The IHS CIO shall request and receive documentation from
IHS program offices for their designated IT investments. The CIOs staff shall analyze the material provided to support the business case for the
system and make recommendations to the CIO for action.
| (12) |
The CIO and his/her staff are responsible for reviewing IT-related
documents, OMB Form 300,and OMB Exhibit 53.
|
| H. |
GENERAL POLICY. The IHS is required to conform with the CCA of 1996 to which this policy conforms, and specifically to Section 5 122 of the CCA, Capital Planning and Investment Control.
|
| (1) |
Design of Process. In fulfilling the responsibilities assigned under Section 3506(h) of Title 44, U.S.C., the head of each executive agency shall design and implement in the executive agency a process for maximizing the value and assessing and managing the risks of the IT acquisitions of the executive agency.
|
| (2) |
Content of Process.
The process of an executive agency shall include the
following:
|
| a. |
Provide for the selection of IT investments to be made by the executive agency, the management of such investments, and the evaluation of the results of such investments.
|
| b. |
Be integrated with the processes for making budget, financial, and program management decisions within the executive agency.
|
| c. |
Include minimum criteria to be applied in considering whether to undertake a particular investment in information systems. This includes criteria related to the quantitatively expressed projected net, risk-adjusted return on investment, and specific quantitative and qualitative criteria for comparing and prioritizing alternative information systems investment projects.
|
| d. |
Identify information systems investments that would result in shared benefits or costs for other Federal agencies or State or local governments.
|
| e. |
Identify for a proposed investment quantifiable measurements for determining the net benefits and risks of the investment.
|
| f. |
Provide the means for senior management personnel of the executive agency to obtain timely information regarding the progress of an investment in an information system. This includes a system of milestones for measuring the progress in terms of cost, the capability of the system to meet specified requirements, timeliness, and quality.
|
| (3) |
Annual IT Review. The CCA requires that capital investments related to IT must be reviewed on an annual basis by the IHS CIO. To accomplish this, the
IHS shall establish an ITIRB and an ITIRB process in accordance with this policy. All
IHS expenditures, regardless of the size, complexity, risk, or cost, shall follow the same process defined in Section 8-4.1M, "ITIRB Process." However, depending on the size, complexity, risk, cost and phase of the IT investment, the details of the IT investment review, analysis, and documentation will vary. The highest priority IT investments will he further reviewed by the IHS CIO to ensure CCA compliance and ensure the IHS is effectively managing its IT costs and risks associated with the IHS mission and infrastructure. For investments and expenditures that exceed the criteria below, Department-level reviews shall be required.
|
| I. |
REQUIREMENTS FOR IHS ITIRB REVIEW. All IHS expenditures that meet any of the criteria in Section 8-4.1.M, "The ITIRB Process," shall submit a CPIC Project Proposal (see
Manual Exhibit 8-4-A, "IT Project Proposal Form") to the IHS CIO for review. This proposal is based on the results of documentation from required CPIC planning. The
IHS CIO shall review the proposal, and based on size, complexity, cost and risk factors, the CIO shall determine if the documentation is sufficient or an
IHS ITIRB review is required. Wherever possible, existing documentation shall be used to meet the requirement for providing documentation to the
IHS ITIRB and the HHS ITIRB. In making this assessment, the
IHS CIO may request the respective IHS organization to provide additional documentation. In addition, the IHS CIO shall provide and certify annually an
inventory of all current and future initiatives that contain an IT component.
|
| J. |
CRITERIA FOR IHS ITIRB REVIEW. All IT expenditures meeting either of the criteria below shall be presented to the IHS ITIRB:
|
| (1) |
Crosscutting systems and technology that may affect more than one Operating Division (OPDIV) at any level of resources.
|
| (2) |
Systems that meet the OMB definition of "major information system," which means
an "information system that requires special management attention because of its
importance to an agency mission; its high development, operating or maintenance
costs; or its significant role in the administration of agency programs,
finances, property, or other resources."
The Department CIO or DASIRM retains the discretion to direct that any specific system be brought to the HHS ITIRB.
For further information on HHS CPIC requirements, refer to the "HHS IRM Policy for CPIC," dated January 8,2001, as amended.
|
| K. |
CAPITAL PLANNING AND INVESTMENT CONTROL/ITIRB REQUIREMENTS. The IHS shall establish and manage CPIC processes and ITIRB review structures in a manner consistent with the requirements of this policy Requirements:
|
| (1) |
Compliance with the IHS Enterprise ITA.
|
| (2) |
Coordination of IT investment reviews with IHS budget time lines and documentation requirements.
|
| (3) |
Ensuring that investments adhere to legislative requirements and best practices for security and privacy protection, including privacy impact assessments.
|
| (4) |
Obtaining approval by the IHS ITIRB of investments prior to approval of budgets by the Service and Supply Fund Board.
|
| (5) |
Obtaining IHS ITIRB approval prior to the obligation of funds for development of new IT systems meeting the criteria in Section 8-4.1L(2), "Phase IT' (a), "Apply Screening Criteria."
|
| (6) |
Submission of an OMB Exhibit 53, "Agency IT Investment Portfolio" and any necessary OMB Circular A-11 300, "Capital Asset Plan and Justification" forms for the next available budget cycle submission.
|
| M. |
INFORMATION TECHNOLOGY INVESTMENT REVIEW BOARD PROCESS. The ITIRB process is an integrated approach to managing IT investments that provides for the continuous identification, selection, control, life-cycle management, and evaluation of IT investments. This structured process provides a systematic method for agencies to minimize risks while maximizing the return on IT investments.
The IHS has developed its ITIRB process to become more accountable for the economic and efficient management of IT and to implement a sound and integrated ITA plan. This process is consistent with HHS policies requiring an investment and review process at tbe Department and Agency levels, as well as with relevant legislation such as the CCA and the Government Performance and Results Act. The central goal of the ITIRB is to assess IHS IT investments with regard to the technical soundness of the investment, the consistency of the IT solution with the IHS ITA, and the potential redundancy of the investment with other
IHS efforts.
Investments in IT can have a significant impact on an organizations performance. Well-managed IT investments that are carefully selected and focused on meeting mission needs can propel an organization forward, considerably improving performance while lowering costs. Likewise, poor investments, inadequately justified or with poorly managed costs, risks, and benefits, can hinder an organizations performance.
There are three phases included in the HHS IT investment management process: Selection, Control, and Evaluation. The ITIRB process addresses IT project selection. The goal of the selection phase is to assess and prioritize current and proposed IT initiatives, and to create an optimal portfolio of IT initiatives. Participants in the ITlRB process make selections and prioritize decisions based on a consistent set of decision criteria that compare costs, benefits, risks, potential returns, and impact on the IHS mission. This phase helps ensure that the organization selects IT projects that will best support mission and IT requirements, and identifies and analyzes a projects risks and returns before the expenditure of project funds.
This structured ITIRB process provides a systematic method for IHS to review proposed IT projects in order to make sound business investment decisions. In addition, it will enable IHS to satisfy Departmental capital planning requirements.
The IHS ITIRB process applies to projects that propose changes to existing systems as well as projects that propose totally new systems. All proposed IT projects will pass through four phases during the
IHS ITIRB Project Selection process:
|
|
Phase I - Proposal Submission |
|
Phase II - Proposal Screening |
|
Phase III- Proposal Scoring |
|
Phase IV - Proposal Selection |
| a. |
Submit IT Project Proposal. The normal channel for introducing an IT project into the ITIRB process is the annual Area Budget Work Sessions that typically occur in February/March. During these sessions, all
funding proposals are submitted for initial inclusion in the IHS budget. Ideas for IT projects are forwarded to the DIR where CIO staff will work with the Project Sponsor (the person who takes responsibility for overseeing the development of the IT idea into an IT project) to complete the IT Project Proposal form.
|
| b. |
Interaction. In general, any IT project that interacts with the IHS IT system, directly or indirectly, should be submitted for ITIRB review. An IT project is one that involves any equipment or interconnected system or subsystem of equipment that is used in the automatic acquisition, storage, manipulation, management, movement, control, display, switching, interchange, transmission, or reception of data or information by the IHS whether the equipment is used by the IHS directly or by a contractor under a contract with the
IHS that:
|
| (i) |
requires the use of such equipment, or
|
| (ii) |
requires the use, to a significant extent, of such equipment in the performance of a service or the furnishing of a product.
|
| |
Note: This also includes computers, ancillary equipment, software,
firmware, and similar procedures, services (including support services),
and related resources.
|
| c. |
Roles and Responsibilities. The project sponsor will complete the proposal form. The CIOs office (Le., the DIR) will provide technical assistance to the project sponsor in completing the proposal form.
|
| d. |
Information Requirements for Phase I.
See IT Project Proposal
Form (Manual Exhibit 8-4-A) and instructions in the Appendix.
|
| a. |
Screening Criteria. A member of the CIOS office will review the information provided by the project sponsor on the IT Project Proposal Form (Manual Exhibit 8-4-A). The reviewer will enter the results of the review on the IT Project Proposal Screening Information Form (Manual Exhibit 8-4-B) according to the instructions that come with the form. Screening is based on the initial threshold, or acceptance requirements, listed below. These requirements are based on OMB Memorandum 97-02 (Raines Rules) and HHS guidance. In general, proposed projects are expected to satisfy these requirements to be accepted into the IHS ITIRB process.
The reviewer’s remarks are intended to provide an initial indication of a projects ability to succeed in the ITIRB process. In this way, the project sponsor can get important feedback on the proposed IT project without expending a large amount of resources. Phase II is expected to precede the formal Request for Proposal (RFP) process and the information required in the ITIRB forms will help guide what information is requested from prospective vendors as the RFP is developed.
|
| b. |
Initial Acceptance Requirements. The proposed project
must meet
the following initial requirements:
|
| (i) |
Support a mission or function that needs to be performed by the Federal Government.
|
| (ii) |
Provide a service that must he performed by the IHS because no alternative private-sector or governmental source can do it better or more efficiently.
|
| (iii) |
Support work processes that have been simplified or otherwise redesigned to reduce costs, make maximum use of commercial-off-the-shelf (COTS) technology, and improve effectiveness.
|
| (iv) |
Clearly support the mission and strategic objectives of the IHS.
|
| c. |
Major Proposals. Major proposals require the detailed review of the whole ITIRB process in order to he selected for funding.
|
| d. |
Minor Proposals. Minor proposals do not require the full ITIRB review, may be selected for funding by the
IHS CIO, and are entered into the IHS IT inventory for recordkeeping purposes. The CIO also has the discretion to refer minor proposals to the ITIRB for full review.
|
| e. |
Major vs. Minor Proposal Criteria. Proposals that pass the initial acceptance requirements are also screened by the reviewer to determine if they are major or minor proposals based on the criteria listed below. "Yes" answers to the criteria questions suggest that the proposed project is a major proposal.
|
| (i) |
Do the benefits associated with this project extend throughout the IHS system?
|
| (ii) |
Are the expected costs significantly above $1 million?
|
| (iii) |
Will the proposed project require a significant change to the IHS ITA plan?
|
| f. |
Phase II Objectives. The objectives are to determine which proposals satisfy the initial acceptance requirements and which require a detailed IHS ITIRB review (ix., determine if the project proposal is a major proposal or a minor proposal); and to determine which minor project proposals should be funded.
|
| g. |
Roles and Responsibilities. A representative from the IHS CIOs office is responsible for screening the completed IT project proposal forms to determine if the proposals satisfy the initial acceptance requirements. If the proposal does not, it will be sent back to the project sponsor with comments explaining the reasons why the proposal does not satisfy the requirements. If there is insufficient information for the reviewer to make a recommendation, the proposal will also be sent back to the sponsor. The reviewer will also apply the
screening criteria to the proposal to determine if it is a major or a minor proposal. Major proposals receive ITIRB review and proceed to Phase RI. Minor proposals selected for funding are entered into the IHS IT inventory for recordkeeping purposes. All actions on proposals will be reported to the ITIRB by the CIOs office in a Summary of Activities memo.
|
| h. |
Information Requirements for Phase II. The CIO office reviewer needs a completed IT Project Proposal Form (Manual Exhibit 8-4-A) from the project sponsor in order to perform the screening. The guidance for the screening is in the instructions accompanying the IT Project Proposal Screening Information Form (Manual Exhibit 8-4-B).
|
| a. |
Scoring of IT Funding Proposals. The ITIRB members will score the major IT proposals which have passed Phase II screening. The ITIRB members will receive supporting documentation to enable them to score the IT projects. The supporting documentation consists of all completed forms and analyses associated with the proposals since they entered the ITIRB process.
Project scores will he based on criteria in five areas: support of IHS mission, integration with IHS ITA, financial considerations, implementation risks, and support of
IHS operations. These criteria include those suggested in HHS guidance (risk-related criteria, financial criteria, and mission-related criteria). The sub-criteria in the five areas are based on the 15 ISAC IT goals and objectives and the four IHS strategic objectives.
Phase III relies on Expert ChoiceTM a decision support tool, to
facilitate scoring. As a part of this process, the ITIRB members will participate in rating and weighting these criteria and sub-criteria. They will then rate each proposal against the sub-criteria, and Expert
ChoiceTM will calculate a score for each proposal. The scores are used to compare the diverse projects submitted for funding consideration against common decision criteria. This method facilitates weighing the relative merits of the projects and developing a prioritized list for use in Phase lV.
Phase III cannot proceed until the project sponsor develops detailed, standardized analyses to support the scoring. Draft templates for the analyses are found in the instructions that accompany the Major IT Project Proposal Scoring Documentation Form (Manual Exhibit 8-4-C). Representatives from the IHS CIOs office will provide technical assistance to project sponsors in developing the analyses and filling out the forms.
Once the forms have been completed, they will be sent to the CIOs office for review. The technical information included in the forms may he revised or summarized by CIO office staff so that the information is
understandable for ITIRB members who lack a technical background, The CIOs office will distribute the completed forms to ITIRB members for review prior to an ITRB proposal scoring meeting. The Major IT Project Proposal Scoring Form (Manual Exhibit 8-4-D) is to he filled out by ITRB members prior to the ITIRB meeting to facilitate using the Expert ChoiceTM during the scoring sessions. At the end of the ITIRB
proposal scoring meeting, each project will have been given a total score, which will be used to develop a prioritized list of all IT project proposals.
|
| b. |
Phase III Objective. The objective is to prioritize competing IT projects according to common decision criteria in order to facilitate the selection of projects by the ITIRB in Phase IV.
|
| c. |
Roles and Responsibilities. The project sponsor will develop the detailed analyses according to the directions accompanying the Major IT Project Proposal Scoring Documentation Form (Manual Exhibit 8-4-C). The ITIRB members should complete the Major IT Project Proposal Scoring Form (Manual Exhibit 8-4-D) prior to the scoring session. A representative from the CIOs office will review the completed forms to ensure they have
been filled out correctly and that the technical information is accessible by people who do not have a technical background.
|
| d. |
Information Requirements for Phase III. Analyses to support scoring should be written by the project sponsor so that ITIRB hoard members can readily understand the information. The directions for completing the analyses accompany the Major IT Project Proposal Scoring Documentation Form (Manual Exhibit 8-4-C).
|
| a. |
Selection of IT Project Proposals.
The ITIRB will hold a project selection meeting to select which IT projects to fund after the proposals have
been scored. Selections will be made based on the prioritized list created in Phase III and the availability of
IHS funding. The ITIRB members will discuss the rankings and agree on any changes to the list by consensus. These discussions may be based on the supporting documentation or other global considerations such as congressional or HHS interest. The list of selected projects will be submitted as the
IHS IT budget for use at the IHS National Budget Work Session.
|
| b. |
Phase IV Objective. The objective is to select a set of IT projects to submit for use at the IHS National Budget Work Session.
|
| c. |
Roles and Responsibilities. The ITIRB makes the final selections. The CIO or his representative will facilitate the selection meeting.
|
| d. |
Information Requirements for Phase IV. The requirements include the prioritized list of IT projects from Phase III and supporting documentation for each proposal.
|