Hud Policy For Information Technology Management Handbook - U.s. Department Of Housing And Urban Development - 2011 Page 8

ADVERTISEMENT

HUD Policy for Information Technology Management
Acquisition Management
In accordance with the Federal Acquisition Regulation, acquisition planning and management is a critical
element for IT investments. OMB Circular A-11, Section 300 requires appropriate earned value
management (EVM) clauses in all applicable solicitations and contracts. The Services Acquisition Reform
Act also requires the Chief Acquisition Officer to ensure IT investments are in compliance with all
acquisition laws and regulations in planning acquisitions. Through the ITM Framework, acquisition
management is integrated with the IT capital management and performance management components.
Project Planning and Management (PPM)
PPM processes and guidelines identify the appropriate activities and deliverables throughout the Life
Cycle of a project. Movement from one PPM phase to another is authorized through evidence-based
control reviews of progress against the project baseline conducted by the appropriate level governance
board (Executive Investment Board (EIB), Customer Care Committee (CCC), and Technical Review Sub-
Committee (TRC). The outcome of these reviews is submitted to the CIO and Investment Review Sub-
Committee (IRC) for use in investment selection, control, and evaluation decisions.
Privacy Management
The Privacy Act of 1974 established controls over what personal information is collected by the Federal
Government and how it is used. The Act mandates that the Government informs citizens why
information is being collected, how it is going to be used, and assures that information is accurate,
relevant, complete and up-to-date before disclosing it to others. IT investments must demonstrate that
they comply with the Privacy Act and that privacy controls are incorporated into the PPM Life Cycle.
HUD employees and contractors shall ensure that personal information contained in system of records
shall be protected so that the security and confidentially of the information shall be preserved.
IT Risk Management
Risk management addresses the policies, processes, standards, and guidance that help HUD IT
stakeholders identify, assess, and prioritize risks throughout the IT portfolio. Risk management also
includes the coordinated and economical application of resources to minimize, monitor, and control the
probability and/or impact of unfortunate events or to maximize the realization of opportunities. Risks
can come from uncertainty in a wide range of areas including, but not limited to: funding, rapidly
evolving technology, resource availability, and management commitment.
Security Management
The Federal Information Security Management Act of 2002 (FISMA) requires agencies to integrate
security into the capital planning and EA processes, to have a security program to conduct annual self-
assessments and audits of the program and its implementation. IT investments must demonstrate that
costs of appropriate IT security controls are incorporated into the PPM Life Cycle planning of the overall
system. IT security is one of the review criteria for IT investments.
IT Performance Management
Performance management comprises the policies, procedures, standards, and guidelines that govern
the performance measurement of HUD IT investments throughout their life cycles. In the ITM
Framework process, IT investments must demonstrate how they are aligned to HUD’s strategic business
goals and how they support the long-term and annual performance plan goals. Through the
performance management component, project performance relative to budget, schedule, and scope is
monitored and the value received from IT investments is measured.
Version 1.0  4/25/2011
Page 5

ADVERTISEMENT

00 votes

Related Articles

Related forms

Related Categories

Parent category: Legal