Select

Within the "select" component of the capital planning and investment control process, an agency is to:

1. evaluate each investment to determine whether the investment will support core mission functions,

2. demonstrate a projected return on the investment that is clearly equal to or better than alternative uses of available public resources,

3. prepare and update a benefit-cost analysis for each information system throughout its life cycle,

4. prepare and maintain a portfolio of major information systems,

5. ensure consistency with the agency's EA,

6. establish oversight mechanisms to ensure continuing security and availability of systems and their data, and

7. ensure that improvements to existing information systems and the development of planned information systems do not necessarily duplicate IT capabilities within the same agency.

Control

Within the "control" component of the capital planning and investment control process, an agency is to:

1. institute performance measures and management processes that monitor actual performance compared to expected results,

2. establish oversight mechanisms that require periodic review of information systems to determine whether the information systems continue to fulfill ongoing and anticipated mission requirements,

3. ensure that major information systems proceed in a timely fashion toward agreed-upon milestones,

4. prepare and update a strategy that identifies and mitigates risks associated with each information system, and

5. ensure that agency EA procedures are being followed.

Evaluate

Within the "evaluate" component of the capital planning and investment control process, an agency is to:

1. conduct post-implementation reviews of information systems and information resource management processes to validate estimated benefits and costs and to document effective management practices for broader use;

2. evaluate systems to ensure positive return on investment and to decide whether continuation, modification, or termination of the systems is necessary to meet agency mission requirements;

3. document lessons learned from the post-implementation reviews;

4. reassess an investment's technical compliance and compliance with EA; and

5. update the EA and IT capital planning processes as needed.

Source: The Office of Management and Budget.