Transcription

OMB Exhibit 300 Budget Year 2009PBGC – IT Business TransformationPBGC - IT Business Transformation[redacted]Agency: 012Exhibit 300: Capital Asset Plan and Business Case SummaryPart I: Summary Information And JustificationSection A: Overview1.2.3.4.5.6.7.8.Date of submission: Dec 28, 2007Agency: 012Bureau: 12Name of this Capital Asset: PBGC - IT Business TransformationUnique Project (Investment) Identifier: 012-12-03-00-01-1028-00What kind of investment will this be in FY2009? Mixed Life CycleWhat was the first budget year this investment was submitted to OMB? FY2008Provide a brief summary and justification for this investment, including a briefdescription of how this closes in part or in whole an identified agency performancegap: The PBGC IT Business Transformation (ITBT) is not a systemsdevelopment effort, but an initiative to significantly improve theeffectiveness, efficiency, governance & risk management of PBGC’s ITassets. PBGC relies substantially on information systems to support itsbusiness activities in support of maintaining solvency of the nation’spension programs. An IT Risk Assessment (ITRA) was performed usingCOBIT (Control Objectives for Information & related Technology), OMB &legal requirements, providing Executive Management with key issues: Maynot have appropriate IT skills & systems it needs to properly identify,assess, communicate, & monitor economic risks, or perform forecasting ofpension scenarios; Office of IT does not have ability to respond to new &rapidly changing business requirements; May not meet increasing demandsfor customer & employee on-line access & still provide adequate time forsystems maintenance; Systems may not have capacity or flexibility tohandle additional plan terminations; Confusion over roles of the ITgovernance bodies hindering decision-making process; Lack of specific ITcost accounting. Maturity issues identified were: IT leadership & workforceskills gaps; no IT Strategic Plan; inadequate Capital Planning & InvestmentControl; inadequate project management & compliance with the EnterpriseArchitecture; inability to align IT costs with needs, & manage IT risks. NewCIO focused on identifying the best solution for improving PBGC’s approachto IT. Five alternatives were evaluated on the value basis in reducing risk,longevity of benefits, cost, organizational capacity, & risk using the ValueMeasuring Methodology (VMM). Best value alternative was selected by PBGCExecutive Management as it transforms PBGC’s approach to IT & ITperformance issues by implementing mature governance,planning/operating processes, align IT resources with corporate businessneeds, achieve IT operations efficiency/effectiveness, mitigate risks &compliance issues (audit findings & FISMA); minimize business impact dueto IT service disruption; streamline enterprise business processes & dataintegration; project status transparency for timely milestone decisions. ThisExhibit 300 is a comprehensive & optimal solution for CIO to address ITExhibit 300 BY09 - PBGC - IT Business Transformation (Public FINAL).docPage 1 of 23 Pages

OMB Exhibit 300 Budget Year 2009PBGC – IT Business Transformationissues for approx. 32.4 M over a 5-year period, completed by FY11. Allcosts are covered by repurposing existing funds & contracts, realigningexisting FTE staff, coordinated with IT Infrastructure 300.9. Did the Agency's Executive/Investment Committee approve this request? yesa. If "yes," what was the date of this approval? Jun 29, 200710. Did the Project Manager review this Exhibit? yes11. Contact information of Project Manager?NamePhone NumberE-mailSrividhya S. @pbgc.gova. What is the current FAC-P/PM certification level of the project/programmanager? TBD12. Has the agency developed and/or promoted cost effective, energyefficient andenvironmentally sustainable techniques or practices for this project. noa. Will this investment include electronic assets (including computers)? nob. Is this investment for new construction or major retrofit of a Federal buildingor facility? (answer applicable to non-IT assets only) no1. If "yes," is an ESPC or UESC being used to help fund this investment?[Not answered]2. If "yes," will this investment meet sustainable design principles?[Notanswered]3. If "yes," is it designed to be 30% more energy efficient than relevantcode? [Not answered]13. Does this investment directly support one of the PMA initiatives? yesBudget Performance IntegrationExpanded E-GovernmentHuman Capitala. Briefly and specifically describe for each selected how this asset directlysupports the identified initiative(s)? Addresses IT staffing, skills, &defining owners/roles/responsibilities for all ITprocesses/stakeholders; skills gap assessment, identify training, &continuous staff reviews. Funding addressed by restructuring ITcontracts to performance-based; addresses audit findings related toIT security & business continuity in FY07 PART to improve corporateperformance. Use EPA’s Security LOB, further EA and CPIC to addressstreamlined enterprise/cross-gov business processes/data/systems.14. Does this investment support a program assessed using the Program AssessmentRating Tool (PART)? (For more information about the PART, visitwww.whitehouse.gov/omb/part.) yesa. If "yes," does this investment address a weakness found during a PARTreview? yesb. If "yes," what is the name of the PARTed program? Pension BenefitGuaranty Corporationc. If "yes," what rating did the PART receive? Moderately Effective15. Is this investment for information technology? yesFor information technology investments only:16. What is the level of the IT Project? (per CIO Council PM Guidance) Level 2Exhibit 300 BY09 - PBGC - IT Business Transformation (Public FINAL).docPage 2 of 23 Pages

OMB Exhibit 300 Budget Year 2009PBGC – IT Business Transformation17. What project management qualifications does the Project Manager have? (per CIOCouncil PM Guidance) (1) Project manager has been validated as qualified forthis investment18. Is this investment or any project(s) within this investment identified as "high risk" onthe Q4-FY 2007 agency high risk report (per OMB Memorandum M-05-23)? no19. Is this a financial management system? noa. If "yes," does this investment address a FFMIA compliance area? [Notanswered]1. If "yes," which compliance area: N/A2. If "no," what does it address? N/Ab. If "yes," please identify the system name(s) and system acronym(s) asreported in the most recent financial systems inventory update required byCircular A-11 section 52 N/A20. What is the percentage breakout for the total FY2009 funding request for . If this project produces information dissemination products for the public, are theseproducts published to the Internet in conformance with OMB Memorandum 05-04and included in your agency inventory, schedules and priorities? n/a22. Contact information of individual responsible for privacy related questions:Philip HertzNamePhone Number202-326-4000[redacted]TitleDeputy General [email protected] Are the records produced by this investment appropriately scheduled with theNational Archives and Records Administration's approval? no24. Does this investment directly support one of the GAO High Risk Areas? noSection B: Summary of Spending1.Table 1: SUMMARY OF SPENDING FOR PROJECT PHASES(REPORTED IN MILLIONS)(Estimates for BY 1 and beyond are for planning purposes only and do not represent budget decisions)PY-1andearlierPYCYBYBY 12007 2008 2009 20101.300.5002.800BY 22011BY 32012BY 8.500 8.000 2.7001.321.30012.98Subtotal Planning0.329.800 8.500 5.5001.321.30013.776Exhibit 300 BY09 - PBGC - IT Business Transformation (Public FINAL).docPage 3 of 23 Pages

OMB Exhibit 300 Budget Year 2009PBGC – IT Business TransformationTable 1: SUMMARY OF SPENDING FOR PROJECT PHASES(REPORTED IN MILLIONS)(Estimates for BY 1 and beyond are for planning purposes only and do not represent budget decisions)PY-1andearlierBY 22011BY 32012BY 4andbeyondTotal0.100 3.000 3.6884.2864.831015.8539.800 9.100 8.500 5.0085.5864.831029.629PYCYBYBY 12007 2008 2009 2010& Acquisition:Operations &Maintenance:0TOTAL:0.320Government FTE Costs should not be included in the amounts provided above.Government FTECosts00Number of FTErepresented byCosts:000.500 0.500 0.5263330.526002.104300122. Will this project require the agency to hire additional FTE's? noa. If "yes", How many and in what year? N/A3. If the summary of spending has changed from the FY2008 President's budgetrequest, briefly explain those changes: This is the first submission for thisbusiness case.Section C: Acquisition/Contract Strategy1.Contracts/Task Orders Table:NEWContract or Task Order NumberFFPType of Contract/Task OrdernoHas the contract been awardedIf so what is the date of the award? Ifnot, what is the planned award date?Nov 1, 2007Start date of Contract/Task OrderNov 15, 2007End date of Contract/Task OrderSep 30, 2008Total Value of Contract/ Task Order( M)0.48Is this an Interagency Acquisition?yesIs it performance based?noCompetitively awarded?noWhat, if any, alternative financingoption is being used?NAIs EVM in the contract?noDoes the contract include the requiredsecurity & privacy clauses?yesSusan TaylorName of COCO Contact information(Telephone) 202-326-4100[redacted]; (email)Exhibit 300 BY09 - PBGC - IT Business Transformation (Public FINAL).docPage 4 of 23 Pages

OMB Exhibit 300 Budget Year 2009PBGC – IT Business TransformationContracts/Task Orders Table:[email protected] Officer Certification LevelIf N/A, has the agency determined theCO assigned has the competencies andskills necessary to support thisacquisition?[Not answered]Contract or Task Order NumberCT-05-0739Type of Contract/Task OrderT&MHas the contract been awardedyesIf so what is the date of the award? Ifnot, what is the planned award date?Aug 1, 2005Start date of Contract/Task OrderAug 1, 2005End date of Contract/Task OrderJul 31, 2010Total Value of Contract/ Task Order( M)2.34Is this an Interagency Acquisition?noIs it performance based?noCompetitively awarded?yesWhat, if any, alternative financingoption is being used?NAIs EVM in the contract?noDoes the contract include the requiredsecurity & privacy clauses?yesSusan TaylorName of COCO Contact information(Telephone) 202-326-4100[redacted]; (email)[email protected] Officer Certification Level3If N/A, has the agency determined theCO assigned has the competencies andskills necessary to support thisacquisition?[Not answered]Contract or Task Order NumberDO-06-0239Type of Contract/Task OrderFFPHas the contract been awardedYesIf so what is the date of the award? Ifnot, what is the planned award date?Sep 5, 2006Start date of Contract/Task OrderSep 5, 2006End date of Contract/Task OrderMar 31, 2008Total Value of Contract/ Task Order( M)0.186Is this an Interagency Acquisition?NoIs it performance based?YesCompetitively awarded?YesWhat, if any, alternative financingoption is being used?NAIs EVM in the contract?NoDoes the contract include the requiredsecurity & privacy clauses?YesName of COExhibit 300 BY09 - PBGC - IT Business Transformation (Public FINAL).docSusan TaylorPage 5 of 23 Pages

OMB Exhibit 300 Budget Year 2009PBGC – IT Business TransformationContracts/Task Orders Table:CO Contact information(Telephone) 202-326-4100[redacted]; (email)[email protected] Officer Certification LevelIf N/A, has the agency determined theCO assigned has the competencies andskills necessary to support thisacquisition?[Not answered]Contract or Task Order NumberDO-07-0080Type of Contract/Task OrderFFPHas the contract been awardedyesIf so what is the date of the award? Ifnot, what is the planned award date?Mar 2, 2007Start date of Contract/Task OrderMar 2, 2007Mar 31, 2008End date of Contract/Task OrderTotal Value of Contract/ Task Order( M)0.06Is this an Interagency Acquisition?noIs it performance based?yesCompetitively awarded?yesWhat, if any, alternative financingoption is being used?NAIs EVM in the contract?noDoes the contract include the requiredsecurity & privacy clauses?yesSusan TaylorName of COCO Contact information(Telephone) 202-326-4100[redacted]; (email)taylor.su[email protected] Officer Certification LevelIf N/A, has the agency determined theCO assigned has the competencies andskills necessary to support thisacquisition?Contract or Task Order NumberType of Contract/Task OrderHas the contract been awardedIf so what is the date of the award? Ifnot, what is the planned award date?3[Not answered]NEWFFPnoNov 1, 2007Start date of Contract/Task OrderNov 15, 2007End date of Contract/Task OrderMar 31, 2008Total Value of Contract/ Task Order( M)0.336Is this an Interagency Acquisition?noIs it performance based?yesCompetitively awarded?yesWhat, if any, alternative financingoption is being used?NAIs EVM in the contract?noDoes the contract include the requiredsecurity & privacy clauses?yesExhibit 300 BY09 - PBGC - IT Business Transformation (Public FINAL).docPage 6 of 23 Pages

OMB Exhibit 300 Budget Year 2009PBGC – IT Business TransformationContracts/Task Orders Table:Susan TaylorName of COCO Contact information(Telephone) 202-326-4100[redacted]; (email)[email protected] Officer Certification LevelIf N/A, has the agency determined theCO assigned has the competencies andskills necessary to support thisacquisition?Contract or Task Order Number[Not answered]CT-04-0687; TO-07-03Type of Contract/Task OrderT&MHas the contract been awardedyesIf so what is the date of the award? Ifnot, what is the planned award date?Oct 1, 2003Oct 1, 2006Start date of Contract/Task OrderSep 30, 2007End date of Contract/Task OrderTotal Value of Contract/ Task Order( M)0.653Is this an Interagency Acquisition?noIs it performance based?noCompetitively awarded?yesWhat, if any, alternative financingoption is being used?NAIs EVM in the contract?noDoes the contract include the requiredsecurity & privacy clauses?yesSusan TaylorName of COCO Contact information(Telephone) 202-326-4100[redacted]; (email)[email protected] Officer Certification LevelIf N/A, has the agency determined theCO assigned has the competencies andskills necessary to support thisacquisition?Contract or Task Order Number[Not answered]PBGC-DO-07-0241Type of Contract/Task OrderFFPHas the contract been awardedyesIf so what is the date of the award? Ifnot, what is the planned award date?Aug 14, 2007Start date of Contract/Task OrderAug 28, 2007End date of Contract/Task OrderDec 31, 2007Total Value of Contract/ Task Order( M)0.893Is this an Interagency Acquisition?noIs it performance based?yesCompetitively awarded?yesWhat, if any, alternative financingoption is being used?NAIs EVM in the contract?noDoes the contract include the requiredyesExhibit 300 BY09 - PBGC - IT Business Transformation (Public FINAL).docPage 7 of 23 Pages

OMB Exhibit 300 Budget Year 2009PBGC – IT Business TransformationContracts/Task Orders Table:security & privacy clauses?Susan TaylorName of COCO Contact information(Telephone) 202-326-4100[redacted]; (email)[email protected] Officer Certification LevelIf N/A, has the agency determined theCO assigned has the competencies andskills necessary to support thisacquisition?[Not answered]Contract or Task Order NumberDO-06-0287Type of Contract/Task OrderT&MHas the contract been awardedyesIf so what is the date of the award? Ifnot, what is the planned award date?Sep 27, 2006Start date of Contract/Task OrderSep 27, 2006End date of Contract/Task OrderSep 30, 2009Total Value of Contract/ Task Order( M)2.184Is this an Interagency Acquisition?noIs it performance based?noCompetitively awarded?yesWhat, if any, alternative financingoption is being used?NAIs EVM in the contract?yesDoes the contract include the requiredsecurity & privacy clauses?yesSusan TaylorName of COCO Contact information(Telephone) 202-326-4100[redacted]; (email)[email protected] Officer Certification LevelIf N/A, has the agency determined theCO assigned has the competencies andskills necessary to support thisacquisition?Contract or Task Order NumberType of Contract/Task OrderHas the contract been awarded3[Not answered]NEWFFPnoIf so what is the date of the award? Ifnot, what is the planned award date?Oct 15, 2007Start date of Contract/Task OrderOct 15, 2007End date of Contract/Task OrderSep 30, 2010Total Value of Contract/ Task Order( M)2.4Is this an Interagency Acquisition?noIs it performance based?yesCompetitively awarded?yesWhat, if any, alternative financingoption is being used?NAIs EVM in the contract?yesExhibit 300 BY09 - PBGC - IT Business Transformation (Public FINAL).docPage 8 of 23 Pages

OMB Exhibit 300 Budget Year 2009PBGC – IT Business TransformationContracts/Task Orders Table:Does the contract include the requiredsecurity & privacy clauses?yesSusan TaylorName of COCO Contact information(Telephone) 202-326-4100[redacted]; (email)[email protected] Officer Certification LevelIf N/A, has the agency determined theCO assigned has the competencies andskills necessary to support thisacquisition?[Not answered]NEWContract or Task Order NumberFFPType of Contract/Task OrdernoHas the contract been awardedIf so what is the date of the award? Ifnot, what is the planned award date?Oct 15, 2007Start date of Contract/Task OrderOct 15, 2007End date of Contract/Task OrderSep 30, 2011Total Value of Contract/ Task Order( M)11Is this an Interagency Acquisition?noIs it performance based?yesCompetitively awarded?yesWhat, if any, alternative financingoption is being used?NAIs EVM in the contract?yesDoes the contract include the requiredsecurity & privacy clauses?yesSusan TaylorName of COCO Contact information(Telephone) 202-326-4100[redacted]; (email)[email protected] Officer Certification LevelIf N/A, has the agency determined theCO assigned has the competencies andskills necessary to support thisacquisition?Contract or Task Order NumberType of Contract/Task OrderHas the contract been awarded3[Not answered]NEWFFPnoIf so what is the date of the award? Ifnot, what is the planned award date?Jun 1, 2008Start date of Contract/Task OrderJul 1, 2008End date of Contract/Task OrderTotal Value of Contract/ Task Order( M)Sep 30, 2011[redacted]Is this an Interagency Acquisition?NoIs it performance based?yesCompetitively awarded?yesWhat, if any, alternative financingoption is being used?NAExhibit 300 BY09 - PBGC - IT Business Transformation (Public FINAL).docPage 9 of 23 Pages

OMB Exhibit 300 Budget Year 2009PBGC – IT Business TransformationContracts/Task Orders Table:Is EVM in the contract?yesDoes the contract include the requiredsecurity & privacy clauses?yesSusan TaylorName of CO(Telephone) 202-326-4100[redacted]; (email)[email protected] Contact information3Contracting Officer Certification LevelIf N/A, has the agency determined theCO assigned has the competencies andskills necessary to support thisacquisition?[Not answered]2. If earned value is not required or will not be a contract requirement for any of thecontracts or task orders above, explain why: PBGC initiated EVM requirementson systems development contracts first. EVM is not required by the currentcontracts since they are not systems development contracts. EVM will berequired for the new contracts. EVM will be required by existing contractswhen they perform tasks for the ITBT DME tasks.3. Do the contracts ensure Section 508 compliance? yesa. Explain why: Section 508 Compliance is an explicit, mandatoryrequirement enforced by PBGC’s CO and supported by its Gen.Counsel and its CIO. PBGC’s Infrastructure Admin group conductscompliance review on new systems and documemts prior toimplementation/publication as part of approving the Change ControlRecord (CM Process). All policies, processes & procedures developedas part of this initiative will be developed using such 508 complianttools (i.e. MsOffice).4. Is there an acquisition plan which has been approved in accordance with agencyrequirements? yesa. If "yes," what is the date? Aug 31, 2007b. If "no," will an acquisition plan be developed? [Not answered]1. If "no," briefly explain why: N/ASection D: Performance InformationPerformance Information TableStrategicFiscalMeasurement Measurement ed20072008Goal 3 –Effective &efficientProcesses andstewardshipActivitiesof PBGC’sresourcesGoal 3 –Effective &efficientProcesses andActivitiesBaselineTargetSecurity# of Major# of C&As# of C&AsSystems and completed is 0 completed is 1GSS establish of the 11 C&As of the 11 C&Asbaseline C&Asrequired inrequired inin accordanceaccordanceaccordancewith (FISMA & with (FISMA & with (FISMA &NIST)NIST)NIST)Security# of Major# of C&AsSystems and completed is 1GSS establish of the 11 C&AsExhibit 300 BY09 - PBGC - IT Business Transformation (Public FINAL).doc# of C&Ascompleted is11 of the 11ActualResults1Data tobecompiledPage 10 of 23 Pages

OMB Exhibit 300 Budget Year 2009PBGC – IT Business TransformationPerformance Information TableStrategicFiscalMeasurement Measurement edstewardshipof ne C&Asrequired inC&As required at thein accordanceaccordancein accordance end ofwith (FISMA & with (FISMA & with (FISMA & FY 2008NIST)NIST)NIST)2008# out of a total15 selectCOBITprocessesGoal 3 –implementedEffective &with a targetedefficientProcesses and Innovation andCOBITstewardshipActivitiesImprovementmaturity Levelof PBGC’s3 - defined asresources"Processes aredocumentedandcommunicated"# of COBITprocessesimplementedthat achieveCOBITmaturity Level3 is 0 of the 15total processestargeted forimplementation# of COBITprocessesimplemented Data tothat achievebeCOBITcompiledmaturity Level at end3 is 2 of the 15 of FYtotal processes 2008targeted forimplementation2008Mission andBusinessResults# out of 8select COBITcontrolprocesses(subset of 15total) thatfocus in theareas of “PlanManagement and Organize”Improvement and “Monitorand Evaluate”achieve COBITmaturity Level3 - defined as"Processes aredocumentedandcommunicated"# of COBITprocessesimplemented inthe areas of“Plan andOrganize” and“Monitor andEvaluate” thatachieve COBITmaturity Level3 - defined as"Processes aredocumentedandcommunicated"is 0 of 8.# of COBITprocessesimplemented inthe areas of“Plan andOrganize” and Data tobe“Monitor andEvaluate” that compiledachieve COBIT at endof FYmaturity Level20083 - defined as"Processes aredocumentedandcommunicated"is 2 of 8.Technology# out of 7select COBITcontrolprocesses(subset of 15total) thatfocus in theareas of“Acquire &Implement”and “Deliver &Support”achieve COBITmaturity Level3 - defined as"Processes aredocumentedand# of COBITprocessesimplemented inthe areas of“Acquire &Implement”and “Deliver &Support” thatachieve COBITmaturity Level3 - defined as"Processes aredocumentedandcommunicated"is 0 of 7.# of COBITprocessesimplemented inthe areas of“Acquire &Data toImplement”beand “Deliver &Support” that compiledachieve COBIT at endof FYmaturity Level20083 - defined as"Processes aredocumentedandcommunicated"is 0 of 7.2008Goal 3 –Effective &efficientstewardshipof PBGC’sresourcesGoal 3 –Effective &efficientstewardshipof PBGC’sresourcesAvailabilityExhibit 300 BY09 - PBGC - IT Business Transformation (Public FINAL).docPage 11 of 23 Pages

OMB Exhibit 300 Budget Year 2009PBGC – IT Business TransformationPerformance Information TableStrategicFiscalMeasurement Measurement edBaselineTargetActualResultscommunicated"Goal 2 –exceptionalservice tocustomersandstakeholders2008Agency; Goal3 – effective& efficientstewardshipof on1% increase inData to% ofThe baselinepercentage ofcustomers whobewill becustomers whorate Help Deskcompileddetermined at rate Help DeskServices aboveat endthe end ofServices aboveaverage orof FYFY2007average orexcellent2008excellentSecurity# of Major# of C&As# of C&AsData toSystems andcompleted iscompleted isbeGSS establish11 of the 1111 of the 11compiledbaseline C&As C&As required C&As requiredat thein accordance in accordance in accordanceend ofwith (FISMA & with (FISMA & with (FISMA &FY 2009NIST)NIST)NIST)2009Goal 3 –Effective &efficientProcesses andstewardshipActivitiesof PBGC’sresources2009# out of a total15 selectCOBITprocessesGoal 3 –implementedEffective &with a targetedefficientProcesses and Innovation andCOBITstewardshipActivitiesImprovementmaturity Levelof PBGC’s3 - defined asresources"Processes aredocumentedandcommunicated"# of COBITprocessesimplementedthat achieveCOBITmaturity Level3 is 2 of the 15total processestargeted forimplementation# of COBITprocessesimplemented Data tothat achievebecompiledCOBITmaturity Level at end3 is 7 of the 15 of FYtotal processes 2009targeted forimplementation# out of 8select COBITcontrolprocesses(subset of 15total) thatfocus in theareas of “PlanManagement and Organize”Improvement and “Monitorand Evaluate”achieve COBITmaturity Level3 - defined as"Processes aredocumentedandcommunicated"# of COBITprocessesimplemented inthe areas of“Plan andOrganize” and“Monitor andEvaluate” thatachieve COBITmaturity Level3 - defined as"Processes aredocumentedandcommunicated"is 2 of 8# of COBITprocessesimplemented inthe areas of“Plan andOrganize” and Data tobe“Monitor andEvaluate” that compiledachieve COBIT at endmaturity Levelof FY3 - defined as2009"Processes aredocumentedandcommunicated"is 4 of 82009Goal 3 –Effective &efficientstewardshipof PBGC’sresourcesMission andBusinessResults2009Goal 3 –TechnologyAvailability# out of 7Exhibit 300 BY09 - PBGC - IT Business Transformation (Public FINAL).doc# of COBIT# of COBITData toPage 12 of 23 Pages

OMB Exhibit 300 Budget Year 2009PBGC – IT Business TransformationPerformance Information TableStrategicFiscalMeasurement Measurement edEffective &efficientstewardshipof PBGC’sresourcesGoal 2 –exceptionalservice tocustomersandstakeholders2009Goal 3 –effective &efficientstewardshipof PBGC’sresourcesselect COBITcontrolprocesses(subset of 15total) thatfocus in theareas of“Acquire &Implement”and “Deliver &Support”achieve COBITmaturity Level3 - defined as"Processes sesbeimplemented in compiledthe areas ofat end“Acquire &of FYImplement”2009and “Deliver &Support” thatachieve COBITmaturity Level3 - defined as"Processes aredocumentedandcommunicated"is 3 of 7.Security# of Major# of Major# of MajorData toSystems andSystems andSystems andbeGSS maintain GSS establish GSS establishcompiledC&As inbaseline C&As baseline C&Asat theaccordancein accordance in accordanceend ofwith (FISMA & with (FISMA & with (FISMA &FY 2010NIST)NIST)NIST)2010# out of a total15 selectCOBITprocessesGoal 3 –implementedEffective &with a targetedefficientProcesses and Innovation andCOBITstewardshipActivitiesImprovementmaturity Levelof PBGC’s3 - defined asresources"Processes aredocumentedandcommunicated"Mission n2010Goal 3 –Effective &efficientprocessesimplemented inthe areas of“Acquire &Implement”and “Deliver &Support” thatachieve COBITmaturity Level3 - defined as"Processes aredocumentedandcommunicated"is 0 of 7.Target1% increase in% ofData toThe baselinepercentage ofbecustomers whowill becustomers whorate Help Deskcompileddetermined at rate Help DeskServices aboveat endthe end ofServices aboveaverage orof FYFY2008average orexcellent2009excellentGoal 3 –Effective &efficientProcesses andstewardshipActivitiesof # out of 8select COBITcontrolExhibit 300 BY09 - PBGC - IT Business Transformation (Public FINAL).doc# of COBIT# of COBITprocessesprocessesimplementedimplementedData tothat achievethat achievebeCOBITCOBITcompiledmaturity Levelmaturity Levelat end3 is 12 of the3 is 7 of the 15of FY15 total2010total processesprocessestargeted fortargeted forimplementationimplementation# of COBIT# of COBITData toprocessesprocessesbeimplemented in implemented in compiledPage 13 of 23 Pages

OMB Exhibit 300 Budget Year 2009PBGC – IT Business TransformationPerformance Information TableStrategicFiscalMeasurement Measurement edstewardshipof PBGC’sresources2010Goal 3 –Effective &efficientstewardshipof PBGC’sresourcesGoal 2 –exceptionalservice tocustomersandstakeholders;2010Goal 3 –effective &efficientstewardshipof PBGC’sresources2011processes(subset of 15total) thatfocus in theareas of “Planand Organize”and “Monitorand Evaluate”achieve COBITmaturity Level3 - defined as"Processes ultsGoal 3 –Effective &efficientProcesses andstewardshipActivitiesof PBGC’sresourcesBaselineTargetActualResultsthe areas of“Plan andOrganize” and“Monitor andEvaluate” thatachieve COBITmaturity Level3 - defined as"Processes aredocumentedandcommunicated"is 4 of 8the areas ofat end“Plan andof FYOrganize” and2010“Monitor andEvaluate” thatachieve COBITmaturity Level3 - defined as"Processes aredocumentedandcommunicated"is 6 of 8# of COBITprocessesimplemented inthe areas of“Acquire &Implement”and “Deliver &Support” thatachieve COBITmaturity Level3 - defined as"Processes aredocumentedandcommunicated"is 3 of 7# of COBITprocessesimplemented inthe areas of“Acquire &Implement”Data toand “Deliver &beSupport” that compiledachieve COBIT at endmaturity Levelof FY20103 - defined as"Processes aredocumentedandcommunicated"is 6 of 7Availability# out of 7select COBITcontrolprocesses(subset of 15total) thatfocus in theareas of“Acquire &Implement”and “Deliver &Support”achieve COBITmaturity Level3 - defined as"Processes % increase in% ofData toThe baselinepercentage ofcustomers whobewill becustomers whorat

OMB Exhibit 300 Budget Year 2009 PBGC – IT Business Transformation Exhibit 300 BY09 - PBGC - IT Business Transformation (Public FINAL).doc Page 2 of 23 Pages issues for approx. 32.4 M over a 5-year period, completed by FY11. All costs are covered