SB1341-16-RQ-0331_Attachment_2_Brand_Name_Justification_(Ref._16-02997).pdf

Brand Name Justification

Solicitation Number SB1341‐16‐RQ‐0331

The Office of Information Systems Management (OISM) uses Centrify Direct Control Software licenses from Centrify, Inc. to integrate OISM's non‐windows servers into the NIST Enterprise Active Directory (AD)

Domain. Integration with the NIST Enterprise AD Domain allowed for automation of Account Provisioning and management and centralization of Authentication and Authorization for Privileged User Access is required by the Federal Information Security Management Act (FISMA). Since its purchase, it has been and continues to be a critical component of the management and centralization of OISM's non‐Windows systems and continues to meet all the technical requirements for the integration of these systems with the NIST Enterprise AD Domain.

Renewal of the maintenance for existing Centrify Suite Software Licenses is critical. Failure to procure the

Centrify Suite License maintenance would prevent OISM from receiving the most current, updated version in use; and receiving technical support to address problems as they arise. This would result in NIST being out of compliance with federal law regarding IT Security and would leave NIST vulnerable to exploits that are developed against non‐patched Centrify suite Software. This would also result in a significant reduction in the productivity of NIST staff.