NATO Request for Information: IT Service Management Solution for Asset and Configuration Management Database

The NATO Communications and Information Agency (NCIA) is seeking industry input through a Request for Information (RFI) to evaluate potential solutions for an integrated IT Service Management and Asset and Configuration Management system to support Deployable Communications and Information Systems. This RFI, identified as MS-424363-ITSM, is strictly for planning purposes and is not a solicitation for bids or proposals. Responses are due by 12:00 hours CET on 2 June 2026 and must be sent exclusively via email to Estefania Nunez at NCIA. The solution must operate exclusively on-premise with two isolated, classified instances—one for NATO Restricted and another for NATO Secret—ensuring no cross-domain data transfer. All asset tracking must comply with STANAG 2290 for NATO Unique Item Identification, requiring durable labeling and full lifecycle management. The system must support a precise location hierarchy from Theatre to Rack/Position and integrate bidirectionally with Oracle E-Business Suite in the NR domain and BMC Remedy in the NS domain, with a minimum integration reliability of 99%. Compliance with NATO INFOSEC Policy AC/35, NCSB standards, NATOEX/SECAN cryptographic protocols, ISO 27001, ITIL, and GDPR is mandatory. The system must be accreditation-ready from day one and demonstrate prior experience delivering solutions in NATO classified environments, with a formal accreditation history being a non-negotiable requirement for consideration. Asset accuracy must exceed 95%, and the Configuration Management Database must achieve at least 98% completeness within 60 days of implementation. Documentation must be tagged with metadata for classification, version, and applicability, and all physical inventory must be conducted on-site using barcode or QR code scanning tools. Proposals are limited to 15 pages in PDF or Word format and must include evidence of past performance in similar NATO contexts, as well as Rough Order Magnitude cost estimates for implementation and support. The solution must be delivered in a single 12-month period culminating in full operational capability and decommissioning of the existing iCMS system, with no cloud-based or hosted alternatives permitted.