Identity Access Management - 2010

1 OMB Exhibit 300 (Planning/Acquisition) Redaction - 2010(Form) Identity Access Management -2010(Item)PrimaveraProSightPA RT I - APART I: SUMMARY INFORMATION AND JUSTIFICATIONIn Part I, complete Sections A. B, C, and D for all capital assets (IT and non-IT). Complete Sections E and F for IT capital Text Limitations - SHORT ANSWER(250 Characters), MEDIUM ANSWER(500 Characters) and LONG ANSWER(2500 Characters)Section A: Overview (All Capital Assets) ) Date of Submission (mm/dd/yyyy)Dec 2, ) Agency029 - Department of Veterans ) Bureau00 - Agency Wide ) Name of this Investment:(SHORT ANSWER) Identity Access ) Unique Project(Investment) Identifier: Update the UPI using the Exhibit 53 ) What kind of investment will this be in FY2010? (Please NOTE: Investments moving to O&M in FY2010, with Planning/Acquisition activities prior toFY2010 should not select O&M. These investments should indicate their current status.

2 What was the first budget year this investment was submitted to OMB? ) Provide a brief summary and justification for this investment, including a brief description of how this closes in part or in whole an identified agencyperformance gap: (LONG ANSWER)This Exhibit reflects Initial Concept and Strategic Planning. The Identity and Access Management (IAM) Portfolio that currently containsthe agency HSPD-12 and E-Authentication efforts is being expanded with ten new strategic programs. These additional programs willsupport a full enterprise level approach to managing all persons of interest to the VA, both internal and external, and their electronicaccess to our systems and services. The new efforts will integrate with existing efforts to provide enterprise level consumable services,remediate security weaknesses, and reduce the burden of Identity and Access Management procedures and best practices on allapplications used by the VA throughout the enterprise.

3 The new efforts include Access Management , Compliance Auditing and Reporting, Identity Life Cycle Management , Identity Proofing, Provisioning, Security Framework, Credential Service Provider, Single-Sign-on, e-Signature and PK Enablement. The implementation of these 10 additional services will improve VA ability for interoperability and datasharing with other federal agencies, improved data quality and reliability, while at the same time improving the accuracy and security ofelectronic transactions and data sharing. The goal is to correctly identify a person of interest and then provide the right information tothe right consumers of that information. Identity and Access Management is a foundational required for IT automation and the 21stcentury, ensuring accurate and timely Access to ) Did the Agency s Executive/Investment Committee approve this request? ) If yes, what was the date of this approval?

4 Sep 23, ) Did the Project Manager review this Exhibit? ) Contact information of Program/Project Manager?Project Managers Names (SHORT ANSWER)PM PhoneE-mail (SHORT ANSWER)Primary in-houseCynthia L. What is the current FAC-P/PM (for civilian agencies) or DAWIA (for defense agencies) certification level of the program/project manager? ) When was the Program/Project Manager Assigned?Apr 27, ) What date did the Program/Project Manager receive the FACP/PM certification? If the certification has not been issued, what is the anticipated datefor certification?Nov 15, ) Has the agency developed and/or promoted cost effective, energy-efficient and environmentally sustainable techniques or practices for this ) Will this investment include electronic assets (including computers)? ) Is this investment for construction or retrofit of a federal building or facility? (Answer applicable to non-IT assets only) ) If yes, is an ESPC or UESC being used to help fund this investment?

5 If yes, will this investment meet sustainable design principles? ) If yes, is it designed to be 30% more energy efficient than relevant code? (Answer applicable to non-IT assets only) ) Does this investment directly support one of the PMA initiatives? ) If yes, check all that apply:PMA Initiatives for XML SubmissionPMA Initiatives- Human CapitalYesBudget Performance Integration- Budget Performance Integration- Financial PerformanceYesExpanded E-Government- Expanded E-GovernmentYesCompetitive Sourcing- Competitive Sourcing- Faith Based and Community- Real Property Asset Management - Eliminating Improper Payments- Privatization of Military Housing- Research & Development Investment Criteria- Housing & Urban Development Management & Performance- Broadening Health Insurance Coverage through State Initiatives- Right Sized Overseas PresenceYesCoordination of VA and DoD Programs and Systems- Coordination of VA & DoD Programs and ) Briefly and specifically describe for each selected how this asset directly supports the identified initiative(s)?

6 ( If E-Gov is selected, is it anapproved shared service provider or the managing partner?)(MEDIUM ANSWER)The IAM portfolio supports the following PMAs: 2. Budget Performance Integration - Use of shared equipment between IAM Programs toeliminate multiple hardware procurements. 3. Expanded E-Gov - Supports e-Authentication. 4. Competitive Sourcing competitivelyawarded contracts for software development and services. 5. Coordination of VA and DOD Programs - transitioning andsharing/unification of Electronic Records between DOD and VA ) Does this investment support a program assessed using the Program Assessment Rating Tool (PART)? (For more information about the PART, ) ) If "yes," does this investment address a weakness found during a PART review? ) If "yes," what is the name of the PARTed program? (SHORT ANSWER) ) If "yes," what rating did the PART receive? ) Is this investment information technology?

7 (See section for definition) ) What is the level of the IT Project? (per CIO Council PM Guidance)Level ) What project Management qualifications does the Project Manager have? (per CIO Council PM Guidance)QualificationStatusQualificatio n Status for XML SubmissionDescription1(1) Project manager has been validated asqualified for this investment(1) - Project manager has been validated as qualified forthis investment.(2) - Project manager qualification is under review forthis investment.(3) - Project manager assigned to investment, but doesnot meet requirements.(4) - Project manager assigned but qualification statusreview has not yet started.(5) - No Project manager has yet been assigned to ) Is this investment or any project(s) within this investment identified as high risk on the Q4-FY 2008 agency high risk report (per OMB MemorandumM-05-23) ) Is this project (investment) a Financial Management System?

8 (see section for definition) ) If so, does this project (investment) address a FFMIA (Federal Financial Managers Integrity Act) compliance area? ) If yes, which compliance area? ) If no, what does it address? (MEDIUM ANSWER)The Identity & Access Management (IAM) Portfolio will provide consumable services that will reduce the burden of Identity and accessmanagement procedures and best practices on all applications used by the enterprise internally and : Currently, there is no standardized approach to providing identification, authentication and authorization enterprise-wide,which impacts customer confidence and increases ) If yes, please identify the system name(s) and system acronym(s) as reported in the most recent financial systems inventory update required byCircular A 11 section 52 (LONG ANSWER) ) What is the percentage breakout for the total FY2010 funding request for the following?

9 (This should total 100%)Percentage of Total Investment% Hardware% Software% Services% ) If this project produces information dissemination products for the public, are these products published to the Internet in conformance with OMBM emorandum 05-04 and included in your agency inventory, schedules and priorities? ) Contact information of individual responsible for privacy related questions:Contact Name: (SHORT ANSWER)Dennis StewartPhone Number:202-461-7456 Title: (SHORT ANSWER)IT SpecialistE-mail: (SHORT Are the records produced by this investment appropriately scheduled with the National Archives and Records Administration s approval? ) Does this investment directly support one of the GAO High Risk Areas?NoPART I - BPART I: SUMMARY INFORMATION AND JUSTIFICATIONIn Part I, complete Sections A. B, C, and D for all capital assets (IT and non-IT). Complete Sections E and F for IT capital Text Limitations - SHORT ANSWER(250 Characters), MEDIUM ANSWER(500 Characters) and LONG ANSWER(2500 Characters)Section B: Summary of Funding (All Capital Assets) ) FILL IN TABLE IN CURRENT VALUES (in millions)(Estimates for BY+1 and beyond are for planning purposes only and do not represent budget decisions)Provide the total estimated life-cycle cost for this investment by completing the following table.

10 All amounts represent budget authority in millions, and arerounded to three decimal places. Federal personnel costs should be included only in the row designated Government FTE Cost, and should be EXCLUDED from the amounts shown for Planning, Full Acquisition, and Operation/Maintenance. The total estimated annual cost of the investment is the sum ofcosts for Planning, Full Acquisition, and Operation/Maintenance. For Federal buildings and facilities, life-cycle costs should include long term energy,environmental, decommissioning, and/or restoration costs. The costs associated with the entire life-cycle of the investment should be included in this of FundsPY-1 and EarlierPY 2008CY 2009BY 2010 Planning & Maintenance , All Stages (Non-FTE) FTE FTE Numbers00027 Total (FTE and Non-FTE) FTE Costs SHOULD NOT be INCLUDED as part of the TOTAL, All Stages Resources : 1) For the cross-agency investments, this table should include all funding (both managing partner and partner agencies).