Treasury's IT spending needs more oversight, GAO says
Federal watchdog calls for better alignment with business units on proposed projects
Computerworld - One out of every four dollars spent by the U.S. Department of the Treasury goes to IT. But the agency isn't managing its technology spending as well as it could, according to a report released Monday by the Government Accountability Office.
The Treasury Department's management of its $2.8 billion annual IT budget suffers from "significant weaknesses," the GAO contended in the 64-page report (download PDF). In particular, the GAO cited a need for Treasury officials to improve the coordination between the agency's IT and business managers on proposed technology investments.
In reaching that conclusion, the GAO looked at the Treasury Department's IT spending process through the lens of the Information Technology Investment Management (ITIM) framework, a five-stage "maturity model" that the GAO developed for use by federal agencies (download PDF).
ITIM users progress through the five stages, similar to earning different-colored belts in a martial art. According to the GAO's description of the framework, a Stage 5 organization "conducts proactive monitoring for breakthrough information technologies that will enable it to change and improve its business performance."
The Treasury Department is somewhere between Stage 2 and 3 of ITIM, having completed some of the process requirements detailed in both stages, the GAO said in its report on the agency. For instance, the GAO said the Treasury Department recently implemented a process designed to help it identify IT projects that should get additional oversight by agency officials.
But one thing in particular that the department still needs is an "investment review board" that could serve as the final decision-making authority on proposed IT projects, the GAO said. It suggested that the board be made up of executives from the IT department and the agency's operating units.
The GAO also raised other issues, including a lack of documented policies for managing "nonmajor" IT investments and the agency's failure thus far to develop a comprehensive plan for improving its oversight of IT spending. "Until the department addresses these weaknesses, it will not have the investment management structure needed to effectively assess and manage the risks associated with its multibillion-dollar [IT] portfolio," the GAO wrote.
David Powner, the GAO's director of IT management issues, said in an interview that he isn't aware of any federal agencies that have reached Stage 5 of the ITIM model. Nor have any of the agencies that do self-assessments of their progress on ITIM claimed to have reached the framework's pinnacle, according to Powner.
But if an organization reaches Stage 3, "they are fairly mature at that point," he said. Achieving that level means an agency is bouncing IT investment decisions across organizational boundaries -- similar, Powner said, to companies in the private sector that let executives from all of their operating units consider the business-case justifications for proposed projects.
Read more about IT in Government in Computerworld's IT in Government Topic Center.



- Excel 2010 Cheat Sheet
- Register for this Computerworld Insider Cheat Sheet and gain access to hundreds of premium content articles, guides, product reviews and more.
- Virtualizing Government Infrastructure
- All server virtualization solutions are not created equal. The more-with-less agenda for government agencies is tailor-made for server virtualization, which is evolving into...
- Overcome Top 7 Admin Challenges of Active Directory
- As Active Directory's role in the enterprise has drastically increased, so has the need to secure the data. Gain insight on creating repeatable,...
- Insiders Can Ruin Your Company. Take Action.
- Did you know that 80 percent of threats to an organization come from the inside? The threat from insiders is often overlooked in...
- Top Solutions and Tools to Prevent Devastating Malware
- Custom malware frequently goes undetected. According to Forrester Research, the best way to reduce risk of breach is to deploy file integrity monitoring...
- Streamline Compliance and Increase ROI
- Streamline, simplify, and automate compliance related activities; especially those that impact multiple business units. This white paper from NetIQ, outlines solutions that will... All IT in Government White Papers
- Optimizing Networks for the Cloud
- Join guest speaker, Rohit Mehra, IDC Director of Enterprise Communications Infrastructure, to explore current trends, discuss best practices for optimizing Data Center and...
- Apps QuickStart Series Part 2: Designing and Deploying SQL Server on VMware vSphere
- Download this webcast to learn about the design considerations for virtualizing SQL workloads, performance and scalability information and high-availability options, as well as...
- Apps QuickStart Series Part 1: Designing and Deploying Exchange 2010 on VMware vSphere
- Download this webcast to learn the virtual hardware design considerations for Exchange 2010, deployment using the building block approach, options for high-availability and...
- Customer Spotlight: How IPC The Hospitalist Company Implemented Oracle on VMware
- Have you been looking to hear about customer's experiences with the new VMware vCenter Site Recovery Manager product? View this webcast to learn...
- Virtualize Business-Critical Applications with Confidence
- Virtualizing business-critical applications has become a key focus for organizations as they move along their virtualization journey. With the launch of VMware vSphere®... All IT in Government Webcasts