◆ SpookStack

Response: The FRI realizes the importance of an Enterprise Architecture (EA), and therefore has established a formal EA program The FBI is aware of the critinsms made by the General Accounting Cffice (GAO) and the DOJ Inspector General, and agrees that appropnate correctiye actions must be expedited. An EA policy statement thai provides guidance and direction for the EA programm was approved in September 2003 and is bemg implemented. In addition, an FBI Enterprise Architecture Board (RAB) has been form: stablished, with representation across the Bureau, to evaluate architecturally significant projects in order to ensure comphance with standards and the information technology (IT) operating environment. Architectural reviews have become ani integral part of the IT investment managenient provess, and FBI procedures now require that all projects with a ifeume budget of over $10 million be approved through the board aud signed by the Chief Information Officer (CIO) An IT Strategic Plan provides guidaace for the EA staff's development ofa "To Be" architecture that enhances the FBI's IT support. The CIO has initiated the development of 2 formal EA Staff to address: business/mission, application, informanon, infrastructure. and seounty. Oa March 19, 2004, the FBI awarded a contract for products that will achieve EA compliance with GAO's "management maturity level three" in FY2004 and with “maturity level four" in FY2005. The CIO is additionally developing policy that will require solution architects to be part of the team responsible for the design and development of PBI systems. 11. When will the Trilogy's Virtual Case File (VCR) system be operational? Response: The Computer Sciences Corporation completed the replacement of FBI computer hardware on 4/28/04. The final phase of Tnlogy ss upgrading of the FBI's case management software by converting from the ACS system to the VCF format. ‘The FBI is currently working with the Science Applications International Corporation to determine what needs te be adjusted to meet the Director's completion deadline of the end of 2004. 12. When the VCF is operational, will investigative/operational squads (consistent with appropriate security procedures) in the field be able to restrict an analyst's access to documents developed as a result of ongoing investigation and operation? Response: Access controis on VCF-created investigative records are a component of the secunty model being implemented. These access controls are defined both By the 34 MISC. REQ. #53 000004721