CCA 20Compliance 20Table 20Assessment 20Template 20Example

Document Sample
CCA 20Compliance 20Table 20Assessment 20Template 20Example Powered By Docstoc
					                                                      CLINGER-COHEN ACT (CCA) COMPLIANCE
                                                 Confirmation Assessment Checklist – Item Level Assessment –

            Program Name: Xtreme Year Z-Ray (XYZ)

            Reviewer/Items assigned/Date of Assessment: HQMC Rep (HQMC C4), MCSC Rep (MCSC ACPROG); October 2008. Review
            and assessment was based on consolidation and synthesis of input from the following individuals:

            HQMC: Coordinator(C4)

            MCSC: Coordinator (ACPROG), SAIT Rep (SIAT)

            Contract Award:

            Milestone Approval: MS C/Fielding Decision

            Recommendation: The CCA Coordinators assess the overall CCA compliancy of XYZ as Compliant. Recommendation is to sign the CCA
            Cover Letter, constituting formal confirmation of CCA.

                   Review Area                        Compliant Marginal        Non-                       Narrative Summary
                                                                              Compliant
1.Make determination that the acquisition supports        X                                 Compliance is based on the MCCDC Letter on
core priority functions of the Department. 2                                                XYZ Updated Capabilities and Characteristics
    (Confirm that the program has a valid mission                                           (approved 06 Aug 07), a MCCDC Letter of
    need)                                                                                   Clarification (XYZ1.0 Updated Requirements)
                                                                                            (approved 11 Sep 07), and the MAGTF ICD
                                                                                            (JROCM 047-08 (approved 25 Feb 08).

                                                                                            The Marine Air Ground Task Force (MAGTF)
                                                                                            Command and Control (C2) Initial Capabilities
                                                                                            Document (ICD) indicates that “Marines will be
                                                                                            able to access, manipulate and use information in
                                                                                            real time and/or near real time, to develop a
                                                                                            common understanding of the operational
                                                                                            environment enabling them to exploit information
                                                                                            superiority and take the offensive whenever
                  Review Area                    Compliant Marginal     Non-                      Narrative Summary
                                                                      Compliant
                                                                                  practical.” XYZ core software is C2PC; a
                                                                                  Windows based C2 software application fielding in
                                                                                  the Mounted Digital Automated Communications
                                                                                  Terminal in 2003. No formal JCIDS documents
                                                                                  have been produced for C2PC. The core C2
                                                                                  requirements are included in JCIDS documents for
                                                                                  MAGTF C2, Marine Corps Combat Development
                                                                                  Command (MCCDC) Letter on XYZ Updated
                                                                                  Capabilities and Characteristics and MCCDC Letter
                                                                                  of Clarifications XYZ1.0 Updated Requirements.
                                                                                  XYZ provides a powerful core capability of
                                                                                  mapping, tracking, communications, and data base
                                                                                  integration functions. XYZ provides additional
                                                                                  functionality that meets the MCCDC-directed
                                                                                  operational requirements.

2 Establish outcome-based performance measures      X                             Compliance is based on the MCCDC Letter of
linked to strategic goals. 2,3                                                    Clarification (XYZ1.0 Updated Requirements
    (Outcome measures have been defined and                                       RTM) (approved 11 Sep 07) the MAGTF ICD
    clearly linked to strategic goals; outcome                                    (JROCM 047-08 (approved 25 Feb 08) and the
    measures have been approved by the MDA)                                       XYZAPB (10 Apr 08).

                                                                                  The XYZAPBA was approved on 10 April 2008 in
                                                                                  anticipation of a Milestone C / Fielding decision.
                                                                                  The APBA Key Performance Parameters describe
                                                                                  the performance measures that are required. These
                                                                                  measures support the capabilities that are defined in
                                                                                  the JCIDS documents for MAGTF C2, Marine
                                                                                  Corps Combat Development Command (MCCDC)
                                                                                  Letter on XYZ Updated Capabilities and
                                                                                  Characteristics and MCCDC Letter of
                                                                                  Clarifications XYZ1.0 Updated Requirements.
                    Review Area                         Compliant Marginal     Non-                      Narrative Summary
                                                                             Compliant
3. Redesign the processes that the system supports to      X                             Compliance is based on the MCCDC Letter on
reduce costs, improve effectiveness and maximize the                                     XYZ Updated Capabilities and Characteristics
use of COTS. 2, 3                                                                        (approved 06 Aug 07), a MCCDC Letter of
    (“To be” processes have been defined and                                             Clarification (XYZ1.0 Updated Requirements)
    documented; acquisition strategy addresses use of                                    (approved 11 Sep 07), the MAGTF ICD (JROCM
    COTS)                                                                                047-08 (approved 25 Feb 08) and the XYZ Marine
                                                                                         Corps Single Acquisition Action Plan (MC SAMP)
                                                                                         in staffing.

                                                                                         XYZ functionality is achieved by maximizing
                                                                                         software re-use, use of Government Off-the-Shelf
                                                                                         (GOTS), Commercial Off-the-Shelf (COTS), and
                                                                                         Non-Developmental Items (NDI) integrated into a
                                                                                         solution that allows role-based installation. The re-
                                                                                         use of the C2PC C&GW as the core
                                                                                         software application integrated with existing
                                                                                         GOTS, COTS, and NDI software allows the
                                                                                         Program Office to leverage existing capabilities
                                                                                         already utilized by the Operational Forces, reduces
                                                                                         development time, and Total Ownership Cost
                                                                                         (TOC). Subsequent releases of XYZ will achieve
                                                                                         emerging requirements for MAGTF C2 Capability
                                                                                         Block 2010 and beyond. XYZ will use Pre-Planned
                                                                                         Product Improvement (P3I) to develop any
                                                                                         subsequent releases as directed in the MCCDC
                                                                                         Letter of Clarifications XYZ 1.0 Updated
                                                                                         Requirements.
4. Determine that no private sector or government          X                             Compliance is based on JROCM 163-04 (JBFSA)
source can better support the function. 4                                                (approved 30 Aug 07) and the MROCM 29-2005
    (Acquisition strategy identifies sourcing                                            based on the MCCDC Front End Assessment
    determination and rationale)                                                         (FEA) Process for POM-08. Both JROCM, the
                                                                                         MROCM direct the adoption of JTCW,
                                                                                         demonstrating that XYZ provides a unique function
                                                                                         that no private sector or other government source
Review Area   Compliant Marginal     Non-                     Narrative Summary
                                   Compliant
                                               can provide and the Marine Corps Single
                                               Acquisition Action Plan (MC SAMP) in staffing.

                                               There are other C2 Situational Awareness (SA)
                                               systems in use within DoD, such as Command Post
                                               of the Future (CPOF), and Joint Automated Deep
                                               Operations Coordination System (JADOCS). Both
                                               of these systems require input from C2PC to
                                               display COP data. Additionally, some function
                                               unique systems provide limited SA. However, only
                                               XYZ can meet the requirements identified in the
                                               MCCDC Letter of Clarifications XYZ1.0 Updated
                                               Requirements. Additionally, since the core
                                               software for XYZ is based on a fielded capability,
                                               the primary source for the required capability is
                                               JTCW. In 2001, Marine Corps Systems Command
                                               (MCSC) directed that all Windows®-based tactical
                                               systems, which send or receive Situational
                                               Awareness (SA) or Command and Control (C2)
                                               information use C2PC software. C2PC software is
                                               now XYZ Client and Gateway (C&GW). When the
                                               contract for XYZC&GW was awarded, there was
                                               not a Technical Data Package (TDP) suitable for
                                               competition. Consequently, XYZ C&GW
                                               development was issued through a sole source
                                               contract. The lack of a complete XYZC&GW TDP
                                               and the presence of a Northrop Grumman Mission
                                               Systems (NGMS) communications module made it
                                               extremely difficult for another software developer
                                               to gain the requisite expertise necessary to sustain
                                               the current XYZC&GW software baseline, add
                                               critical Joint interoperability improvements, and
                                               maintain Common Operating Environment (COE).
                                               Because of their extensive knowledge of the
                   Review Area                        Compliant Marginal     Non-                      Narrative Summary
                                                                           Compliant
                                                                                       XYZC&GW, the complexity of the existing 3
                                                                                       million lines of software code, and the MCCDC
                                                                                       timeframe for integration of XYZ with MAGTF C2
                                                                                       Capability Block (CB) 2010, NGMS is the only
                                                                                       source that can develop, test, integrate, and deliver
                                                                                       the required additional software functionality.

5. Conduct a Analyses of Alternatives. 3,4               X                             JROCM 163-04 (JBFSA) (approved 30 Aug 07)
    (AOA considers new technology solutions such as                                    and the MROCM 29-2005 (24 Feb 05 based on the
    web-enabled systems; AOA approved                                                  MCCDC Front End Assessment (FEA) Process
    by program sponsor and MDA)                                                        (which conducts a DOTLMPF analysis) for POM-
                                                                                       08.) Both JROCM and the MROCM direct the
                                                                                       adoption of JTCW. XYZ is an upgrade of a fielded
                                                                                       system, Command and Control Personal Computer
                                                                                       (C2PC). As part of the analysis in formulating the
                                                                                       MAGTF ICD (26 Feb 08), a DOTMLPF Functional
                                                                                       analysis was conducted.

                                                                                       Due to stove-piped non-integrated Command and
                                                                                       Control Systems across the Warfighting Functional
                                                                                       domains there were multiple “boxes” to be
                                                                                       managed by the Warfighter with no measurable
                                                                                       capability increase. The Lack of interoperability
                                                                                       and integration with continued expenditure on
                                                                                       duplicative infrastructure, networking, storage, and
                                                                                       bandwidth services in a fiscally constrained
                                                                                       environment. There was a need to create a holistic
                                                                                       approach to Command and Control (C2)
                                                                                       development to integrate all advocate requirements
                                                                                       into a common MAGTF C2 capability. The 13
                                                                                       August 2003 Joint Requirements Oversight Council
                                                                                       Memorandums (JROCM) 161-03 directed both the
                                                                                       Army and Marine Corps to develop a plan for
                                                                                       closing an existing gap in the single ground force
Review Area   Compliant Marginal     Non-                     Narrative Summary
                                   Compliant
                                               Joint Blue Force Situational Awareness (JBFSA)
                                               and Command and Control (C2) capability. In
                                               execution of JROCM 161-03, the Army and Marine
                                               Corps developed a two-part strategy to achieve a
                                               single solution, convergent JBFSA and C2
                                               capability, subsequently approved by JROCM 163-
                                               04 issued on 30 August 2004. The first part relies
                                               on XYZ as the solution for operations centers from
                                               the Marine Expeditionary Force (MEF) to the
                                               battalion level. The second part relies on the Joint
                                               Battle Command Platform (JBCP). XYZ supports
                                               tactical, operational, and strategic military
                                               objectives in the functional area of Joint Command
                                               and Control (JC2). Operations centers support JC2
                                               functional area operational activities from the MEF
                                               level down to battalion. XYZ capabilities
                                               contribute to and depend on other relevant
                                               functional area capabilities including Force
                                               Management, Battlespace Awareness, Force
                                               Protection, Force Application, Focused Logistics,
                                               and the Net-Centric Environment (NCE). The XYZ
                                               is based upon the JROCM, Marine Requirements
                                               Oversight Council (MROC) Decision
                                               Memorandum MROC 29-2005, and Marine Corps
                                               Combat Development Command (MCCDC) Letters
                                               of Clarification (LoC). No signed Joint Capability
                                               Document (JCD) document exists, although a draft
                                               Capability Production Document (CPD) is being
                                               considered.
                      Review Area                             Compliant Marginal     Non-                      Narrative Summary
                                                                                   Compliant
6. Conduct an economic analysis that includes a                  X                             The XYZ Life Cycle Cost Estimate (LCCE) was
calculation of the return on investment; or for non-AIS                                        completed in September 2007 in support of a
programs, conduct an Life Cycle Cost Estimate. 3,4                                             Milestone C decision. The total life cycle cost was
    (Thorough and well-documented ROI calculations;                                            estimated and presented a realistic appraisal of the
    program costs are consistent; LCCE represents a                                            level of cost most likely to be realized at that time.
    realistic appraisal of the level of cost most likely to                                    The methodology used is based on historic XYZ
    be realized)                                                                               actual expenditures and programmatic data, which
                                                                                               were employed as a means for capturing and
                                                                                               assimilating relevant data for cost, risk, and
                                                                                               economic analysis. The cost estimate identifies the
                                                                                               costs of integrating the components of XYZ1.0 for
                                                                                               the USMC in support of the Marine Corps Systems
                                                                                               Command (MCSC) Program Manager XYZ and
                                                                                               Assistant Commander, Programs (AC/PROG).

                                                                                               The following are the key assumptions that have
                                                                                               been made for the development of the XYZ
                                                                                               program cost estimate:
                                                                                               • The base year of the estimate is FY 08
                                                                                               • Navy inflation indices were used (2008)
                                                                                               • The LCCE is estimated from FY 08 through FY
                                                                                               10
                                                                                               • Initial Operational Capability (IOC): 2009 1st
                                                                                               Quarter (November 2008)
                                                                                               • Full Operational Capability (FOC): 2009 3rd
                                                                                               Quarter (July 2009)
                                                                                               • All exhibits are displayed in Then Year (TY)
                                                                                               dollars
                                                                                               • All costs prior to FY08 are sunk
                    Review Area                          Compliant Marginal     Non-                     Narrative Summary
                                                                              Compliant
7. Develop clearly established measures of                  X                             Acquisition performance measures are clearly
accountability for program progress.                                                      established measures and basis for accountability
   (Metrics adequately measure current program                                            for program progress. The essential acquisition
   progress; program control and MDA-level                                                measures are those found in the XYZAPB (10 Apr
   management insight process is clearly defined)                                         08): cost, schedule, and performance. Additional
                                                                                          measures of performance are addressed in the
                                                                                          XYZMC SAMP.

8. Ensure that the acquisition is consistent with the       X                             XYZTISP (Interoperability & Supportability
Global Information Grid policies and architecture, to                                     Certification has been issued by the J-6. (Signed 1
include relevant standards                                                                Aug 08). The XYZAPB (10 Apr 08) established
    (IT architecture is developed in accordance with                                      the Interoperability-Net Ready KPP for the
    the GIG policies and appropriate provisions of the                                    program.
    DoD C4ISR Architecture Framework and Joint
    Technical Architecture; program is compliant with                                     While XYZ1.0 may operate in a bandwidth-limited
    DII COE level 3 or higher)                                                            environment and occasionally disconnected, the
                                                                                          program office is aware of the future of the GIG
                                                                                          and the net-centric vision.
                                                                                          The XYZ1.0 software will be compliant within the
                                                                                          DOD’s network centric GIG environment in
                                                                                          accordance with the Marine Corps’ GIG migration
                                                                                          strategy. XYZ is prepared to evolve as
                                                                                          Net Centric enabling technologies become available
                                                                                          in the network environments in which
                                                                                          XYZ is designed to operate. This element is
                                                                                          assessed as compliant.
                     Review Area                           Compliant Marginal     Non-                     Narrative Summary
                                                                                Compliant
9. Ensure that the program has an information                 X                             The XYZ program has completed the IA Strategy
assurance strategy that is consistent with DoD policies,                                    and it is consistent with DoD policies.
standards, and architectures, to include relevant
standards
    (IA reqmts are addressed throughout the program
    life cycle; IA reqmts derived from the ORD are
    incorporated into program design activities;
    information system survivability is addressed by
    incorporating protection, detection, reaction and
    reconstitution capabilities into the system design;
    all security reqmts are included in test strategies;
    successful certification and accreditation in
    accordance with DITSCAP)
10. Ensure, to the maximum extent practicable, (1)            X                             XYZMC SAMP (pending, in staffing) explains the
modular contracting has been used, and (2) the                                              acquisition approach of following a single step
program is being implemented in phased, successive                                          developmental process, which aligns with the
increments, each of which meets part of the mission                                         development of MAGTF C2 Capability Block 2010
need and delivers a measurable benefit, independent of                                      and beyond.
future increments.
    (Program schedule and milestones reflect phased                                         The program is being implemented in phased,
    implementation approach; each block results in                                          successive blocks. The initial approach of MAGTF
    stand-alone functional capability)                                                      C2 CB 2010 is to integrate XYZ with COC
                                                                                            Capability Sets 2, 3, and 4. The CB 2010 effort
                                                                                            will investigate and assess Service Oriented
                                                                                            Architecture (SOA) using available commercial
                                                                                            products in an open source development
                                                                                            environment at SSCC. The MAGTF C2 Systems
                                                                                            and Applications (MC2SA) team will recommend
                                                                                            integrating maturing services, data models and
                                                                                            shared data environment with existing Program of
                                                                                            Records via required Engineering Change Proposal
                                                                                            actions to improve system performance and
                                                                                            application interoperability. For future capability
                                                                                            blocks, MC2SA will prototype, analyze, coordinate,
                      Review Area                         Compliant Marginal           Non-                        Narrative Summary
                                                                                     Compliant
                                                                                                   and recommend courses of action to support the
                                                                                                   MAGTF C2 strategy based on the ICD. After CB
                                                                                                   2010, blocks are planned for 2012 and 2015. The
                                                                                                   contracting strategy indicates that the original
                                                                                                   C&GW contract was a Cost Plus Incentive Fee
                                                                                                   (CPIF) with shared costs. The software developed
                                                                                                   was not suitable for integration, therefore a T&M
                                                                                                   was issued to correct the issues with the software
                                                                                                   and to re-factor the code. All subsequent contracts
                                                                                                   for the C&GW will be managed using FFP or CPIF
                                                                                                   incentivizing the quality of the software and
                                                                                                   schedule. The two incentives are complementary,
                                                                                                   with quality weighted above schedule. This was
                                                                                                   arranged to ensure quality in a timely manner, and
                                                                                                   to prevent delivery of software that might not be
                                                                                                   suitable for operational forces. This element is
                                                                                                   assessed as compliant.

  11. Register Mission Critical and Mission Essential            X                                    Registration ID 21929
                              3,5
  systems with the DoD CIO.
      (Program registered; identify registration ID
      number)
1. The system documents/information cited are examples of the most likely but not the only references for the required information. If other references are
    more appropriate, they may be used in addition to or instead of those cited. Include pages(s) and paragraph(s) where appropriate.
2. These requirements are presumed to b satisfied for Weapons Systems with embedded IT and for Command and Control Systems that are not themselves
    IT Systems.
3. These actions are also required to comply with section 811 of P.L. 106-398.
4. For NSS, these requirements apply to the extent practicable (section 11103 of Subtitle III / Title 40
5. Definitions:
               Mission Critical Information System. A system that meets the definition of “information system” and “national security system” in the CCA,
               the loss of which would cause the stoppage of warfighter operations or direct mission support of warfighter operations. (Note: a component
               head, a combatant’s commander, or their designee shall make the designation of mission critical. A financial management system shall be
               considered a mission critical IT system as defined b the Under Secretary of Defense (Comptroller) (USD(C)). ) A Mission Critical
               Information Technology System has the same meaning as a Mission Critical Information System.
Mission Essential Information System. A system that meets the definition of “information system” that the acquiring component head
determines basic and necessary for the accomplishment the organizational mission (Note: a component head, a combatant’s commander, or
their designee shall make the designation of mission essential. A financial management system shall be considered a mission essential IT
system as defined b the Under Secretary of Defense (Comptroller) (USD(C)). ) A Mission Critical Information Technology System has the
same meaning as a Mission Essential Information System.

Rating Scale:
Compliant = Fully complies with the letter and intent of the Clinger-Cohen Act
Marginal (see note) = Complies with the intent/spirit of the Clinger-Cohen Act, if not the letter
Non-Compliant (see note) = Shows no evidence of compliance

				
DOCUMENT INFO
Shared By:
Categories:
Tags:
Stats:
views:11
posted:11/11/2011
language:English
pages:11