VA Software Asset Management: Adherence to Leading Management Practices Needed to Achieve Intended Outcomes

Overview

The GAO found that the Department of Veterans Affairs (VA) has not fully implemented selected leading planning and management practices for its enterprise software asset management (eSAM) program and its software license inventory project. eSAM is intended to centralize how VA tracks and reports software license data across the department, but GAO rated several eSAM practice areas as minimally or not implemented and found similar shortfalls for the inventory project. GAO also noted oversight gaps tied in part to turnover in VA’s IT management organization, including the absence of a permanent CIO since January 2025. Until VA implements the selected practices and project controls, the department is at risk of not achieving departmentwide software asset management and of missing opportunities for significant cost savings from consolidated license data. Contractors who sell software, license management services, or implementation/support services should act now to align offerings, prepare capture materials, and monitor for follow-on VA actions and solicitations.

Immediate Actions (This Week)

• [ ] Review your current contracts and proposals that involve VA software purchases or license management to identify where centralized reporting or inventory consolidation might affect delivery or pricing.
• [ ] Prepare a one-page capability statement focused on software asset management (inventorying, licensing optimization, centralized reporting) tailored to VA audiences.
• [ ] Monitor official VA and GAO channels for follow-on guidance, corrective plans, or solicitations related to eSAM and the software license inventory (Monitor for the official solicitation or VA implementation guidance).

Short-Term Actions (30 Days)

• [ ] Map your offerings to the GAO-identified gaps (governance, stakeholder engagement, lifecycle planning, change management, software license management) and document concrete service or product responses for each gap.
• [ ] Develop an outreach plan to VA stakeholders (program offices, IT management organization) to position your firm as a partner for inventory, governance, or oversight support once VA issues procurement actions.

Long-Term Actions (90+ Days)

• [ ] Build standardized deliverables and templates (project governance plan, risk register with planned responses, stakeholder engagement plan, lifecycle management plan, software license inventory schema) you can rapidly adapt for VA solicitations.
• [ ] Maintain readiness to respond to solicitations or tasking by keeping updated past-performance summaries, personnel resumes, and compliance evidence aligned to centralized software inventory and license-management work.

Compliance Checklist

Compliance scope TBD — re-evaluate when official guidance is published. Meanwhile:

• [ ] Ensure you can produce audit-ready license data exports and reconciliation reports that support centralized reporting.
• [ ] Prepare documented risk registers and mitigation plans for software inventory projects that can be shared in proposals or SOWs.

Resources

• VA main site and procurement pages: https://www.va.gov
• GAO report citation for reference: GAO-26-108641 (use to source specifics when drafting capture materials)

Related reading:

• Winning Federal Contracts Guide (/insights/winning-federal-contracts)
• CMMC (Cybersecurity Maturity Model Certification) Compliance Guide (/insights/cmmc-compliance-guide)
• CUI (Controlled Unclassified Information)-Safe CRM Guide (/insights/cui-safe-crm-guide)

How Cabrillo Club Automates This

Cabrillo Signals War Room — Already detected this event and delivered this briefing within minutes. War Room continuously monitors federal reporting (including GAO findings), agency publications, and policy shifts so your capture team gets immediate notice when oversight gaps or program shortfalls like VA’s eSAM appear. It flags the event for your portfolio and provides the originating documentation so you can cite GAO-26-108641 directly in capture materials.

Cabrillo Signals Match Engine — Automatically rescales your opportunity pipeline when events like this change the landscape. The Match Engine will rescore opportunities that involve VA or software asset management, boosting visibility on solicitations where your software inventory, license-management, or governance services are a strong fit. Use the updated match scores to prioritize outreach and proposal effort allocation.

Cabrillo Signals Intelligence Hub — Tracks affected agencies and related opportunity signals. Configure a saved search for VA software asset management, eSAM-related terms, and GAO report citations so you receive alerts when VA documents, solicitations, or follow-on actions appear on public systems. The Intelligence Hub centralizes the evidence pack (GAO find, program status, stakeholder list) for rapid proposal build.

Proposal Studio (Proposal OS) — Generates compliance matrices, reuseable technical approaches, and first-draft responses tailored to VA needs. Proposal Studio pulls your past performance and the capability statements you prepared and creates a draft SOW/technical approach that addresses GAO-identified gaps (governance, risk registers, stakeholder engagement). The bid/no-bid engine factors the Signals War Room alert and Match Engine score into the recommended capture decision.

Proposal Studio Workflow Tracker — Triggers a 9-gate capture workflow when the Intelligence Hub flags a VA software asset management opportunity. The Workflow Tracker routes the required compliance and contracts reviews, collects audit-ready license management documentation, and assembles the proposal package with governance artifacts and risk response plans. It keeps an auditable trail you can use in post-submission briefings.

Next step: log into your Cabrillo Club dashboard, review the War Room briefing on GAO-26-108641, and enable the Intelligence Hub saved search for VA eSAM tracking to start converting this alert into prioritized capture activity.