs as requested and each provided confirmation with the statement that they were providing budgetary estimates and not firm offerings. BMC-Remedy, ServiceNow, and TOPdesk provided subscription/license pricing as well as estimates to provide installation and implementation of their platform. If DCAA procured any of these solutions, the current IT and agency staff would require training for the new asset management platform.

Furthermore, TOPdesk would likely be rated technically unacceptable because they did cannot meet two (2) of DCAA’s mandatory primary requirements (common access card (CAC) authentication and asset management function). TOPdesk does not have a solution for authentication with smartcard CAC certificates rather than passwords. This is mandatory for DCAA’s environment as mandated by the Department of Defense (DoD). TOPdesk stated that they had a previous DoD customer and were unable to accommodate the same requirement. Additionally, TOPdesk is offering an asset management system that does not include discovery (e.g., a way of communicating between the application and the hardware assets). TOPdesk has some configuration management database (CMDB) capability but no native way of populating or updating the entries for the assets.

Implementation of a new “out of the box” product would require the employment of highly skilled development specialists in addition to DCAA in-house staff for a period of approximately four to six months. These technicians would need to be able to assist in installing an out-of-box product on DCAA’s servers and then configuring and customizing it to meet DCAA’s environment. DCAA’s environment is different from the private sector. For example, it would require customization for users to authenticate using their CAC certificates rather than passwords. For this purpose, DCAA would need to pay substantial additional amounts to hire the services of implementation consultants from these vendors. Based on the above data, DCAA’s has determined that it is not in the best interests of the government to procure a new solution at this time given the significantly higher costs and the budget and resource constraints.