2008_09_23 GAO ITIM Presentation to CPIC...

GAO’s Approach to Assessing an Organization’s Investment Maturity: : 

GAO’s Approach to Assessing an Organization’s Investment Maturity: September 23, 2007

Slide 2: 

2 Best Practices CCA FISMA E-Gov PRA OMB Guidance EA SA IS IM HC Introduction

Federal Agencies’ Perspectives : 

3 Federal Agencies’ Perspectives

What is the ITIM? : 

4 What is the ITIM? Information Technology Investment Management (ITIM) Framework Five stage maturity model Written for use in all agencies with appropriate interpretation Addresses process maturity for IT investment management Broadly generalizes investment decision making Technology/implementation neutral Choose your own implementation strategy

How is it used? : 

5 How is it used? GAO guidance for conducting assessments Agency use for conducting self-assessments Static assessment of maturity Measure progress over time Provide framework for understanding relationship among processes Implement using techniques that work for specific agency Being used by several agencies

IT Investment Management Framework: : 

6 IT Investment Management Framework:

IT Investment Management Framework: : 

7 IT Investment Management Framework:

ITIM’s Structure : 

8 ITIM’s Structure Maturity Stage Ex. Stage 2: Building the Investment Foundation Critical Process Ex. Selecting an Investment Key Practices Organizational Commitments (e.g. senior management sponsorship and policies and procedures) Prerequisites (e.g. resources, structures and training) Activities (e.g. performing and tracking the work and taking corrective actions)

Slide 9: 

9 Findings: Lack policies and procedures for developing criteria for selecting and reselecting investments and managing the oversight of IT projects Lack mature processes for managing IT investments as a portfolio Post-implementation reviews not being performed Executive Boards are not directly involved in management and oversight General Findings

Slide 10: 

10 In January 2004, we reported5 on mixed results of federal agencies’ use of IT investment management practices. Findings: Although most of the agencies had IT investment boards responsible for defining and implementing the agencies’ IT investment processes, none had fully implemented practices for monitoring the progress of its investments. Recommendations: GAO made over 200 recommendations to the 26 agencies. These recommendations addressed issues such as developing policies and procedures, improving processes for effective oversight, and requiring postimplementation reviews to be completed. Results: Over 80% percent of these recommendations have been fully addressed and others are still being actively addressed. Information Technology Management: Governmentwide Strategic Planning, Performance Measurement, and Investment Management Can Be Further Improved, GAO-04-49 (Jan. 12, 2004) Governmentwide Review:

ITIM Issues : 

11 ITIM Issues Issues with Flexibility Interpretation Integration with Other Guidance Governance Perspective Static Assessment Relationship with Other Processes

Questions ? : 

12 Questions ? Contact: Tomas Ramirez, Senior IT Analyst, ramirezt@gao.gov