CMS IT Governance Training Target Life Cycle Overview April 2, 2021

CMS IT Governance Training Target Life Cycle Overview April 2, 2021

CMS’ IT Governance Framework: Target Life Cycle (TLC) CMS’ process and structure for Capital Planning and Investment Control (CPIC) and technical governance The TLC is an overarching framework for engagement with: CPIC Information Security & Privacy Technical Reference Architecture (TRA) Section 504/508 Records Management The TLC assists with project planning and helps CMS make strategic IT Portfolio decisions

TLC Key Concepts Situational Governance: Discussions tailored to your specific project needs Discussion-based: TLC navigation happens via conversations, not artifacts Human-Centered: TLC design places humans at the center, and helpful people are a key feature. Those people adding value include: Navigators guide you through the process and connect you to the right resources, Enterprise Architects help you identify existing solutions to your business need, Technical Consultants help you think through your IT architecture, Information Security and Privacy SMEs who will help you reduce risk, and Decision-makers who keep mission accomplishment and enterprise strategy at the forefront

TLC Initiate Phase The TLC covers the entirety of an IT System Development Life Cycle in Four Phases: Initiate Develop Operate Retire 1) Initiate Engage CMS IT Governance Review Team (GRT) Subject Matter Experts (SMEs) to think through options for meeting business needs Starts with a brief Intake Form, and ends with an enterprise go/no-go decision from the CMS IT Governance Review Board (GRB) with tailored project guidance

TLC Develop Phase Initiate Develop Operate Retire 2) Develop Procure and/or build your service or solution with the assistance of SMEs familiar with requirements and how to get you there Starts with contract and funding approval, and ends with successful testing and obtaining an Authority To Operate (ATO)

TLC Operate Phase Initiate Develop Operate Retire 3) Operate Operate your system, maintain your Information Security Authority To Operate (ATO), and continue incremental development or maintenance Major new development and/or modernization may bring you back to the Initiate phase for review and approval of the additional scope or costs Systems or products can be in more than one phase at a time

TLC Retire Phase Initiate Develop Operate Retire 4) Retire Engage SMEs, and follow the Disposition Checklist to ensure system decommissioning is done properly Starts with tailoring your Checklist and engaging necessary SMEs, and ends with Business Owner signoff that you have successfully decommissioned Your CMS FISMA Controls Tracking System (CFACTS) and System Census records are now eligible for retirement

Target Life Cycle (TLC) Summary If you need help, the TLC can connect you with experts in many areas, both in our GRT meetings in the Initiate Phase, or in ad hoc meetings throughout the life of your project Project Teams now have the responsibility for maintaining the proper documentation according to the Project Management Methodology and Systems Development Life Cycle Methodology they want to use, which should be reflected in their contract and planning documentation Governance is about getting things done – the right way Governance through Enablement

How to Begin To get started, visit cms.gov/TLC and click on “Intake” For questions about the TLC contact IT [email protected]