The Status of Enterprise Architecture and Information Technology
Investment Management in the Department of Justice
Audit Report 06-02
Office of the Inspector General
We have audited the Department's management of Enterprise Architecture and IT investments. The audit was conducted in accordance with Government Auditing Standards. As required by the standards, we reviewed management processes and records to obtain reasonable assurance about the Department's compliance with laws and regulations that, if not complied with, in our judgment could have a material effect on Department operations. Compliance with laws and regulations applicable to the Department's handling of Enterprise Architecture and IT investments is the responsibility of the Department's management.
Our audit included examining, on a test basis, evidence about laws and regulations. The specific laws and regulations against which we conducted our tests are contained in the relevant portions of the Clinger-Cohen Act of 1996, OMB Circular A-11 § 300, and OMB Circular A-130.
The Clinger-Cohen Act of 1996:
OMB Circular A-11, § 300:
OMB Circular A-130:
As noted in the Finding and Recommendations section of our report, the Department has not yet established an Enterprise Architecture or ITIM processes and therefore is not in compliance with the Clinger-Cohen Act, OMB guidance, and Department regulations. However, the Department is actively developing and implementing new frameworks aimed at establishing an Enterprise Architecture and ITIM processes in the future. Also, some Department components, such as the FBI and the DEA, have made progress in developing component-level Enterprise Architectures and ITIM processes.