1 / 10

IT Management at NSF

IT Management at NSF. George O. Strawn NSF CIO. Outline. GAO Study of Agency IT Management GAO Recommendations to NSF BAH Draft Recommendations to NSF. Statutory Framework for IT Mgmt.

chick
Download Presentation

IT Management at NSF

An Image/Link below is provided (as is) to download presentation Download Policy: Content on the Website is provided to you AS IS for your information and personal use and may not be sold / licensed / shared on other websites without getting consent from its author. Content is provided to you AS IS for your information and personal use only. Download presentation by click this link. While downloading, if for some reason you are not able to download a presentation, the publisher may have deleted the file from their server. During download, if you can't get a presentation, the file might be deleted by the publisher.

E N D

Presentation Transcript

  1. IT Management at NSF George O. Strawn NSF CIO

  2. Outline • GAO Study of Agency IT Management • GAO Recommendations to NSF • BAH Draft Recommendations to NSF

  3. Statutory Framework for IT Mgmt • Paperwork Reduction Act of 1995Clinger-Cohen Act of 1996E-Government Act of 2002FISMA Act of 2002Exec Order 13011, Fed ITExec Order 13103, Software Piracy • GAO identified 30 IT management practices and reviewed 26 agencies for compliance

  4. GAO Study of Agency IT Management • The title says it all: “Government-wide Strategic Planning, Performance Measurement (SP&PM), and Investment Management (IM) Can Be Further Improved” • 46% of SP&PM practices are in place, 41% are partially in place, and 7% are not in place • 44% of IM practices are in place, 37% are partially in place, and 17% are not in place

  5. SP&PM Recommendations to NSF • Document IT strategic mgmt processes • Include IT security requirements in annual performance plan • Implement a process for assigning roles and responsibilities for achieving IT goals • Develop performance measures for controls to prevent software piracy • Develop mechanism for benchmarking IT management processes

  6. IM Recommendations to NSF • Develop an IT management investment guide (IT IM vs other plans and processes; IT capital planning and invest control) • Implement a structured IT selection process • Involve the “IT investment management board” in controlling and evaluating IT investments • Define and document the elements of post-implementation reviews

  7. IT Management Strategy IT Vision Technology Forecast IT Governance Frmwrk Long Term Imple. Plan Sustained Operations Plan IT Vision & Strategy IT Mgmt Structures Annotated LT plan EMO Business Cases CPIC Data Quality Assurance EA Version 2.0 Enterprise Arch. ConOps* Detailed Imple. Plan Performance Disaster Recovery* EMO Corp. Dir. SIA NGGMS * Already established Source: Business Analysis Technical Proposal & Statement of Work

  8. IT Governance Framework Mgmt. Structures CPIC Enterprise Arch. Performance Committees IT Capital Planning Baseline (As is) Performance Meas. Working groups Investment Management Target (To Be) Reporting NSF Personnel Business Cases Implementation Plan Schedules Investment Calendar Standards Mgmt. Change Control IT Risk Management Technology SDLC Network Data Security Shaded components are addressed in the DRAFT NSF TT Governance Framework v0.51 1/16/04.doc. Non-shaded areas will be addressed in the final document v1.0 3/31/04 Source: Business Analysis Technical Proposal & Statement of Work

  9. The CIO Advisory Committee (CIOAC) could become an IT Management Board as envisioned by GAO SMIG WAG CIMG CIOAC KMAT SWG E-Bit

  10. Possible CIOAC sub-teams and functions • Capital Planning Investment Control • coordinate IT capital investments made by NSF • Enterprise Architecture • updating and maintaining EA • managing the adoption, modification and retirement of standards in : Technology, Data, Network and Security • address new projects, updates to existing systems and retirement of legacy systems • Performance & Risk management • helps to control risks for major IT investments through and Identify Assess, Prioritize & Maintain procedure NB: The CIOAC, if expanded as described here, would probably take the place of the SASB

More Related