Report 2016-125.2 Recommendation 8 Responses

Report 2016-125.2: The University of California Office of the President: Increasing Costs and Scheduling Delays Have Hampered the UCPath Project and Originally Anticipated Savings Are Unlikely to Materialize (Release Date: August 2017)

Recommendation #8 To: University of California

To ensure that it consistently follows best practices related to project management, the Office of the President should develop and implement guidelines for IT project development by June 2018. The guidelines should apply to all IT projects undertaken by any university location with a cost estimate of at least $5 million or more and should include IV&V to oversee the technical aspects of project development.

1-Year Agency Response

The Office of the President, working closely with its partners at the UC locations, has completed, posted & trained IT professionals on the guidelines for IT project development - a.k.a., IT Project Handbook - for all IT projects undertaken by any university location with a cost estimate of at least $5 million. This recommendation is covered in Chapter 3 entitled PROJECT DEVELOPMENT GUIDELINES, and specifically in Section 3.8. There are examples and templates provided.

This work was completed and posted to a central location for all IT professionals to access in May 2018.

All locations are required to implement these guidelines. A training symposium was held at UC Berkeley in May 2018. Out of the symposium has come an IT project management community of interest, which has created a virtual collaboration space (Slack channel) and organized a second gathering of the community for UC Davis in August 2018. We expect the evolution and further dissemination of the IT Project Handbook will be an ongoing topic for the community.

http://www.ucop.edu/information-technology-services/initiatives/itlc/it-project-reporting-and-guidelines.html

California State Auditor's Assessment of 1-Year Status: Fully Implemented

Although the Office of the President does not require IV&V on IT projects with a cost estimate of at least $5 million, it requires university locations to carefully consider its use as a risk mitigation methodology. Thus, this provision substantially implements our recommendation.

6-Month Agency Response

The Office of the President, working closely with its partners at the UC locations, has initiated the development of guidelines for IT project development - a.k.a., IT Project Handbook - all IT projects undertaken by any university location with a cost estimate of at least $5 million.

An outline has been agreed to by all parties. The chapters of the IT Project Handbook are bring written and leveraging industry best practices, guidelines published by the State of California, and leading practices from our UC locations.

Under the Chapter 3 entitled PROJECT DEVELOPMENT GUIDELINES, and specifically in Section 3.8, there are guidelines established, examples provided and starter templates for identifying situations and recommending approaches to apply IV&V to oversee the technical aspects of project development and manage IT project risk. The material is complete and posted at http://www.ucop.edu/information-technology-services/initiatives/itlc/it-project-reporting-and-guidelines.html

California State Auditor's Assessment of 6-Month Status: Partially Implemented

The Office of the President has drafted this chapter of its IT Project Handbook and made it available to the university locations. However, the Office of the President must still act on two elements of the recommendation which are: specifying that the guidelines apply to all IT projects with a cost estimate of at least $5 million and requiring the university locations to implement the guidelines, not merely review them. These two steps are key to the Office of the President ensuring that all significant IT projects are subject to the IT project development guidelines.

60-Day Agency Response

In consultation with the UC Regents, the University will use a threshold of $25M budget as the definition for significant IT projects for which new guidelines for IT project development will apply. It is the University's current and proposed continued practice to use diligent governance as a way to identify and bring in IV&V third-parties for specific topics and situations as appropriate or necessary. We will include in new guidelines for IT project development factors to consider in determining the need for IV&V on an IT project.

California State Auditor's Assessment of 60-Day Status: Partially Implemented

The Office of the President has consulted with the regents and decided on a project level threshold, but it has not developed and implemented the recommended guidelines for IT project development. In addition, we are concerned that the Office of the President is intending to apply a threshold that is too high, $25 million rather than the $5 million that we recommended, which could result in many significant IT projects not being subject to the IT project development guidelines.

All Recommendations in 2016-125.2

Agency responses received are posted verbatim.