Program Description (one to two paragraphs) Description of IT Capability or Modernization (one or two paragraphs) REQUIREMENTS LEVIED ON ALL PROGRAMS THAT ACQUIRE IT, INCLUDING NSS, AT ANY ACAT LEVEL DoDI 5000.02 January 7, 2015 – Table 9. CCA Compliance Actions Required to Comply With the CCA (Subtitle III of title Applicable Program Documentation2 40 of U.S. Code (Reference (p)))1 1. Make a determination that the acquisition supports core, priority functions of ICD, IS ICD, Problem Statement for a DBS, or urgent need the DoD.3 requirements documents 2. Establish outcome-based performance measures linked to strategic goals.3, ICD, IS ICD, CDD, CPD, AoA, APB 4 3. Redesign the processes that the system supports to reduce costs, improve ICD, IS ICD, Concept of Operations, AoA, Business Process effectiveness and maximize the use of commercial off-the-shelf technology.3, Reengineering 4 4. Determine that no private sector or government source can better support Acquisition Strategy, AoA the function.4, 5 5. Conduct an analysis of alternatives.4, AoA 5 6. Conduct an economic analysis that includes a calculation of the return Component Cost Estimate, Program Economic Analysis for on investment; or for non-AIS programs, conduct a life-cycle cost estimate.4, MAIS programs 5 7. Develop clearly established measures and accountability for Acquisition Strategy, APB, TEMP program progress.4 8. Ensure that the acquisition is consistent with the DoD Information Enterprise CDD NR-KPP, CPD NR-KPP, ISP policies and architecture, to include relevant standards.4 9. Ensure that the program has a Cybersecurity Strategy that is consistent with Cybersecurity Strategy, Program Protection Plan, Risk DoD policies, standards and architectures, to include relevant standards.4 Management Framework Security Plan 10. Ensure, to the maximum extent practicable, (1) modular contracting has been used, and (2) the program is being implemented in phased, successive Acquisition Strategy increments, each of which meets part of the mission need and delivers measurable benefit, independent of future increments.4 11. Register Mission-Critical and Mission-Essential systems with the DoD CIO.4, DoD Information Technology Portfolio Repository 6
Program Description (one to two paragraphs) Description of IT Capability or Modernization (one or two paragraphs) REQUIREMENTS LEVIED ON ALL PROGRAMS THAT ACQUIRE IT, INCLUDING NSS, AT ANY ACAT LEVEL DoDI 5000.02 – January 7, 2015 Table 9. CCA Compliance Actions Required to Comply With the CCA (Subtitle III of title 40 of U.S. Code (Reference (p)))1 Applicable Program Documentation2 1. Make a determination that the acquisition supports core, priority functions of the DoD.3 ICD, IS ICD, Problem Statement for a DBS, or urgent need requirements documents 2. Establish outcome-based performance measures linked to strategic goals.3, 4 ICD, IS ICD, CDD, CPD, AoA, APB 3. Redesign the processes that the system supports to reduce costs, improve effectiveness and maximize the use of commercial off-the-shelf technology.3, 4 ICD, IS ICD, Concept of Operations, AoA, Business Process Reengineering 4. Determine that no private sector or government source can better support the function.4, 5 Acquisition Strategy, AoA 5. Conduct an analysis of alternatives.4, 5 AoA 6. Conduct an economic analysis that includes a calculation of the return on investment; or for non-AIS programs, conduct a life-cycle cost estimate.4, 5 Component Cost Estimate, Program Economic Analysis for MAIS programs 7. Develop clearly established measures and accountability for program progress.4 Acquisition Strategy, APB, TEMP 8. Ensure that the acquisition is consistent with the DoD Information Enterprise policies and architecture, to include relevant standards.4 CDD NR-KPP, CPD NR-KPP, ISP 9. Ensure that the program has a Cybersecurity Strategy that is consistent with DoD policies, standards and architectures, to include relevant standards.4 Cybersecurity Strategy, Program Protection Plan, Risk Management Framework Security Plan 10. Ensure, to the maximum extent practicable, (1) modular contracting has been used, and (2) the program is being implemented in phased, successive increments, each of which meets part of the mission need and delivers measurable benefit, independent of future increments.4 Acquisition Strategy 11. Register Mission-Critical and Mission-Essential systems with the DoD CIO.4, 6 DoD Information Technology Portfolio Repository