Integic Corporation

1
Clinger-Cohen Act Compliance Presented to The
Patuxent Partnership
KATHY L. STEELE DEPUTY CHIEF INFORMATION OFFICER
(DCIO) 301-342-4799
2
BACK ROUND

• Formally titled the Information Technology
  Management Reform Act (ITMRA), the Clinger Cohen
  Act (CCA) of 1996, Public Law 104-106, was
  intended to resolve
• Insufficient attention to (a) the way business
  processes are conducted, and (b) opportunities to
  improve these processes before investing in the
  Information Technology that supports them
• The Clinger-Cohen Act provides
• The statutory foundation of correcting the
  deficiencies described above
• A way to measure IT mission performance
• Compliance with Federal/DoD/DON policies (i.e.
  Security)
• Established the position of Chief Information
  Officer whose job is critical to ensuring that
  the mandates of the Act are implemented

3
PURPOSE OF CCA

• Mandates of the Act Include Insuring IT
  investments
• Support core mission functions
• Are consistent with the Agencys architecture
• Reflect a portfolio management approach where
  decisions on whether to invest in IT are based on
  potential return
• Reduce risk and enhance manageability by
  discouraging grand information system projects,
  and encouraging incremental, phased approaches

4
CCA HISTORY

• Act Implemented in 1996 Focus was on Business
  Related IT Systems
• No Formal CCA Process until the release of the
  DoD Instruction, Oct. 2003, did not include IT in
  Weapon Systems
• Office of the Secretary of Defense (OSD) released
  a Memo in March 2000, CCA compliance is required
  for all programs that contain Information
  Technology (IT), including IT in weapons and
  weapons system programs
• Information Technology Definition
• Any equipment, or interconnected system or
  subsystem of equipment, that is used in the
  automatic acquisition, storage, manipulation,
  management, movement, control, display,
  switching, interchange, transmission, or
  reception of data or information.
• The term "IT" includes computers, ancillary
  equipment, software, firmware and similar
  procedures, services (including support
  services), and related resources. The term "IT"
  also includes National Security Systems (NSS).
  It does not include any equipment that is
  acquired by a Federal contractor incidental to a
  Federal contract.
• Source Clinger-Cohen Act

5
CCA IMPACTS

• Cannot achieve Milestone until CCA Compliant
• Cannot award contracts until CCA compliant and
  have an Approved Information Assurance Strategy
• Cannot expend funds until registered with the DoD
  CIO IT Registration Database

6
CCA COMPLIANCE TABLE
7
CCA PROCESS

• Clinger-Cohen Confirmation Process
• ACAT ID, IC or II
• PM submits CCA table to NAVAIR 7.2D, Kathy
  Steele.
• Ms. Steele coordinates CIO assessments,
  concurrence, NAVAIR CIO endorsement
• Package is forward to DASN Space (C4I) and DON
  CIO for approval.
• ACAT III and IV
• PM submits CCA table to NAVAIR 7.2D, Kathy Steele
• Ms. Steele coordinates CIO assessments and
  concurrence
• Ms. Steele coordinates NAVAIR CIO approval

8
Outcome from Meetings with DON CIO and DASN
Space C4I

• Whats Important
• Security
• Performance Measures
• GIG and Architecture Compliance
• Interoperability
• Re-design the process Just dont automate
  current process
• Define how this directly supports the agencies
  mission

9
PROGRAM IMPACTS

• Resources/Time
• CCA requirements are not budgeted so resources
  are needed to develop CCA and IA Strategy
• Corporate Operations are not funded to accomplish
  CCA
• Time consuming and labor intensive process
  (possible delays)
• Mandated requirement for PMs
• Lack of Awareness
• Programs are not submitting packages in the
  requested timeframe for proper review
• Frustration because CCA is now part of every
  weapon system program

10
ENVIRNOMENT

• Numerous NAVAIR Programs
• 160 ACAT Programs
• 85 AAPs Programs
• 25 Non-ACAT Programs
• 100 AIS Programs
• Others Programs ?
• Thousand of Contract Awards
• Type of Programs
• F-18 AESA Radar
• MH-60S
• V-22
• Tactical Tomahawk
• Contract Awards
• Anticipate large volume of contract awards
  totaling an estimated 15B from May 03 to the end
  of the year
• Estimated 95 of the awards contain IT

Estimated 1000 2000 Systems will be impacted
11
PROACTIVE INITIATIVES

• Website Developed (https//cio.navair.navy.mil/cli
  ngercohen)
• CCA Survival Guide
• NAVAIR Interim Implementation Policy and Guidance
  for CCA Memo signed out by Ms. Keen,NAVAIR CIO,
  February 2003
• Briefings throughout the NAVAIR Community
• Tester Articles
• Attending the Programs Acquisition Review Board
  Meetings
• Training
• CCA Center of Excellence
• CCA Pilot Project

12
CCA PILOT PROJECT PURPOSE

• Purpose Streamline, automate, use digital
  signatures and reduce CCA approval time
• Scope
• Integration of the following Technologies
• Electronic Workflow
• Document Management
• Collaboration
• Records Management
• Digital Signature Capability
• Will integrate with NAVAIR SIGMA ERP Program for
  end to end processing
• Operate in ERP using NMCI infrastructure, can
  also operate outside of ERP
• Digital Signatures using PKI CAC
• Operates on Corporate Portal/NMCI

13
PROBLEMS AND SOLUTIONS

• PROBLEM
• Documentation Scattered
• - Multiple storage areas or none at all
• - No Central Acquisition Repository
• 2. Milestone Contract Award Delays (Re-Active
  Mode)
• Unaware of upcoming Milestones or upcoming
  Contract Awards
• 3. No Standardized Procedures
• Documents, Approvals, Processes
• 4. Manually Routing of CCA Packages
• Faxing, E-mails, Phone Calls, Meetings
• 5. No Collaboration
• E-mail and Point to Point only

• CCA PILOT SOLUTION
• Central Acquisition Repository
• Re-use of current Acquisition Documentation
• Central Repository within ERP
• Integrates with ERP Procurement functionality and
  ERP Work Breakdown Structure
• - Know milestones
• - Know contract award dates
• 3. Automated Process
• Standardized online documentation and workflow
  for electronic approvals
• 4. Electronic Workflow
• Ad Hoc capabilities
• Intelligent Agents
• 5. Real-Time Online Collaboration
• History of collaboration record
• Information shared with all

14
SOFTWARE TECHNOLOGY FOR CLINGER-COHEN COMPLIANCE
PILOT

• ePower Document Management Workflow
  Application - NAVAIR enterprise license
• SAP Software ERP Application Software
  NAVAIR/DOD enterprise license
• Oracle Database backend for ERP - NAVAIR/DOD
  enterprise license
• TRIM Records Management - NMCI gold disk
• Approve IT Digital Signature - Procured 50
  licenses for pilot possible candidate for
  enterprise licensing

15
(No Transcript)
16
SCHEDULE OF CCA PROJECT

• Pilot
• Implemented Dec 03 for PEO (A), EA-6B Program
• NAVAIR wide implementation Feb/Mar 04
• Federal/DoD/DON Agencies requested Program

17
CCA CENTER OF EXCELLENCE (COE)

• Established center of excellence to provide
  expertise to programs
• One stop shop for CCA Requirements and
  Information Assurance Requirements
• Center is staffed with an expert knowledge base
  for CCA, IA, and other related IT documentation
• Single POC - Liz Medved, 301-342-7412
• COE is available to develop, review and
  coordinate CCA packages
• CCA Center of Excellence operates on a fee for
  service basis

18
QUESTIONS AND ANSWERS
Kathy Steele e-mail kathy.steele_at_navy.mil Liz
Medved e-mail elizabeth.medved_at_navy.mil
References NAVAIR CCA Website
https//cio.navair.navy.mil/IRM/CCA/cca.htm DON
Website http//www.doncio.navy.mil/