Federal IT Flunks Out

By Allan Holmes
Mon, May 15, 2006

CIO

Last December, about 60 people—members of the IT staff at the U.S. Transportation Department and friends—gathered in a large conference room in the agency’s Washington, D.C., headquarters to say goodbye to Dan Matthews, Transportation’s CIO for nearly three years. Matthews was leaving to work for Lockheed Martin. John Flaherty, chief of staff for Transportation Secretary Norman Mineta, stood up to say a few words about Matthews’ accomplishments, pointing out that Matthews was always quick to help Mineta when his BlackBerry wasn’t working.

Flaherty wasn’t kidding.

A number of people present saw Flaherty’s comment as a perfect illustration of why IT at the federal level is so troubled. Government CIOs are still seen as guys who fix BlackBerrys.

"Agency executives know that CIOs provide a vital resource to organizations—they just don’t know what it is," Matthews wrote in an e-mail about the incident.

If you’re thinking there oughta be a law against that kind of antediluvian attitude, there is. The Clinger-Cohen Act, passed in a rare act of bipartisanship 10 years ago, outlined steps that were designed to cast federal CIOs in the role of strategists who could help agencies formulate new business processes to streamline operations, improve the delivery of public services and reduce the risk of system disasters that test citizens’ faith in government—and, from time to time, put their lives in danger. Officially known as the Information Technology Management Reform Act of 1996 (and later renamed the Clinger-Cohen Act after Rep. William Clinger and Sen. William Cohen, who pushed the legislation through), the law demanded that federal agencies follow corporate America’s best practices for managing IT. Agencies were required to hire a CIO, institute investment controls and establish performance goals and metrics to measure progress. The law was hailed as the tool that would finally fix federal IT.

"We really thought we had it nailed," says Paul Brubaker, one of the lead authors of the law when he worked as a Republican staff director for Cohen. "We were going to change the way government managed IT and in doing so, possibly change government."

Obviously, that hasn’t happened.

Roots of the Problem

Federal IT systems are still failing at an alarming rate nearly 10 years after Clinger-Cohen was signed into law by President Clinton. For example, of 16 IT projects in the Federal Aviation Administration’s massive 25-year-old modernization program, 13 are over budget, ranging from $1.1 million to $1.5 billion, according to the Government Accountability Office. The Army’s Future Combat System—a fully integrated set of networks to deliver real-time information to the battlefield through sensors that pinpoint high-tech weapons—could come in as much as $130 billion over its original 2001 budget estimate of $70 billion. The Interior Department’s IT systems have proved so insecure that over the past three years a federal judge has repeatedly ordered the department to shut down all its Internet access. The list goes on, with the IRS’s repeated failures to modernize and the disaster of the FBI’s virtual case file system merely two of the most well-publicized examples.

Continue Reading

Learn how your answer to this question compares to your peers by taking this quick poll. See how your peers are dealing with the challenge of ensuring a highly capable server infrastructure as technological shifts impact the application server platform.
With increasing data growth, comes increased need for data security.  The existing DLP model, with a focus on compliance/enforcement is not sufficient as the data discovery and classification capabilities are not granular enough.  Read this paper to find how you can efficiently and accurately manage your risk by rapidly inventorying and classifying your data and then developing remediation workflows that support business needs. 
This paper breaks down attack sources into four categories: external, malicious insiders, accidental insiders, and unknown.
The rapid growth of data and technology is creating challenges for organizations as this digital data is considered to be business communications and must be preserved according the same industry-specific regulations governing the retention and discovery of emails and more traditional forms of electronic communications. This paper examines the role that Data Loss Prevention ("DLP") technology can play in helping organizations address the challenges of locating information in response to electronic discovery.
This research, conducted by the Ponemon Institute, focuses on issues relating to the use of data protection solutions such as endpoint encryption and data loss prevention within the workplace.
This report, by Jon Oltsik from Enterprise Strategy Group, examines the need for a new business-centric approach to DLP in order to align business and security requirements.
As greater numbers of datacenter servers transition from the physical to the virtual world, the components of virtualization success come to the fore. What scores of organizations have discovered is that success is derived from an optimal pairing of the right software platform with the right hardware platform.
Have you been looking to hear about customer's experiences with the new VMware vCenter Site Recovery Manager product? View this webcast to learn about VMware customer, Navicure, and their experiences testing and evaluating the recovery manager, their progress in implementing it in their environment and their advice other customers considering using vCenter.
Many enterprises have discovered that the use of virtualization to support desktop workloads creates a range of significant benefits. These benefits include price efficiencies, improved IT management and greater agility and choice for end users.

This VMware sponsored webcast with IDC will provide both quantitative measurement of the business value -- defined as the expected ROI -- and qualitative analysis associated with the use of VMware View™. IDC will also provide an analysis of the View Composer and ThinApp™ features of VMware View, including the business value of these solutions and an overview of how they work.

Attend this webcast to learn about:
- Challenges and barriers that might impede the adoption of desktop virtualization
- Navigating roadblocks to facilitate a strategic implementation
- Optimizing qualitative and quantitative benefits to IT and your business
VMware recently announced VMware vFabric™ Data Director, a new database deployment and operations platform that enables enterprise IT organizations to offer database as a private cloud service. Built on top of VMware vSphere 5, vFabric Data Director enables IT organizations to ontrol database sprawl through automation and consistent policy enforcement and accelerate application development cycles with self-service database management. Attend this webcast to learn how vFabric Data Director can help you build database-as-a-service in your datacenter.
A simple, cost-effective disaster-recovery solution for virtual environments is high on the agenda for IT organizations as they virtualize more business-critical applications with VMware. VMware vCenter™ Site Recovery Manager-the market-leading disaster-recovery product-ensures the simplest and most reliable disaster protection for all virtualized applications. VMware vCenter Site Recovery Manager provides centralized management of recovery plans, enables nondisruptive testing and automates site-failover processes.
Traditional disaster recovery solutions are often too expensive, complex and unreliable to meet business requirements. As a result, IT departments are hesitant to expand disaster protection beyond their most critical applications, largely because they are uncertain whether the quality of the protection is really worth its cost. VMware vCenter™ Site Recovery Manager 5 is the market-leading disaster recovery product that addresses this situation for organizations of all kinds. It complements VMware vSphere to ensure the simplest and most reliable disaster protection for all virtualized applications.
Newsletter Sign-Up »

Receive the latest news test, reviews and trends on your favorite technology topics

Choose a newsletter
  1. View all Newsletters | Privacy Policy
Resource Center