#aafth ,,congress #b;d ,session ,s4 #bccf ,,an ,,act ,to improve the management of information technology projects and investments of the ,department of ,veterans ,affairs1 and for other purposes4 #a4 ,short title ,this ,act may be cited as the ,department of ,veterans ,affairs ,information ,technology ,reform ,act of #bjai4 #b4 ,management of ,department of ,veterans ,affairs information technology projects 7a7 ,update of review process and ,information ,technology ,dashboard ,chief ,information ,officer ratings 7#a7 ,in general ,not later than #ahj days after the date of the enactment of this ,act1 the ,secretary of ,veterans ,affairs shall update the review process for information technology projects of the ,department of ,veterans ,affairs to ensure that active risks are factored into the ,information ,technology ,dashboard ,chief ,information ,officer ratings4 7#b7 ,review by ,comptroller ,general of the ,united ,states ,not later than one year after the date on which the ,secretary completes updating the review process under paragraph 7#a71 the ,comptroller ,general of the ,united ,states shall complete a review such process4 7b7 ,annual report on project budget discrepancies 7#a7 ,in general ,each fiscal year1 not later than #abj days after the end of the previous fiscal year1 the ,secretary shall submit to the ,committee on ,veterans' ,affairs of the ,senate and the ,committee on ,veterans' ,affairs of the ,house of ,representatives a report on covered information technology projects of the ,department with respect to which the amounts that were obligated and the amounts expended by the ,department in that fiscal year were1 in aggregate1 #aj percent or more greater or less than the amount budgeted for the project in that fiscal year4 7#b7 ,covered information technology projects ,for purposes of this subsection1 a covered information technology project of the ,department is an information technology project of the ,department for which the ,secretary estimates the ,department will expend or obligate #be1jjj1jjj or more for development and sustainment over a three-year lifecycle4 7#c7 ,mitigation plans ,each report submitted under paragraph 7#a7 shall include1 for each project described in the report1 a plan to rectify the budget discrepancy and improve the accuracy of the budget formulation process of the ,department4 #c4 ,plan for expenditures relating to ,department of ,veterans ,affairs information technology projects and investments 7a7 ,plan required 7#a7 ,in general ,the ,secretary of ,veterans ,affairs shall submit to the appropriate committees of ,congress a plan for expenditures of the ,department of ,veterans ,affairs relating to large information technology projects and investments4 7#b7 ,contents ,the report submitted under paragraph 7#a7 shall include the following3 7,a7 ,identification of each information technology project and investment planned by the ,secretary for which the ,secretary estimates the ,department will expend or obligate #be1jjj1jjj or more for development and sustainment over a three-year lifecycle4 7,b7 ,for each such project and investment1 a description of-- 7i7 the functional and performance capabilities to be delivered and the mission benefits to be realized2 7ii7 the estimated lifecycle cost1 including estimates for development as well as maintenance and operations2 and 7iii7 key milestones to be met4 7,c7 ,demonstration that each project and investment is-- 7i7 consistent with the ,information ,technology ,modernization ,plan of the ,department1 or successor plan2 7ii7 being managed in accordance with applicable lifecycle management policies and guidance2 and 7iii7 subject to applicable planning and investment control requirements of the ,department4 7,d7 ,a statement as to whether the plan has been reviewed by the ,comptroller ,general of the ,united ,states4 7b7 ,definition of appropriate committees of ,congress ,in this section1 the term appropriate committees of ,congress means-- 7#a7 the ,committee on ,veterans' ,affairs and the ,committee on ,appropriations of the ,senate2 and 7#b7 the ,committee on ,veterans' ,affairs and the ,committee on ,appropriations of the ,house of ,representatives4 #d4 ,budget justification for ,department of ,veterans ,affairs information technology programs ,the ,secretary of ,veterans ,affairs shall ensure that whenever the budget justification materials are submitted to ,congress in support of the ,department of ,veterans ,affairs budget for a fiscal year 7as submitted with the budget of the ,president for such fiscal year under section #aaje7;a7 of title #ca1 ,united ,states ,code71 such budget justification materials include a specific accounting1 including life cycle costs1 of all funds requested for the information technology programs of the ,department4 #e4 ,department of ,veterans ,affairs compliance with ,office of ,management and ,budget ,data ,center ,optimization ,initiative 7a7 ,requirement ,the ,secretary of ,veterans ,affairs shall ensure that the ,department of ,veterans ,affairs complies with all applicable requirements of the ,data ,center ,optimization ,initiative 7,,dcoi7 of the ,office of ,management and ,budget1 including by-- 7#a7 fully identifying the data center inventory of the ,department2 and 7#b7 meeting any targets assigned by the ,director of the ,office of ,management and ,budget pursuant to such initiative regarding data center closures1 optimization savings1 and optimization metrics4 7b7 ,plan for compliance ,not later than #ij days after the date of the enactment of this ,act1 the ,secretary shall submit to the ,committee on ,veterans' ,affairs of the ,senate and the ,committee on ,veterans' ,affairs of the ,house of ,representatives a plan to fully comply with the requirements described in subsection 7a74 7c7 ,annual report ,not later than ,march #ca1 #bjbj1 and in ,march of each year thereafter until the date on which the ,director of the ,office of ,management and ,budget determines that the ,department is in full compliance with the requirements of the initiative referred to in subsection 7a71 the ,secretary shall submit to the ,committee on ,veterans' ,affairs of the ,senate and the ,committee on ,veterans' ,affairs of the ,house of ,representatives a report on the progress of the ,secretary in carrying out the plan submitted under subsection 7b74 #f4 ,annual list of ,department of ,veterans ,affairs information technology projects 7a7 ,annual list ,not less frequently than once each year1 the ,secretary of ,veterans ,affairs shall submit to the appropriate committees of ,congress a comprehensive1 prioritized list of all information technology projects being funded by the ,department of ,veterans ,affairs1 disaggregated by business line or portfolio division4 7b7 ,definition of appropriate committees of ,congress ,in this section1 the term appropriate committees of ,congress means-- 7#a7 the ,committee on ,veterans' ,affairs and the ,committee on ,appropriations of the ,senate2 and 7#b7 the ,committee on ,veterans' ,affairs and the ,committee on ,appropriations of the ,house of ,representatives4 #g4 ,assessment of suitability of ,department of ,veterans ,affairs information technology investments for migration to cloud computing service 7a7 ,assessment required ,not later than one year after the date of the enactment of this ,act1 the ,secretary of ,veterans ,affairs1 acting through the ,chief ,information ,officer of the ,department of ,veterans ,affairs1 shall complete an assessment1 in accordance with guidance from the ,office of ,management and ,budget1 of all information technology investments of the ,department of ,veterans ,affairs to determine the suitability of the investments for migration to a cloud computing service4 7b7 ,mechanism ,to track savings ,the ,secretary shall create a consistent and repeatable mechanism to track savings and cost avoidances from-- 7#a7 migration of information technology investments to cloud computing services2 and 7#b7 deployment of cloud computing services4 7c7 ,report on spending ,not later than #ahj days after the date of the enactment of this ,act1 the ,secretary1 acting through the ,chief1 shall submit to the appropriate committees of ,congress a report on spending by the ,department on information technology investments1 disaggregated by information technology investment4 7d7 ,definition of appropriate committees of ,congress ,in this section1 the term appropriate committees of ,congress means-- 7#a7 the ,committee on ,veterans' ,affairs and the ,committee on ,appropriations of the ,senate2 and 7#b7 the ,committee on ,veterans' ,affairs and the ,committee on ,appropriations of the ,house of ,representatives4 #h4 ,department of ,veterans ,affairs information technology management policies with respect to role of ,chief ,information ,officer ,the ,secretary of ,veterans ,affairs shall ensure that the information technology management policies of the ,department of ,veterans ,affairs address the role of the ,chief ,information ,officer of the ,department with respect to the following key responsibilities3 7#a7 ,information technology strategic planning4 7#b7 ,information technology workforce4 7#c7 ,information technology planning1 programming1 and budgeting4 7#d7 ,information technology investment management4 7#e7 ,innovations and emerging technologies4 #i4 ,continuous monitoring strategy to improve information security programs of ,department of ,veterans ,affairs ,in order to improve information security programs of the ,department of ,veterans ,affairs1 the ,secretary of ,veterans ,affairs shall develop a continuous monitoring strategy that addresses the following3 7#a7 ,organization-defined metrics4 7#b7 ,frequency of monitoring metrics4 7#c7 ,ongoing status monitoring of metrics4 7#d7 ,reporting of security status4 #aj4 ,revision of processes of ,department of ,veterans ,affairs ,office of ,information and ,technology relating to risk management 7a7 ,in general ,not later than #ij days after the date of the enactment of this ,act1 the ,secretary of ,veterans ,affairs1 acting through the ,chief ,information ,officer of the ,department of ,veterans ,affairs1 shall revise the processes of the ,office of ,information and ,technology of the ,department relating to risk management to include the following3 7#a7 ,determining costs and benefits of implementing the risk mitigation plan for each risk4 7#b7 ,collecting performance measures on risk handling activities4 7b7 ,review by ,comptroller ,general of the ,united ,states ,not later than #ahj days after the date of the enactment of this ,act1 the ,comptroller ,general of the ,united ,states shall complete a review of the processes revised pursuant to subsection 7a74 ,passed the ,senate ,july #cj1 #bjbj4,secretary