The Federal Data Center Consolidation Initiative (FDCCI)

Transcription

1 WHITE PAPER August 2012 The Federal Data Center Consolidation Initiative (FDCCI) A plan to assist Federal agencies in meeting the goals and strategic objectives of the Federal Data Center Consolidation Initiative Patrick Maloney Enterprise Architect / CA Technologies Public Sector

2 Table of Contents Executive Summary 3 Section 1: 4 The Federal Data Center Consolidation Initiative (FDCCI) FDCCI program goals Strategic objectives Comprehensive effort Continual requirements Section 2: 6 CA Technologies approach Solution architecture Capability 1: Data center efficiency program support Capability 2: Service asset and configuration management Capability 3: Operational measurement and reporting Capability 4: Service level management and service portfolio Capability 5: Consolidation and optimization Ancillary benefits Section 3: 19 Solution Delivery FDCCI phased approach Summary Section 4: 23 About the author 2

3 Executive Summary Challenge The Federal Data Center Consolidation Initiative (FDCCI) is an Executive branch mandate from the Federal CIO that requires government agencies to reduce the overall energy and real estate footprint of their data centers, with the targeted goals of reduced costs, increased security, and improved efficiency. Agency CIOs must accomplish this in a challenging environment with real barriers to success that include a lack of upfront funding, an aggressive time line for ROI, poor visibility into the existing IT supply chain, and organizational resistance to change. CIOs need a two-pronged approach to meet FDCCI targets for their agencies. They must manage critical success factors at the program level, while simultaneously leveraging incontestable deep-dive data to streamline day-to-day operations. Agencies without detailed insight, agile control and ability to execute provided by a robust IT management solution will be less able to realize the multiple opportunities for efficiency that currently exist in the data center and across their IT supply chain. Opportunity Though the challenges to efficiency are considerable, CIOs have never had so many opportunities to meet these challenges and achieve efficiency gains and cost savings. Resource virtualization, standardization, automation and cloud computing are key techniques now available to help eliminate waste from today s enterprise IT and external supply chain. However, for gains to be realized and potential fulfilled, all critical components supporting IT service delivery must be identified, measured, and controlled across their lifecycles. Agencies require a solution that will support the Federal Data Center Consolidation Initiative, and which will also provide support for ongoing operations and improvement after the initial efficiency program is complete. A well designed and implemented efficiency solution for the data center will support agencies to help meet FDCCI goals, enhance service delivery to constituents, improve program execution, and demonstrate a rapid return on investment. Benefits A Data Center Efficiency solution can provide value across every phase of an agency s consolidation program by providing the ability to help: Govern and execute agency data center efficiency programs and the consolidation process Make informed recommendations for IT facilities, including geography and real estate Implement hardware and software asset management to minimize waste and licensing costs Populate a service-oriented CMDB with detailed CI and dependency data for informed change management 3

4 Understand ongoing data center operations in detail before, during, and after consolidation Optimize and automate SDLC and ITIL processes to increase standardization and help minimize risk Manage a dynamic IT supply chain to support high-quality service delivery. Leverage cloud technologies to realize Quick Wins, minimize CAPEX, and reduce OPEX Report ongoing data center consolidation and optimization activities Section 1: The Federal Data Center Consolidation Initiative (FDCCI) On February 26, 2010, The Federal CIO, Vivek Kundra, announced a government-wide initiative to: Promote the use of Green IT by reducing the overall energy and real estate footprint of government data centers Reduce the cost of data center hardware, software and operations Increase the overall IT security posture of the government Shift IT investments to more efficient computing platforms and technologies The announcement charged the Federal CIO Council with developing program goals, as well as a process, for each agency to complete the first phase of a consolidation plan by August 31, FDCCI program goals In conjunction with the Initiative Kick-off, the Federal CIO Council released a Data Center Consolidation Plan Template for the FDCCI. This document expanded upon Mr. Kundra s original announcement. The overall goals of the government-wide Data Center Consolidation Initiative: Consolidate data centers across the Federal government to achieve cost savings, energy consumption reductions, optimal space utilization and improvements in IT asset utilization. Use automation, standardization and security hardening of hardware and software platforms, including virtual hosts and virtual machines to improve upon the implementation and monitoring of NIST controls and FISMA compliance. Define and monitor standard operational metrics across agencies (see Section 4.1), achieve efficiency gains and realize operational cost savings by improving: Server (CPU) utilization (%) Rack Space utilization (%) Rack Floor utilization (%) 4

5 Power usage / square foot Power Usage Efficiency (PUE) Maintain cross-agency goals for highly available, scalable, and redundant data center infrastructure that will substantially reduce the government s risk and provide for future IT growth. Strategic objectives The Data Center Consolidation Plan Template identifies Consolidation, the top goal listed above, as the primary goal of the Initiative and sets forth the following strategic objectives to meet that goal. Reduce cost Reduce energy use Reduce operational costs Limit long-term capital investments Reduce environmental impact Reduce power consumption per processing capacity Optimize cooling, power distribution, cable plant Improve efficiency and service levels via automation Maintain security: availability, integrity, confidentiality Guarantee performance: redundancy, load balancing, COOP Enhance business agility and effectively manage change Implement ITSM best practices ITIL, CMMI-Svc Implement SDLC best practices CMMI-Dev, CMMI-Acquisition Comprehensive effort Data Center Consolidation as envisioned and mandated by the Federal CIO is a comprehensive undertaking, which encompasses many specialized domains across the government and includes IT Applications, Infrastructure, and Business Services, as well as Physical Plant, Security, and Environmental considerations. The Data Center Consolidation Plan lists four key impact areas of this initiative and the Federal CIO Council is looking for efficiency gains and cost savings across all of them: Software Assets Hardware Assets Location and Real Estate Facilities and Energy Continual requirements Once initial consolidation takes place, FDCCI requires that agencies continue to adopt and implement best practices to optimize resource utilization and minimize cost and energy use, as well as evaluate 5

6 and promote the further adoption of Cloud Computing alternatives as demand for agile IT services continues to increase. Annual reports to the CIO Council that detail ongoing data center consolidation and optimization activities are also mandated. Section 2: CA Technologies approach As with any major IT energy and cost efficiency initiative, a data center consolidation program is a complex multi-threaded challenge that requires simultaneous and coordinated action across many organizational domains. These include Project Management and the PMO, IT Operations, Asset Management, Facilities, Quality Assurance, etc. To assist Federal agencies with this comprehensive initiative, CA Technologies has created a notional design for a Data Center Efficiency Solution that provides five levels of potential value-adding capability. Each of these five capabilities responds to the needs of a particular subset of responsibilities within an organization. The capabilities can be implemented individually for targeted benefit or combined for comprehensive data center consolidation support. Multiple capabilities may be implemented in parallel to realize simultaneous gains across the organization, and all are designed to provide value upon implementation and throughout a program s lifecycle, including support for the improvement of ongoing operations. Figure A. CA Technologies five-capability approach to data center consolidation Capability 1: Data Center Efficiency Program Support Govern and execute programs strategically; Track progress across the program lifecycle Capability 2: Service Asset and Configuration Management CMDB; Discovery Reconciliation; Software License Compliance; Application Mapping Capability 3: Operational Measurement and Reporting Application Performance Monitoring; Facilities, Operations and Environmental Metrics Capability 4: Service Level Management and the Service Portfolio Service Catalog; SLA Performance Reporting and Violation Alerts; Quality Improvement Capability 5: Consolidation and Optimization Data Center Automation, Virtualization and Cloud Management, Process Automation 6

7 CA Technologies can create and support every capability listed above. Furthermore, each capability within the overall CA Technologies solution has well-defined integration points and can exchange data with existing solutions using standard XML-based web services or other APIs. Solution architecture Figure B below depicts the functional architecture and general data flow of the overall solution, showing the five constituent capabilities and the potential for end-to-end closed loop control. Figure B. Solution architecture provides end-to-end closed loop control Data Center Efficiency So lution F unctio nal Architecture IT Service Supply Chain Management Layer Service Layer Operational Measurement and Reporting HW Ownership / SW License Data Transactional Monitoring Data (Apps/User Exp.) Distributed & MF Operational Monitoring Data (Sys/Net/DB/MF) Inventory Data (HW/SW) Application Mapping Data (Configuration) Service Level Management & The Service Portfolio Router Firewall Switch NETWORK Service Level Alert Data Center Efficiency Program Support Service Asset & Configuration Management Service Desk Operational Alert Data Center Operations Load Balancer Web Servers FRONT END Initiate Change Configuration Alert Portal App Server MIDDLEWARE SDLC and ITIL v 3 Control Processes Windows Server Main Frame Database BACK END Consolidation and Optimization LINUX Databases Web Services Virtual and Cloud Resource Provisioning Image Based Provisioning Software Delivery Enhanced IT Security Management Process Automation Patch Management IT Service Continuity Management Cloud-Connected Management Cloud Computing Initiate Change Aggregated Data Collected Data Alert Execute Action The following sections discuss the major capabilities and sub-functions of the CA Technologies solution depicted above and clarify how the solution helps support FDCCI program objectives. Capability 1: Data center efficiency program support When it comes to driving results from their high-level efficiency initiatives, best practice organizations apply rigorous governance and program management to maintain alignment between strategic green IT goals and the projects executed to achieve those goals. This systematic approach, facilitated by a powerful project and portfolio management solution, promotes transparent, methodical decisionmaking, allowing agencies to leverage resources and evaluate constraints financial, environmental, and political to identify which projects are anticipated to provide higher returns on investment. This capability allows CIOs to maintain greater financial visibility, planning and control over their efficiency programs and provides a reporting mechanism to communicate projected targets and program achievements to agency and OMB stakeholders. 7

8 Figure C. Data center efficiency program support tracks actual energy use against targets over time Figure D. An executive dashboard with KPIS 8

9 Benefits of data center efficiency program support Formulate and formalize a green IT strategy by establishing targets and timelines, identifying risks and capturing ideas. Identify initiatives that are most likely to succeed and prioritize investments accordingly. Manage detailed timetables, milestones and Work Breakdown Structure (WBS), and track issues, risks and costs. Monitor progress on FDCCI-mandated optimization objectives, including asset management, IT facilities and energy usage, and geographic location and real estate. Communicate consolidation benefits to stakeholders within the organization and beyond, such as the CIO Council and OMB. Capability 2: Service asset and configuration management As described by ITIL v3, Service Asset and Configuration Management is a collection of processes that facilitate management and control of the IT resources that contribute to fulfilling a business service. Service Assets be they physical or virtual, hardware or software, system or network have a lifecycle that begins with procurement and provisioning, moves through an operational phase, and ends with decommissioning and disposal. The ownership records of these assets should be tracked and managed throughout the lifecycle. During the active, operational phase, an asset is discoverable within the environment, and its discovery can be correlated back to ownership records to link both financial and operational views of the asset. IT Asset Management helps facilitate benefits such as increased standardization, reduced costs, software license compliance, and enhanced vendor management. Configuration Management builds a logical view of the configuration items (CIs) and dependent relationships that make up a service and captures this within a Configuration Management Database (CMDB). This information is critical to performing effective Change Management and Release and Deployment Management. It provides a view of the heterogeneous service supply chain and helps IT management to identify the risks and impact of a potential change. CIs and relationships are populated into the CMDB and updated periodically for increased accuracy. 9

10 Figure E. Configuration management allows the visualization of dependent relationships Benefits of service asset and configuration management Maintain an accurate inventory of servers and software applications running in the data center. Map application relationships automatically: to servers/mainframe, to databases/platforms, and to dependencies. Populate services, applications, other manageable CIs, and their dependencies into an ITIL-adherent CMDB for best practice Configuration Management. Reconcile discovered hardware and software assets with purchasing and maintenance records to help maximize efficiency, facilitate license compliance and identify opportunities for reducing costs. Categorize application services for potential use of public, private, or community clouds. Standardize hardware, OS, and application configurations and better enforce compliance to requirements. Assess system/application feasibility for virtualization and select standard virtual platforms. Produce detailed reports, including those required by the FDCCI: number of servers and virtualization % by type (Windows, Linux ), server capacity & utilization by type (GHz/MIPS, Peak/Average %), and storage capacity by type (total/used TB). 10

11 Capability 3: Operational measurement and reporting Operational environment monitoring captures real time data from data centers and building infrastructure to provide a clear and comprehensive picture of energy use and other environmental variables. Capacity monitoring identifies opportunities for virtualization and consolidation by tracking real-time and historical resource utilization. Figure F. Operational monitoring of IT facilities Further instrumentation allows an organization to monitor ongoing IT operations and business transactions across the hybrid physical and virtual environment. Captured metrics are measured against established baselines and thresholds. Correlating component-level metrics and alarms to the services they support helps an organization manage the data center from the service-oriented perspective, facilitating KPI and SLA monitoring. When a service is impacted by a fault in an underlying component, a remediation process manual or automatic will be initiated to correct the root cause event. Incident Management is also notified to make management aware of the risk and to confirm the event is resolved. 11

12 Figure G. Operational monitoring with a service-oriented perspective Instrumentation of the data center and correlation of alerts is the foundation for robust IT Operational Management and supports several ITIL v3 processes, including Availability Management, Capacity Management, Event Management, Incident Management, and Service Level Management. Benefits of operational measurement and reporting Visualize and report energy usage, PUE, and CO2e impact for each data center and across the agency. Capture operational and transactional usage data from applications, systems, and network devices to facilitate top-to-bottom visibility and end-to-end control over critical service delivery functions. Track environmental usage data from IT Facilities infrastructure, such as power distribution and UPS units; chillers, fans, and CRAC units, and other Building Management System (BMS) metrics. Report on server utilization and virtualization levels and data center energy usage. Support downstream ITIL v3 processes, including Availability Management, Capacity Management, Event Management, Incident Management, and Service Level Management. Capability 4: Service level management and the service portfolio Service Level Management aggregates service CI information from the CMDB and operational and transactional metrics from the data center. It then maps this information to business-level service descriptions and KPIs, using a top-down, contract-oriented approach. These business services and KPIs can be monitored to help track and demonstrate current levels of service against contractual obligations. 12

13 Figure H. Service level management tracks performance obligations for service warranty The Service Portfolio acts as a central repository for detailed information associated with each of an agency s IT services across the service lifecycle: in draft, live, and retired. This includes specific SLA or other contract details: effective dates, terms and conditions, relevant metrics, performance requirements, and penalties for violation. All currently active services in the portfolio, comprise the Service Catalog. Together, the Service Portfolio and Service Catalog provide invaluable decision support for a data center consolidation program, because they help provide a clear understanding of how anticipated and currently delivered IT services map back to business requirements; how these services are required to perform throughout the consolidation process, and the cost impact of diminished service performance. Figure I. The service portfolio serves as a central repository for all future and current services 13

14 Having an accurate understanding of how well data center performance meets service level requirements can help agencies reduce costs, increase productivity, improve customer satisfaction, and reduce risk. Benefits of service level management and the service portfolio Aggregate and correlate operational data to monitor service performance against businessrelevant metrics. Track SLA performance before and throughout the consolidation process, continuing afterward for ongoing optimization. Review a consistent and common set of service quality metrics to help improve performance, mitigate risks, and resolve problems. Alert the Service Desk of actual or impending SLA violations and initiate remediative change. Understand more clearly the cost implications of service level agreements in real time for penalties, credits and ongoing performance. Map services as defined in the CMDB back to foundational business requirements and contracted levels of performance. Capability 5: Consolidation and optimization The fifth capability enhances an organization s ability to execute the consolidation activities described in that agency s Data Center Consolidation Plan, including decommission, consolidation, virtualization, and cloud computing. It also enables subsequent optimization to drive increasing efficiency over time. This capability is divided into three sections: Control process enablers are the solution components intended to support the implementation and augmentation of SDLC best practices and ITIL v3 Change Management and Release and Deployment Management processes; Capability enablers are the solution components intended to fulfill the functional requirements of a data center consolidation, including virtualization, automation, and resource standardization, and Capability enhancers are the solution components intended to fulfill non-functional, but still critical, quality requirements, such as security and IT service continuity. SDLC and ITIL V3 control process enablement Change Management is utilized within any mature IT organization to help minimize risk, identify the impact of change, and facilitate appropriate review and approval. Change Order (CO) creation, approval, and implementation workflows should be standardized and automated for efficiency and effectiveness. Once a change is formally approved, Release and Deployment Management confirms that a standardized and repeatable process is invoked to implement the change. In a data center environment, practically any standardized, repeatable integrated system process or human interactive workflow might be initiated to complete the change. As an organization matures its service operation, frequently repeated processes will be standardized for consistency and then automated for efficiency. Standardization and automation are key drivers for 14

15 enhanced productivity, operational agility, and an increased ability to reduce cost and increase compliance in the data center. In a fully dynamic data center, automated actions such as provisioning a physical, virtual or cloudbased resource, initiating a job, workflow, or change order, or even reconfiguring an application on the fly are based upon metrics captured from the instrumented enterprise, resulting in end-to-end closed loop control. Figure J. Automated management of the dynamic data center Consolidation and optimization capability enablement Virtual and cloud resource provisioning refers to the automatic provisioning, configuration, and release of virtual and cloud-based machine instances from a variety of vendors, including VMware, Microsoft Hyper-V, Citrix, Cisco UCS and Amazon. Process automation provides organizations with the ability to design, build, orchestrate, manage, and report on workflows that support IT operations processes. Process Automation supports integrations between disparate systems, as well as human to system interactive workflows. As mentioned above, automation is a key driver for enhanced productivity and agility and a better ability to reduce cost and increase compliance in the data center. 15

16 Figure K. Processes are automated from start through success Image based provisioning facilitates consolidation of the data center through the efficient migration of bootable server images to physical or virtual infrastructure. Images are created from existing systems without the need for a reboot. This results in reduced service interruption with images streamed to an image library, from which they can be deployed to any compatible hardware platform, automatically handling cross-vendor physical migrations (P2P), physical-to-virtual (P2V), virtual-tophysical (V2P), and virtual-to-virtual migrations (V2V). More efficient than the traditional script-based methodology, image- based provisioning is particularly useful for deploying to physical hardware when virtualization is not viable. Patch management is the process by which vendor-published software patches for known errors and security vulnerabilities are identified, retrieved, approved, installed, and verified on target machines. Systems that deviate from required patch levels must be identified and updated quickly to minimize the risk of virus infection or other breach of security. Patch Management should be automated and integrated with Change and Release Management processes as much as possible for efficiency and accuracy. Software delivery is the automated deployment of software resources. This includes new application installs as well as patches, upgrades, and reconfigurations. Application installs should be governed by Software Asset Management to facilitate license compliance and cost control. Reconfigurations are frequently initiated to control configuration drift as identified by Configuration Management. Cloud-connected management is expected to provide, when generally available, next generation cloud management capabilities that are anticipated to help organizations to discover and measure existing services, compare them against external options, and make informed sourcing decisions to improve their IT supply chain. Cloud-Connected Management is expected to deliver insight into IT services internal and external and provide a standard way to describe those services based on important business-related metrics. It is planned that Cloud-Connected Management will also leverage relevant data about public cloud services, feedback about those services, and best practices from a community of industry peers and users to support informed sourcing decisions for a particular application or capability. 16

17 Cloud-Connected Management is expected to provide the ability to abstract new and existing applications and infrastructure from current physical dependencies, making it easier to deploy, migrate, secure, support and improve service workloads as needed for increased efficiency. Consolidation and optimization capability enhancement IT service continuity management supports overall business continuity by helping to ensure that the required IT technical and service facilities can be recovered within agreed upon business time frames. Data backup and restore, offsite replication, and high availability are major supporting elements of IT business continuity for data center consolidation. IT security management one of the business drivers for the FDCC Initiative is an enhanced security posture in the data center, demonstrated by improved FISMA compliance. The functional architecture of the solution can be extended to support a variety of enhancements that help augment data center security and improve compliance: Identity lifecycle management Identity Lifecycle Management provides an integrated identity administration solution that serves as the foundation for automated user provisioning, self-service requests, and identity governance the centralized control of users, roles, and policies. Information protection and access control In tandem with Identity Lifecycle Management, Information Protection and Access Control enforces policies relating to access to systems, web applications, and information. It also provides management of privileged users to limit improper administrator actions. Together, the two capabilities provide Content-Aware Identity and Access Management: Figure L. Content-Aware IAM 17

18 Security Information Management Security Information Management consolidates security-related information from the data center to help verify security controls, streamline the investigation of user and resource access activities, and simplify and improve FISMA compliance reporting. Benefits of consolidation and optimization Manage and streamline change by automating change approval and fulfillment workflow processes. Enforce service asset standardization with automated and mandatory configuration compliance. Automate the provisioning, configuration, and release of diverse data center resources physical, virtual and cloud based on system performance correlated to SLA requirements. Leverage accurate inventory and capacity information to curb VM sprawl and VM stall. Optimize the cloud computing consolidation approach and manage the dynamic IT supply chain. Augment the organization s security posture and enhance FISMA compliance. Support disaster recovery and IT service continuity. Ancillary benefits In addition to the core benefits provided by the Data Center Efficiency Solution in response to the FDCCI, there are additional ancillary benefits that are also worth mentioning. FISMA compliance Federal agencies are subject to a myriad of laws and regulations intended to support internal controls and provide governance over their operational mission primarily to reduce costs and waste, manage risk, and promote the public welfare. Agencies need to demonstrate compliance with these various controls on a regular basis. For the FDCC Initiative, compliance with FISMA security requirements and enhanced adherence to the NIST SP controls are explicitly called out as strategic goals. In addition, good program and solution governance can help support compliance with other legal and regulatory requirements, such as environmental and financial controls. Benefits will vary depending upon which capabilities are implemented, but the overall solution enhances FISMA compliance across many of the SP controls. The SP control families most directly impacted by the solution include: Configuration management System and services acquisition Physical and environmental protection Identification and authentication Access control System and information integrity Audit and accountability Contingency planning 18

19 Reporting One of the most critical prerequisites for effective decision making and one of the biggest challenges is getting the appropriate information to the appropriate decision maker at the appropriate level of detail. Executives need an accurate, uncomplicated view into how well they are achieving their business goals. In this solution, data are correlated, aggregated, analyzed, and presented as actionable business intelligence for the busy business executive. The service measurement INDEX (SMI) 1 The Service Measurement Index (SMI) is a standard method for measuring the end-to-end user experience for any number of IT services. The SMI Framework is designed to help organizations measure any number of cloud based IT services available to them, regardless of whether that service is internally provided or sourced from an outside company. It permits weightings of importance based upon the organization s requirements as to what defines a good service. From procurement and ongoing service levels, to business viability and security, the SMI Framework provides a holistic view into the customer experience for cloud service providers in six primary areas: quality, agility, risk, capability, cost and security. Not only can users of the SMI Framework compare cloud service vendors based on their specific business and technology requirements, they can also make dynamic, real-time decisions on where to best migrate an application. The Framework provides a standard way to evaluate, monitor and implement services demanded by the business. The Framework was created by CA Technologies and its ongoing development and management is run by a consortium of academic institutions and representatives of business and government. Cloud commons CA Technologies, along with other organizations and participants, has initiated the Cloud Commons IT management community to provide a place for like-minded end users, partners, industry experts, and others to share experiences, best practices, and qualitative and quantitative information about the many types of cloud services available. Cloud Commons will enable people to describe their experiences with cloud services and compare them to others. There will also be ways to add commentary and to interact with others in the community. Section 3: Solution delivery The CA Technologies Data Center Efficiency Solution is presented as a series of five capabilities, each providing a particular subset of functionality toward the overall solution. Each of the five may be implemented individually for targeted benefit or combined for comprehensive data center consolidation support. When possible, multiple capabilities should be implemented in parallel to realize simultaneous gains across the organization. As with any large implementation project, a thorough methodology, including project planning, requirements analysis, and solution design, should be followed. Pre-existing solution components CA Technologies and/or third- party environmental factors, and the various requirements of individual customers will all factor into the final solution design. 19

20 FDCCI Phased Approach The Data Center Consolidation Plan Template lays out a six phase process for agencies to follow. Figure M. Six FDCCI phases These six phases correspond to a standard best-practice design, develop and deploy methodology: Phases 1/2 Identify what you currently have capture the current environment Phase 3 Analyze the current environment against identified requirements and identify gaps Phase 4 Design a desired-state solution to remediate gaps; develop and test a transition plan Phase 5 Execute the transition plan to implement the desired-state; validate the solution Phase 6 Provide ongoing operations and maintenance; exploit opportunities for improvement The emphasis of this methodology is for agencies to better understand and analyze their current IT environments against business service requirements, identify opportunities for improvements, execute an informed consolidation approach for a given service, application, or infrastructure component, and then repeat the cycle to support ongoing optimization of each agency s IT supply chain. The five capabilities of the Data Center Efficiency Solution provide increasing levels of maturity that roughly follow the program phases set forth by the FDCCI: Govern The first capability, Data Center Efficiency Program Support, provides high-level program and portfolio management to set strategy, track progress, and report success. This capability extends across the six phases of the FDCCI lifecycle. 20