HHS Trusted Internet Connection Access Provider (TICAP) Steering Committee Charter

June 23, 2008

HHS-OCIO-2008-0002.001C 

Table of Contents

1. Purpose
2. Vision and Mission
3. Scope
4. Responsibilities
5. Membership
6. Meetings
7. Meeting Minutes
8. Agenda Items
9. Voting Task Force Members
10. Reports
11. Approval
Attachment 1 -Glossary of Terms

1. Purpose

The Trusted Internet Connection Steering Committee (TICSC) for the Trusted Internet Connection Access Provider (TICAP) serves as the Department of Health and Human Services’ (HHS) governing body for the HHS Trusted Internet Connections (TIC) initiative. This is a short term steering committee that will define roles and responsibilities and outline ongoing operations such as governance, change control, and business practices. It is envisioned once this initial approach is approved by the CIO Council, other formal teams with specific areas of expertise will fill those roles as defined by this steering committee to handle on going operations such as business, billing, etc.

The TICSC acts to establish the TICAP, performs quality assurance relative to TICAP performance, reviews TICAP funding, and recommends policy.  The TICSC will present recommendations and proposals to the HHS Chief Information Officer (CIO) Council for authorization and funding.

This Steering Committee will: 

• Establish the TICAP organization;
• Establish baseline TICAP performance measurements;
• Establish a sustainable funding model to support TICAP;
• Report on the TICAP’s performance, progress and funding;
• Review and authorize TICAP involvement within the HHS and OPDIV Enterprise Architecture processes; and
• Review and authorize TICAP involvement with external agencies.

2. Vision and Mission

The vision of this charter is to ensure that critical resources are available and engaged to conduct the necessary analysis, to provide direction and to perform the planning that enables HHS to become a Trusted Internet Connection Provider and provide portal access for the Federal Government.

The mission of this charter is to establish an HHS TICSC to evaluate, analyze, and provide oversight and guidance in determining the requirements of the TICAP, its business, operational and governance strategies.  Upon the completion of the above goals, the TICSC will develop the business case and support the development of the Project Plan that will support the HHS TICAP initiative.

3. Scope

The principles, guidelines and processes described in the TICAP Charter are applicable to all Department of Health and Human Services organizational Components (Operating Divisions).  In response to the Office of Management and Budget (OMB) Memorandum M-08-05, dated November 20, 2007, HHS will adopt a network and security architecture for all external connections to include the Internet and all inter-agency, partner, contractor, educational, health and research connectivity that reduces the total number of Internet connections and complies with the Department of Homeland Security (DHS) requirements.

The TICAP will consist of the following three groups:

• The Business Units
• Technical Support Services
  • Information Technology Operations
  • OPDIV Infrastructure support offices
• Department of Homeland Security (DHS)

These three groups will interface with the software product Einstein used by DHS for intrusion detection across all TICAP providers that will also handle the security activities of the TICAP.

The TICSC shall identify/enumerate TIC related roles and responsibilities of the Business Units, Technical Support & Services, and Department of Homeland Security.  The description of the specific areas of responsibility will be a deliverable of this steering committee.

4. Responsibilities

The TICSC shall establish liaison memberships to designated representatives of major HHS enterprise-wide investment initiatives, or other initiatives where information sharing and decision-collaboration are beneficial.  The HHS CIO Council shall consider recommendations for liaison membership from the TICSC members and from other sources.  The CIO shall advise the Task Force of planned appointments of new liaison representation to the Task Force.

Once established the Task Force will determine its Chair or optionally Co-Chairs.

The TICAP TICSC Charter will be reviewed by the TICSC to ensure it’s consistent with the intended functions of the TICSC as directed by the CIO Council.  The charter may be amended to reflect the developing purpose, mission, and business objectives specific to the TICAP.  The TICSC may, by majority vote, amend this Charter providing such amendment does not substantially alter the intended purpose of this body.  The Charter may be amended to add additional types of membership to the organization.   Substantial changes to the Charter shall be authorized through the Department’s standard authorization procedures.

The TICSC will initially provide overall direction to the Requirements Phase of the TICAP that will be developed incrementally, as defined and recommended by the HHS Enterprise Performance Life Cycle (EPLC). These incremental steps include the following:

• Determine Requirements Definition
• Perform Alternative Analysis / Cost Benefits Analysis
• Recommendation of Selected Alternative
• Business Case Development
• Requirements Implementation Plan
• Requirement Proof-of-Concept Testing Plan
• TIC Implementation Project Plan

5. Membership

The Chief Information Officer (CIO) of each Operating Division (OPDIV) at their option shall appoint the OPDIV’s Lead to represent their OPDIV on the TICSC. Participating members will be senior-level personnel who have full voting authority to represent their respective OPDIV regarding the TICAP efforts.  The members will have a broad knowledge and direct involvement with their OPDIV’s planning, development and implementations, IT investment portfolio, and E-Government initiatives to support the HHS goals and objectives.

If a need for representation from additional organizations is identified and approved by the TICSC, the Charter may be amended to include these individuals.  If the existing representative leaves, the OPDIV will be responsible for appointing a qualified replacement within the week and notifying the TICAP Chair/Co-chair.

The following OPDIVs constitute the initial voting membership of the Task Force:

• Centers for Disease Control and Prevention (CDC)
• Centers for Medicare & Medicaid Services (CMS)
• Food and Drug Administration (FDA)
• Indian Health Service (IHS)
• National Institutes of Health (NIH)
• One or more representatives each having one vote, as designated by the HHS Office of the CIO, from the small OPDIVs group consisting of: