40 U.S.C. § 11302 - Capital planning and investment control

• Cite as: 40 U.S.C. § 11302

(a) FEDERAL INFORMATION TECHNOLOGY.-The Director of the Office of Management and Budget shall perform the responsibilities set forth in this section in fulfilling the responsibilities under section 3504(h) of title 44.

(b) USE OF INFORMATION TECHNOLOGY IN FEDERAL PROGRAMS.-The Director shall promote and improve the acquisition, use, security, and disposal of information technology by the Federal Government to improve the productivity, efficiency, and effectiveness of federal programs, including through dissemination of public information and the reduction of information collection burdens on the public.

(c) USE OF BUDGET PROCESS.-

(1) DEFINITIONS.-In this subsection:

(A) The term "covered agency" means an agency listed in section 901(b)(1) or 901(b)(2) of title 31.

(B) The term "major information technology investment" means an investment within a covered agency information technology investment portfolio that is designated by the covered agency as major, in accordance with capital planning guidance issued by the Director.

(C) The term "national security system" has the meaning provided in section 3542 of title 44.¹

(2) ANALYZING, TRACKING, AND EVALUATING CAPITAL INVESTMENTS.-As part of the budget process, the Director shall develop a process for analyzing, tracking, and evaluating the risks, including information security risks, and results of all major capital investments made by an executive agency for information systems. The process shall cover the life of each system and shall include explicit criteria for analyzing the projected and actual costs, benefits, and risks, including information security risks, associated with the investments.

(3) PUBLIC AVAILABILITY.-

(A) IN GENERAL.-The Director shall make available to the public a list of each major information technology investment, without regard to whether the investments are for new information technology acquisitions or for operations and maintenance of existing information technology, including data on cost, schedule, and performance.

(B) AGENCY INFORMATION.-

(i) The Director shall issue guidance to each covered agency for reporting of data required by subparagraph (A) that provides a standardized data template that can be incorporated into existing, required data reporting formats and processes. Such guidance shall integrate the reporting process into current budget reporting that each covered agency provides to the Office of Management and Budget, to minimize additional workload. Such guidance shall also clearly specify that the investment evaluation required under subparagraph (C) adequately reflect the investment's cost and schedule performance and employ incremental development approaches in appropriate cases.

(ii) The Chief Information Officer of each covered agency shall provide the Director with the information described in subparagraph (A) on at least a semi-annual basis for each major information technology investment, using existing data systems and processes.

(C) INVESTMENT EVALUATION.-For each major information technology investment listed under subparagraph (A), the Chief Information Officer of the covered agency, in consultation with other appropriate agency officials, shall categorize the investment according to risk, in accordance with guidance issued by the Director.

(D) CONTINUOUS IMPROVEMENT.-If either the Director or the Chief Information Officer of a covered agency determines that the information made available from the agency's existing data systems and processes as required by subparagraph (B) is not timely and reliable, the Chief Information Officer, in consultation with the Director and the head of the agency, shall establish a program for the improvement of such data systems and processes.