Summary

The Department of Veterans Affairs (VA), has not fully implemented critical provisions of the Clinger-Cohen Act and other legislative reforms that provide guidance on how agencies should plan, manage, and acquire information technology. Although VA has taken some initial steps, it has not adequately implemented these legislative reforms. Specifically, the Clinger-Cohen Act requires agencies to analyze their mission-related and administrative processes, and on the basis of this analysis, review and improve these processes before making significant investments in supporting information technology. Although GAO's business process reengineering guide states that agencies should have an overall business process improvement strategy to accomplish reengineering, VA has not developed such a strategy. VA also has not yet defined the departmentwide integrated information technology architecture needed to efficiently utilize information systems across the agency.

GAO noted that: (1) VA has not fully implemented critical provisions of the Clinger-Cohen Act and other legislative reforms; (2) although VA has taken some initial steps, it has not adequately implemented these legislative reforms; (3) specifically, the Clinger-Cohen Act requires agencies to analyze their mission-related and administrative processes, and on the basis of this analysis, revise and improve these processes before making significant investments in supporting information technology; (4) although GAO's business process reengineering guide states that agencies should have an overall business process improvement strategy to accomplish reengineering, VA has not developed such a strategy; (5) VA also has not yet defined the departmentwide integrated information technology architecture needed to efficiently utilize information systems across the department; (6) in addition, VA has not institutionalized a disciplined process for selecting, controlling, and evaluating information technology as investments as required by the Clinger-Cohen Act; (7) specifically, VA decisionmakers did not have current and complete information such as cost, benefit, schedule, risk, and performance data at the project level, which is essential to making sound investment decisions; (8) in addition, VA's process for controlling and evaluating its investment portfolio is incomplete and, as a result, decisionmakers do not have the information needed to: (a) detect or avoid problems early; and (b) improve VA's investment process; (9) as a consequence, the department does not know whether it is making the right investments, how to control these investments effectively, or whether these investments have provided mission-related benefits in excess of their costs; (10) although the Clinger-Cohen Act requires agencies' CIOs to have information management as their primary duty, the responsibilities of VA's CIO are not limited primarily to information management; (11) instead, the CIO also functions as the department's Assistant Secretary for Management and Chief Financial Officer; and (12) as a result, information technology issues are not addressed promptly.