TREASURY DIRECTIVE 84-01

Date: March 7, 2002

Sunset Review: March 7, 2006

SUBJECT: Information System Life Cycle (ISLC)

1. PURPOSE. This Directive states policy and assigns responsibilities for the use of an information system life cycle management methodology to develop, acquire, and maintain information systems. This Directive also authorizes the issuance of Treasury Department Publication (TD P) 84-01, "Information System Life Cycle Manual," which contains the methodology.

2. SCOPE. This directive applies to Treasury bureaus and offices, the Office of Inspector General, the Office of Treasury Inspector General for Tax Administration, and contractors doing business with the Department of the Treasury.

3. POLICY. It is the policy of the Department of the Treasury:

a. to use a systematic life cycle management methodology for the development, enhancement, maintenance and termination of information systems;

b. that the need for information systems be aligned with each bureau's mission and that the need for such systems be justified in bureaus' strategic and capital planning processes and funded in appropriate organizational information technology budgets;

c. to manage information systems as investments and use a capital planning and investment management process to select, control, and evaluate information systems projects;

d. that the development of information systems be in compliance with all mandatory and other recognized standards and guidelines to the extent they are determined to be cost-effective and appropriate for the intended use;

e. that a configuration management program be used to monitor system changes and ensures appropriate documentation is established and maintained throughout the system life cycle;

f. that any system (hardware and associated application software) be approved through a certification and accreditation process prior to operational use;

g. to retain all deliverables for as long as the information system is operational in order to document the project management planning and decision-making processes to interested parties, ensuring that the retention period for deliverables does not conflict with existing requirements for record retention; and

h. to ensure that security and privacy issues are addressed when developing information systems.

 4. RESPONSIBILITIES.

a. The Deputy Assistant Secretary (Information Systems) (DASIS) is responsible for establishing policies, procedures, and standards to manage information systems projects more effectively, efficiently, and economically.

b. The Heads of Bureaus; the Chief, Office of Management and Administrative Programs; the Inspector General; and the Inspector General for Tax Administration are encouraged to supplement ISLC standards to meet specific requirements and, as it relates to their respective bureaus and offices, shall:

(1) adhere to Departmental ISLC policies, procedures, and standards and establish implementation procedures as necessary under applicable law;

(2) ensure adequate participation when validating the need for the system or enhancement;

(3) ensure that the benefits of the system or enhancement justify its costs;

(4) ensure that all operational systems have approval to operate through the certification and accreditation process;

(5) ensure that a configuration management program exists; and

(6) ensure that systems are developed, enhanced, maintained and terminated in accordance with procedures in TD P 84-01.

c. The Chief Information Officers shall:

(1) establish an investment management review process to document the need and justify funding for information systems projects;

(2) apply business process reengineering techniques prior to information systems development efforts when practicable;


(3) encourage prototyping and pilots to help define functional requirements and develop information systems in a modular manner;

(4) use the Information Technology Investment Portfolio System to track information systems investments;

(5) establish and manage an entity-wide configuration management program;

(6) establish and manage an entity-wide certification and accreditation process;

(7) explicitly address the security of all sensitive information throughout system life cycles and document the same in security and disaster recovery plans; and

(8) implement a robust architecture to migrate to a standards-based open system environment to ensure compatibility with the information technology standards and products in the Treasury Enterprise Architecture Framework.

5. PROCEDURES. Detailed guidelines are set forth in TD P 84-01, "Information System Life Cycle Manual," which may be obtained through the Treasury Intranet.

6. CANCELLATION. TD 84-01, "Information System Life Cycle," dated August 11, 1994, is superseded.

7. AUTHORITIES.

a. P.L. 104-106, "Information Technology Management Reform Act (ITMRA) of 1996," also known as the Clinger-Cohen Act.

b. P.L. 99-591, "Paperwork Reduction Act Reauthorization," as amended.

c. P.L. 105-220, "Workforce Rehabilitation Investment Act," and Section 508 of the Rehabilitation Act.

d. P.L. 105-277, "Government Paperwork Elimination Act."

e. P.L. 104-231, "Electronic Freedom of Information," as amended.

f. P.L. 103-62, "Government Performance and Results Act."

g. P.L. 100-235, "Computer Security Act."

h. 36 CFR Part 1222, "Creation and Maintenance of Records."

i. OMB Circular A-119, "Federal Participation in the Development and Use of Voluntary Consensus Standards and in Conformity Assessment Activities."

j. OMB Circular A-130, "Management of Federal Information Resources."

8. REFERENCES.

a. Treasury Directive 25-04, "The Privacy Act of 1974, as Amended."

b. Treasury Directive 71-10, "Department of the Treasury Security Manual."

c. Treasury Directive 80-05, "Records and Information Management Program."

d. Treasury Directive 81-01, "Treasury Information Technology (IT) Programs."

e. Treasury Order 102-10, "Designation of Chief Information Officer for the Department of the Treasury."

9. OFFICE OF PRIMARY INTEREST. Office of Information Technology Policy and Strategy, Office of the Deputy Assistant Secretary (Information Systems)/Chief Information Office (DASIS/CIO), Office of the Assistant Secretary for Management and Chief Financial Officer.

/S/
Edward R. Kingman, Jr.
Assistant Secretary for Management
and Chief Financial Officer