Expanded E-government Increase IT Organizational Capability

FY 2005
Fully implement integrated Enterprise Architecture, Capital Planning, and investment review processes.

FY 2004
Complete implementation of the control review cycle.
Implement the evaluation cycle.
Integrate capital planning processes with enterprise architecture processes.

FY 2003
Implement the planning cycle.
Implement the select review cycle.
Initiate efforts for the control review cycle.

FY 2002
Establish IT project accountability.
Establish IT capital planning governance.
Stand up the IT Investment Review Board.
Develop integrated business transactions with contracts and budget.
Define operating procedures for capital planning's four cycles.

Completion

Completed

PMA

SG-8

Improve IT Security/Privacy

FY 2005
Fully integrate security approach, enterprise architecture and capital planning process.

FY 2004
Continue/refine risk assessments on AHRQ's second tier systems.
Implement the business continuity and contingency program plans.
Develop authentication program plan (Note: Moved from FY 2003 due to Government-wide initiative).

FY 2003
Finalize initial risk assessments on AHRQ's mission critical systems.
Implement incident response plans and procedures.
Develop network security plans.
Develop anti-virus program plan.

FY 2002
Establish security and privacy governance.
Complete the second cycle of NIST self assessments.
Complete risk assessments of seven of AHRQ's mission critical systems.

Completed (authentication program plan moved to FY 2004; see note)

Completed

PMA

SG-8

Establish IT Enterprise Architecture

FY 2005
Use enterprise architecture to derive gains in business value and improve performance related to Agency mission.

FY 2004
Refine view of baseline architecture and technical architecture.
Develop the target architecture.
Create the migration plan.
Integrate enterprise architecture processes with capital planning processes.

FY 2003
Continue to carry out business process assessments of key business lines.
Establish enterprise architecture governance.
Develop the baseline architecture.
Develop the technical reference model.
Establish technical standards.
Implement general desktop and network upgrades to reflect the technical architecture.

FY 2002
Stand up the enterprise architecture program office.
Implement the Enterprise Architecture Management System.

Completed

Completed

PMA

SG-8