Clinger Cohen Act

1
Clinger Cohen Act

• Chief Info. Officer position established
• IT Capital Planning and investment review process
• Using performance measures to assess how well IT
  supports programs
• Justifying continuation of systems that deviate
  from cost, performance, or schedule goals

• Capital Planning Includes
• Investment review approval processes.
• Budget reports and investment prioritization.

2
Factors leading up to Clinger Cohen Act

• Significant money being spent on IT
• High failure rate of IT projects
• Proliferation of stove pipe systems

3
NPS Information Management Council

• Regional Information Officers
• Alaska Dan Healy
• Intermountain Dawn Bosh
• Midwest Frank Palombo
• National Capital Mike Mulcare
• Northeast Patti Dienna
• Pacific West Kevin Killeen
• Southeast - Joycine Lowe

• Washington Directorates/Offices Information
  Officers-
• Business Services vacant
• Cultural Resources Lincoln Fairchild
• Comptrollers Office Lisa Engelhardt
• Human Capital Peter Hanes
• Natural Resources Tim Goddard
• Park Planning, Facilities, and Lands Edie Ramey
• Partnerships, Interp and Education, Volunteers,
  and Outdoor Recreation Steve Pittleman
• Visitor and Resource Protection Kathy Clark
• US Park Police Dave Mulholland

4
IT Purchasing Requirements

• If not on DOI Hardware Blanket Purchase Agreement
  (BPA)
• Need a waiver
• Work with regional I.O.
• Greater than 10K
• Need OCIO approval
• Route through regional I.O.
• BPA http//www.doi.gov/ocio/erm/

5
IT Investments (Systems)

• Definition is being developed
• Approval requirements for new ones
• Approval process
• Project Manager requirements
• Ongoing reporting requirements
• Security requirements

6
Approval Requirements for New IT Investments

• Need to prepare 3 documents
• Mission Needs Statement (5 pgs)
• Concept Management Plan (5 pgs)
• Exhibit 300-1 (Business case, 4 pgs)
• Not allowed to expend any funds on the project
  (beyond the above) until approval is received
• New projects are considered in October
  (submission deadline is September)
• Pushing us to think 2 FYs ahead
• Special considerations for smaller projects may
  be possible (consult with regional I.O.)

7
Approval Process for New IT Projects

• Project reviewed by
• Capital Planning Program in the OCIO
• NPS Deputy CIOs
• IMC
• ITIC (if needed)
• NPS Director (if needed)
• DOI CIO/IRB (if needed)

8
Project Management Requirements

• OMB A-11, A-130 and GAO IT Investment Mgt.
• A certified Project Manager (PM) is required when
  an IT Investment is in development/enhancement
  phase
• Associates Certificate in PM (3 classes through
  DOI University) required for non-major IT
  Investments
• Project Mgmt Professional (PMP) required for
  major IT Investments
• PMs for major IT Investments must be assigned
  only to that project

9
Criteria for a Major IT Investment

• Previously reported to OMB as Major
• Costs 5M or more annually or life cycle cost of
  35M or more
• High importance to NPS Mission, DOI, or OMB
• High visibility or high risk or high impact to
  Mission
• Part of e-Gov projects or supports Presidents
  Management Agenda
• Cross cutting across Department or across the
  Federal Govt
• Financial system with a life cycle cost of 500K
  or more
• As designated by NPS Director or CIO

10
Ongoing Reporting Requirements

• Exhibit 300-1s updated annually
• Quarterly status reports (CPIC)
• Mission Needs Statement
• Other reports/documents depending on phase of
  life cycle system is in (examples Cost/Benefit
  plans, Risk Mgt. Plan, PIA, Project Mgt. Plan)

11
Security Requirements

• Work with your Regional IT Security Managers
  (RITSMs) for security on your systems and
  facilities. This may periodically include the
  preparation of special reports or actions related
  to audits.

12
NRPC CA Enclave (Security)

• Certification and Accreditation
• NRPC Web Enclave (where/what)
• Risk Management
• IATO granted Dec. 31st, 2005
• Full Certification due by June 30th.

13
System Owners / System Mgrs.

• Be aware of these titles and responsibilities/expe
  ctations
• System Owner Executive Sponsor ()
• System Manager is the poor soul that must
  complete all the reports and run the ship.
• Risks Inform System Owner.

14
Additional Requirements for IT Investments
(systems)

• Section 508 compliance
• http//www.usdoj.gov/crt/508/508law.html
• http//www.doi.gov/ocio/section508/index.html
• DO 70 Internet and Intranet Publishing
• http//www.nps.gov/policy/DOrders/DOrder70.html
• Privacy Act requirements
• http//www.doi.gov/ocio/privacy/

15
NR Systems