Office of Information Technology Enterprise Risk Management. Tina Burnette

Size: px

Start display at page:

Download "Office of Information Technology Enterprise Risk Management. Tina Burnette"

Patience Stokes
10 years ago
Views:

1 Business Opportunities with Office of Information Technology Enterprise Risk Management Tina Burnette Executive Director Enterprise Risk Management 18

2 Overview Executive Director, Enterprise Risk Management Responsible for providing the Office of Information & Technology (OI&T) with expert risk management guidance, including the identification, assessment, and mitigation of ITrelated risks. 17

Technology (OI&T) with expert risk management guidance,

3 Acquisitions and Contractual Authority Acquisitions and contractual commitments can only be made by Government officials having expressed authority to enter into such agreements on behalf of the United States Government. The ONLY Government officials with such authority are Warranted Contracting Officials. Any discussions of contractual requirements do not constitute contractual direction or authorization of any kind. Future contractual directions, If ANY, shall ONLY come from the cognizant Department of Veterans Affairs Warranted Contracting Officer. 16

The ONLY Government officials with such authority are Warranted Contracting Officials.

4 VA s Mission 15

5 OI&T s Mission, Vision, and Guiding Principles Mission: Collaborate with our business partners to create the best experience for all Veterans. Vision: Become a world-class organization that provides a seamless, unified Veteran experience through the delivery of state-of-the-art technology. Guiding Principles: Transparency Accountability Innovation Teamwork 14

Vision: Become a world-class organization that provides a seamless, unified Veteran

6 ERM s Mission and Vision Mission: Provide OI&T with an integrated, enterprise-wide risk management approach that ensures its information technology investments are managed in an efficient and effective environment. Vision: ERM s risk management approach will enable OI&T to continuously identify, assess, and mitigate risk that may preclude it from meeting its mission. ERM s risk management framework will drive transparency and accountability, thus enhancing public trust while improving service delivery to Veterans. 13

Vision: ERM s risk management approach will enable OI&T to continuously identify, assess, and mitigate risk that may preclude it

7 VA s Organizational Alignment 12

8 OI&T s Organizational Alignment 11

9 ERM s Organizational Alignment 10

10 ERM s ProPath Process Map 9

11 ERM s Risk Severity Matrix 8

12 ERM s Enterprise Risk Registry (ERR) 7

13 Past/Current Risk Assessment Activities IT Asset Management Assessments Transparency into results resulted in aggressive actions leading to marked improvements, reducing OI&T s risks of lost or misused IT assets Security Controls Assessments Provide OI&T leadership with a clear and independent view of security control implementation efforts, ensuring visibility of information security risks Continuous Monitoring Tools Assessments Provide oversight into effective deployment of automated tools to ensure technical risks are identified in near real-time 6

and independent view of security control implementation efforts, ensuring visibility of information security risks Continuous Monitoring

14 How Can You Help Us? Past Approach Utilize Veteran-owned small businesses to support our mission requirements. Future Approach: Continue to utilize Veteran-owned small businesses to support our mission requirements. 5

15 Current/Past Awards Name of Contract Description Value of Contract Incumbent Expiration Start/Finished Enterprise Risk Registry Development Development of the ERR database. $2M SBG Technology Solutions, Inc. (SDVOSB) Complete Enterprise Risk Registry Upgrade Upgrades to the ERR database. $135K SBG Technology Solutions, Inc. (SDVOSB) Complete Enterprise Risk Registry Operation & Maintenance (O&M) Perform O&M activities for ERM s Enterprise Risk Registry (ERR) database, including code fixes and patches, minor updates or enhancements, help desk support, and project management. ~$200K annually DSoft Technology (SDVOSB) Sept 2020 IV&V Support Support personnel for independent verification and validation (IV&V) of VA financial applications. ~$500K annually Leidos, Inc. (Veteranfounded business) Sept

(SDVOSB) Complete Enterprise Risk Registry Operation & Maintenance (O&M) Perform O&M activities for ERM s Enterprise Risk Registry (ERR) database, including code fixes and patches, minor updates or

16 Opportunities Forecast Requirement Description Anticipated parameters (e.g., use of particular contracting vehicles) Anticipated date needed Range of Value $ Enterprise Risk Registry Operation & Maintenance (O&M) IV&V Support Perform O&M activities for ERM s Enterprise Risk Registry (ERR) database, including code fixes and patches, minor enhancements, help desk support, and project management. Support personnel for independent verification and validation (IV&V) of VA financial applications. Veteran-owned small business October 2020 ~$250K annually Veteran-owned small business October 2017 ~$500K annually 3

Perform O&M activities for ERM s Enterprise Risk Registry (ERR) database, including code fixes and patches, minor enhancements, help desk support, and

17 Q&A ERM points of contact for more information: Pat Hampton Director, Risk Management Planning (RMP) Steve Riffel Director, IT Security and Compliance Risks 2

18 Thank you for your service to our country then and now. 1

Business Opportunity Session. VFA and Interoperability Applications

Business Opportunity Session. VFA and Interoperability Applications Business Opportunity Session VFA and Interoperability Applications Name of Presenter: Dr. Patrick Pearcy, Ph.D. ([email protected]) Director, Office of Information and Technology (OI&T), Product Development