Exhibit 300 (BY2009) for National Institutes of Health (NIH) IT Infrastructure

1. Date of Submission:

2008-02-04

2. Agency:

009

3. Bureau:

25

4. Name of this Capital Asset:

NIH IT Infrastructure

5. Unique Project Identifier:

009-25-02-00-01-3109-00

6. What kind of investment will this be in FY2009?

Operations and Maintenance

7. What was the first budget year this investment was submitted to OMB?

FY2005

8. Provide a brief summary and justification for this investment, including a brief description of how this closes in part or in whole an identified agency performance gap.

The NIH IT Infrastructure supports the NIH mission to uncover new knowledge that will lead to better health for everyone by providing information technology tools to conduct research, award more than $15 billion a year in research grants, and disseminate biomedical research and health information to the public and NIH stakeholders. NIH IT Infrastructure includes: NIHNet NIHNet facilitates the exchange of administrative, clinical and scientific data including medical images and genetic sequence information. It connects NIH buildings on the Bethesda campuses, and in other parts of the U.S. including: Baltimore, MD; Research Triangle Park, NC; Hamilton, MT; and Phoenix, AZ. NIHNet also provides NIH's connection to the Internet and Internet 2. The NIHNet program participates in the planning for and adoption of Internet Protocol Version Six as required by OMB Memorandum M-05-22. NIH Data Center The NIH Data Center is a recognized Federal Data Center hosting mission-critical systems for NIH and other agencies including: ACF, NIST, VA, and GSA. The NIH Data Center has a proven record of administering and managing systems to ensure their availability to users. The Data Center provides both the physical and cyber security appropriate to mission-critical systems. IT Security The NIH IT security program has successfully prevented the loss of the use of the network and associated services. In FY 2005, NIH IT security activities were 99.6% effective against known intrusions. IT Help Desk and Acquisition Support The Help Desk provides a single point of contact for user's IT questions. Help Desk services address user's problems immediately, or direct the request to the appropriate service provider. In FY 2005, the Help Desk resolved 85% of requests for technical support and measured a customer satisfaction rating of 93.3%. NIH provides HHS-wide software licenses through the Information Systems Designated Procurement to acquire software at or below GSA Schedule prices. NIH established and uses the CIOSP2 and ECSIII Government-Wide Acquisition Contracts for procurement of IT hardware and services, reducing costs through the negotiation of prices and simplifying the acquisition process. CPIC and Architectural Review IT Infrastructure and its component parts are reviewed by the Architectural and CPIC Review Boards to ensure that any identified performance gaps are addressed and that future service needs are anticipated and planned for.

9. Did the Agency's Executive/Investment Committee approve this request?

yes

9.a. If "yes," what was the date of this approval?

2007-06-26

10. Did the Project Manager review this Exhibit?

yes

11.a. What is the current FAC-P/PM certification level of the project/program manager?

Senior/Expert-level

12. Has the agency developed and/or promoted cost effective, energy-efficient and environmentally sustainable techniques or practices for this project.

yes

12.a. Will this investment include electronic assets (including computers)?

yes

12.b. Is this investment for new construction or major retrofit of a Federal building or facility? (answer applicable to non-IT assets only)

no

13. Does this investment directly support one of the PMA initiatives?

yes

If yes, select the initiatives that apply:

Initiative Name
Competitive Sourcing
Expanded E-Government
Financial Performance

13.a. Briefly and specifically describe for each selected how this asset directly supports the identified initiative(s)? (e.g. If E-Gov is selected, is it an approved shared service provider or the managing partner?)

NIH has aggressively pursued Competitive Sourcing as a way to maximize efficiency and meet the labor requirements of the NIH IT Infrastructure program. NIH has competed Help Desk and Data Center services studies, and is currently planning competition studies for Network and End-User Support services. In addition, NIH employs a number of procurement vehicles, including the CIOSP2 GWACS and the iSDP to reduce both the cost and administrative burden of purchasing IT goods and services.

14. Does this investment support a program assessed using the Program Assessment Rating Tool (PART)?

no

15. Is this investment for information technology?

yes

16. What is the level of the IT Project (per CIO Council's PM Guidance)?

Level 2

17. What project management qualifications does the Project Manager have? (per CIO Council's PM Guidance)

(1) Project manager has been validated as qualified for this investment

18. Is this investment identified as high risk on the Q4 - FY 2007 agency high risk report (per OMB memorandum M-05-23)?

no

19. Is this a financial management system?

no

20. What is the percentage breakout for the total FY2009 funding request for the following? (This should total 100%)

Area	Percentage
Hardware	24
Software	8
Services	44
Other	23

21. If this project produces information dissemination products for the public, are these products published to the Internet in conformance with OMB Memorandum 05-04 and included in your agency inventory, schedules and priorities?

n/a

22. Contact information of individual responsible for privacy related questions.

Name	Karen Pla
Phone Number	301-402-6201
Title	NIH Privacy Act Officer
Email	plak@mail.nih.gov

23. Are the records produced by this investment appropriately scheduled with the National Archives and Records Administration's approval?

no

24. Does this investment directly support one of the GAO High Risk Areas?

yes

1. Provide the total estimated life-cycle cost for this investment by completing the following table. All amounts represent budget authority in millions, and are rounded to three decimal places. Federal personnel costs should be included only in the row designated Government FTE Cost, and should be excluded from the amounts shown for Planning, Full Acquisition, and Operation/Maintenance. The total estimated annual cost of the investment is the sum of costs for Planning, Full Acquisition, and Operation/Maintenance. For Federal buildings and facilities, life-cycle costs should include long term energy, environmental, decommissioning, and/or restoration costs. The costs associated with the entire life-cycle of the investment should be included in this report.

All amounts represent Budget Authority

Note: For the cross-agency investments, this table should include all funding (both managing partner and partner agencies).

Government FTE Costs should not be included as part of the TOTAL represented.

Cost Type	Py-1 & Earlier -2006	PY 2007	CY 2008	BY 2009
Planning Budgetary Resources	0.950	0.000	0.000	0.000
Acquisition Budgetary Resources	52.837	0.000	0.000	0.000
Maintenance Budgetary Resources	755.486	212.317	234.216	235.876
Government FTE Cost	130.806	40.129	43.974	46.620
# of FTEs	663	334	350	350

2. Will this project require the agency to hire additional FTE's?

no

3. If the summary of spending has changed from the FY2008 President's budget request, briefly explain those changes.

The FY 2009 NIH IT Infrastructure Budget reflects a slightly different distribution of expenses as a result of a more comprehensive definition of IT Infrastructure applied in the planning process. The expenses do not represent new spending, but instead represent more accurate accounting for IT Infrastructure spending, including the formal inclusion of IT spending in the intramural research laboratories. NIH expects that there may be additional changes in the Summary of Spending table as a result of the IOI [IT Infrastructure] LoB initiative planning.

Agencies must use the following table to report performance goals and measures for the major investment and use the Federal Enterprise Architecture (FEA) Performance Reference Model (PRM). Map all Measurement Indicators to the corresponding Measurement Area and Measurement Grouping identified in the PRM. There should be at least one Measurement Indicator for each of the four different Measurement Areas (for each fiscal year). The PRM is available at www.egov.gov. The table can be extended to include performance measures for years beyond FY 2009.

Row	Fiscal Year	Strategic Goal Supported	Measurement Area	Measurement Grouping	Measurement Indicator	Baseline	Planned Improvement to the Baseline	Actual Results
1	2006	S.O. 4.2 - Increase basic scientific knowledge to improve human health and development	Mission and Business Results	Scientific and Technological Research and Innovation	Enhance development and application of scientific computing resources	Enhance NIH sharing of IT services with other Federal Agencies and HHS OPDIVs	Develop Standard Memoranda of Understanding and Service Level Agreements and put them in use for new and expanded services.	Continued collaboration under existing Memorandum of Understanding (MOU) between CIT and the U.S. Department of Commerce, National Institute of Standards and Technology (NIST) for cooperative use of existing CIT scientific computing resources
2	2006	S.O. 4.2 - Increase basic scientific knowledge to improve human health and development	Customer Results	Availability	Percent availability of IT infrastructure services for NIH and HHS public-facing web pages, including the NIH Home Page, the NIH search engine, and the HHS Home Page	99.9% availability for production public-facing web servers	Sustain 99.9% availability for production public-facing web servers	Provided 24/7 web site operations, exceeding the target uptime goal of 99.9% availability
3	2006	S.O. 4.2 - Increase basic scientific knowledge to improve human health and development	Technology	Availability	Percent availability of IT Infrastructure services and activities	99.9% availability for Data Center servers for production enterprise applications.	Sustain 99.9% availability for Data Center servers for production enterprise applications.	Provided 24/7 support that exceeded the target uptime goal of 99.9% availability for all Data Center services.
4	2006	S.O. 4.2 - Increase basic scientific knowledge to improve human health and development	Customer Results	Accuracy of Service or Product Delivered	Metrics defined in IT Help Desk Service Level Agreement and A76 Help Desk Quality Assurance Service Plan	The NIH Help Desk will meet all service quality metrics as stated in the A76 Help Desk Quality Assurance Service Plan and as stated in the collaborative Help Desk Service Level Agreement with the NIH IC's.	The NIH Help Desk will meet a Customer Satisfaction level of greater than 90%, a response to incoming Help Desk Calls of less than 45 second. The NIH Help Desk plans 270,000 calls annually as its base level of service.	The NIH Help Desk exceeded its target goals of greater than 90% Customer Satisfaction, less than 45 second response time to HD calls, and its Workload volume is 97% of the estimated overall service ticket volume (261,757 out of 270,783 annual base).
5	2006	S.O. 4.2 - Increase basic scientific knowledge to improve human health and development	Technology	Availability	Percent availability of Network services to the NIH community	99.9% availability to customers for NIH network backbone (NIHnet).	Sustain 99.9% availability to customers for NIH network backbone (NIHnet).	Achieved 99.94% availability
6	2006	S.O. 4.2 - Increase basic scientific knowledge to improve human health and development	Processes and Activities	Security	Reduce number of "red" vulnerabilities detected on NIH systems		Reduce FY 2005 actual results by at least 10%
7	2007	S.O. 4.2 - Increase basic scientific knowledge to improve human health and development	Mission and Business Results	Scientific and Technological Research and Innovation	Enhance development and application of scientific computing resources	Enhance NIH sharing of IT services with other Federal Agencies and HHS OPDIVs	Continue use of Standard Memoranda of Understanding and Service Level Agreements for existing services and update for new and expanded services.	Continued collaboration between CIT and the U.S. Department of Commerce, NIST for use of CIT scientific computing resources. Updated MOU as the NIST user base and the computational resources used by NIST researchers expanded
8	2007	S.O. 4.2 - Increase basic scientific knowledge to improve human health and development	Customer Results	Availability	Percent availability of IT infrastructure services for NIH and HHS public-facing web pages, including the NIH Home Page, the NIH search engine, and the HHS Home Page	99.9% availability for production public-facing web servers	Sustain 99.9% availability for production public-facing web servers	Provided 24/7 web site operations, exceeding the target uptime goal of 99.9% availability
9	2007	S.O. 4.2 - Increase basic scientific knowledge to improve human health and development	Technology	Availability	Percent availability of IT Infrastructure services and activities	99.9% availability for Data Center servers for production enterprise applications.	Sustain 99.9% availability for Data Center servers for production enterprise applications.	Provided 24/7 support that exceeded the target uptime goal of 99.9% availability for all Data Center services
10	2007	S.O. 4.2 - Increase basic scientific knowledge to improve human health and development	Customer Results	Accuracy of Service or Product Delivered	Metrics defined in IT Help Desk Service Level Agreement and A76 Help Desk Quality Assurance Service Plan	The NIH Help Desk will meet all service quality metrics as stated in the A76 Help Desk Quality Assurance Service Plan and as stated in the collaborative Help Desk Service Level Agreement with the NIH IC's.	The NIH Help Desk will meet or exceed its FY 2006 Customer Satisfaction level, will maintain or improve its response time to Help Desk calls, and respond to at least 270,000 calls.	Help Desk exceeded its goals of > 90% Customer Satisfaction, < 45 second response time to HD calls (60 sec target for the QASP), and its Workload volume is on target at 73% of the estimated overall service ticket volume (270,783 annual base)
11	2007	S.O. 4.2 - Increase basic scientific knowledge to improve human health and development	Technology	Availability	Percent availability of Network services to the NIH community	99.9% availability to customers for NIH network backbone (NIHnet).	Sustain 99.9% availability to customers for NIH network backbone (NIHnet).	Achieved 99.94% availability
12	2007	S.O. 4.2 - Increase basic scientific knowledge to improve human health and development	Processes and Activities	Security	Reduce number of "red" vulnerabilities detected on NIH systems		Reduce FY 2006 actual results by at least 10%
13	2008	S.O. 4.2 - Increase basic scientific knowledge to improve human health and development	Mission and Business Results	Scientific and Technological Research and Innovation	Enhance development and application of scientific computing resources	Enhance NIH sharing of IT services with other Federal Agencies and HHS OPDIVs	Continue use of Standard Memoranda of Understanding and Service Level Agreements for existing services and update for new and expanded services.
14	2008	S.O. 4.2 - Increase basic scientific knowledge to improve human health and development	Customer Results	Availability	Percent availability of IT infrastructure services for NIH and HHS public-facing web pages, including the NIH Home Page, the NIH search engine, and the HHS Home Page	99.9% availability for production public-facing web servers	Sustain 99.9% availability for production public-facing web servers
15	2008	S.O. 4.2 - Increase basic scientific knowledge to improve human health and development	Technology	Availability	Percent availability of IT Infrastructure services and activities	99.9% availability for Data Center servers for production enterprise applications.	Sustain 99.9% availability for Data Center servers for production enterprise applications.
16	2008	S.O. 4.2 - Increase basic scientific knowledge to improve human health and development	Customer Results	Accuracy of Service or Product Delivered	Metrics defined in IT Help Desk Service Level Agreement and A76 Help Desk Quality Assurance Service Plan	The NIH Help Desk will meet all service quality metrics as stated in the A76 Help Desk Quality Assurance Service Plan and as stated in the collaborative Help Desk Service Level Agreement with the NIH IC's.	The NIH Help Desk will meet or exceed its FY 2007 Customer Satisfaction level, will maintain or improve its response time to Help Desk calls, and respond to at least 270,000 calls.
17	2008	S.O. 4.2 - Increase basic scientific knowledge to improve human health and development	Technology	Availability	Percent availability of Network services to the NIH community	99.9% availability to customers for NIH network backbone (NIHnet).	Sustain 99.9% availability to customers for NIH network backbone (NIHnet).
18	2008	S.O. 4.2 - Increase basic scientific knowledge to improve human health and development	Processes and Activities	Security	Reduce number of "red" vulnerabilities detected on NIH systems	Number of FY 2007 "red" vulnerabilities	Reduce FY 2007 actual results by at least 10%
19	2009	S.O. 4.2 - Increase basic scientific knowledge to improve human health and development	Mission and Business Results	Scientific and Technological Research and Innovation	Enhance development and application of scientific computing resources	Enhance NIH sharing of IT services with other Federal Agencies and HHS OPDIVs	Continue use of Standard Memoranda of Understanding and Service Level Agreements for existing services and update for new and expanded services.
20	2009	S.O. 4.2 - Increase basic scientific knowledge to improve human health and development	Customer Results	Availability	Percent availability of IT infrastructure services for NIH and HHS public-facing web pages, including the NIH Home Page, the NIH search engine, and the HHS Home Page	99.9% availability for production public-facing web servers	Sustain 99.9% availability for production public-facing web servers
21	2009	S.O. 4.2 - Increase basic scientific knowledge to improve human health and development	Technology	Availability	Percent availability of IT Infrastructure services and activities	99.9% availability for Data Center servers for production enterprise applications.	Sustain 99.9% availability for Data Center servers for production enterprise applications.
22	2009	S.O. 4.2 - Increase basic scientific knowledge to improve human health and development	Customer Results	Accuracy of Service or Product Delivered	Metrics defined in IT Help Desk Service Level Agreement and A76 Help Desk Quality Assurance Service Plan	The NIH Help Desk will meet all service quality metrics as stated in the A76 Help Desk Quality Assurance Service Plan and as stated in the collaborative Help Desk Service Level Agreement with the NIH IC's.	The NIH Help Desk will meet or exceed its FY 2008 Customer Satisfaction level, will maintain or improve its response time to Help Desk calls, and respond to at least 270,000 calls.
23	2009	S.O. 4.2 - Increase basic scientific knowledge to improve human health and development	Technology	Availability	Percent availability of Network services to the NIH community	99.9% availability to customers for NIH network backbone (NIHnet).	Sustain 99.9% availability to customers for NIH network backbone (NIHnet).
24	2009	S.O. 4.2 - Increase basic scientific knowledge to improve human health and development	Processes and Activities	Security	Reduce number of "red" vulnerabilities detected on NIH systems	Number of FY 2008 "red" vulnerabilities	Reduce FY 2008 actual results by at least 10%
25	2010	S.O. 4.2 - Increase basic scientific knowledge to improve human health and development	Mission and Business Results	Scientific and Technological Research and Innovation	Enhance development and application of scientific computing resources	Enhance NIH sharing of IT services with other Federal Agencies and HHS OPDIVs	Continue use of Standard Memoranda of Understanding and Service Level Agreements for existing services and update for new and expanded services.
26	2010	S.O. 4.2 - Increase basic scientific knowledge to improve human health and development	Customer Results	Availability	Percent availability of IT infrastructure services for NIH and HHS public-facing web pages, including the NIH Home Page, the NIH search engine, and the HHS Home Page	99.9% availability for production public-facing web servers	Sustain 99.9% availability for production public-facing web servers
27	2010	S.O. 4.2 - Increase basic scientific knowledge to improve human health and development	Technology	Availability	Percent availability of IT Infrastructure services and activities	99.9% availability for Data Center servers for production enterprise applications.	Sustain 99.9% availability for Data Center servers for production enterprise applications.
28	2010	S.O. 4.2 - Increase basic scientific knowledge to improve human health and development	Customer Results	Accuracy of Service or Product Delivered	Metrics defined in IT Help Desk Service Level Agreement and A76 Help Desk Quality Assurance Service Plan	The NIH Help Desk will meet all service quality metrics as stated in the A76 Help Desk Quality Assurance Service Plan and as stated in the collaborative Help Desk Service Level Agreement with the NIH IC's.	The NIH Help Desk will meet or exceed its FY 2009 Customer Satisfaction level, will maintain or improve its response time to Help Desk calls, and respond to at least 270,000 calls.
29	2010	S.O. 4.2 - Increase basic scientific knowledge to improve human health and development	Technology	Availability	Percent availability of Network services to the NIH community	99.9% availability to customers for NIH network backbone (NIHnet).	Sustain 99.9% availability to customers for NIH network backbone (NIHnet).
30	2010	S.O. 4.2 - Increase basic scientific knowledge to improve human health and development	Processes and Activities	Security	Reduce number of "red" vulnerabilities detected on NIH systems	Number of FY 2009 "red" vulnerabilities	Reduce FY 2009 actual results by at least 10%
31	2011	S.O. 4.2 - Increase basic scientific knowledge to improve human health and development	Mission and Business Results	Scientific and Technological Research and Innovation	Enhance development and application of scientific computing resources	Enhance NIH sharing of IT services with other Federal Agencies and HHS OPDIVs	Continue use of Standard Memoranda of Understanding and Service Level Agreements for existing services and update for new and expanded services.
32	2011	S.O. 4.2 - Increase basic scientific knowledge to improve human health and development	Customer Results	Availability	Percent availability of IT infrastructure services for NIH and HHS public-facing web pages, including the NIH Home Page, the NIH search engine, and the HHS Home Page	99.9% availability for production public-facing web servers	Sustain 99.9% availability for production public-facing web servers
33	2011	S.O. 4.2 - Increase basic scientific knowledge to improve human health and development	Technology	Availability	Percent availability of IT Infrastructure services and activities	99.9% availability for Data Center servers for production enterprise applications.	Sustain 99.9% availability for Data Center servers for production enterprise applications.
34	2011	S.O. 4.2 - Increase basic scientific knowledge to improve human health and development	Customer Results	Accuracy of Service or Product Delivered	Metrics defined in IT Help Desk Service Level Agreement and A76 Help Desk Quality Assurance Service Plan	The NIH Help Desk will meet all service quality metrics as stated in the A76 Help Desk Quality Assurance Service Plan and as stated in the collaborative Help Desk Service Level Agreement with the NIH IC's.	The NIH Help Desk will meet or exceed its FY 2010 Customer Satisfaction level, will maintain or improve its response time to Help Desk calls, and respond to at least 270,000 calls.
35	2011	S.O. 4.2 - Increase basic scientific knowledge to improve human health and development	Technology	Availability	Percent availability of Network services to the NIH community	99.9% availability to customers for NIH network backbone (NIHnet).	Sustain 99.9% availability to customers for NIH network backbone (NIHnet).
36	2011	S.O. 4.2 - Increase basic scientific knowledge to improve human health and development	Processes and Activities	Security	Reduce number of "red" vulnerabilities detected on NIH systems	Number of FY 2010 "red" vulnerabilities	Reduce FY 2010 actual results by at least 10%
37	2012	S.O. 4.2 - Increase basic scientific knowledge to improve human health and development	Mission and Business Results	Scientific and Technological Research and Innovation	Enhance development and application of scientific computing resources	Enhance NIH sharing of IT services with other Federal Agencies and HHS OPDIVs	Continue use of Standard Memoranda of Understanding and Service Level Agreements for existing services and update for new and expanded services.
38	2012	S.O. 4.2 - Increase basic scientific knowledge to improve human health and development	Customer Results	Automation	Percent availability of IT infrastructure services for NIH and HHS public-facing web pages, including the NIH Home Page, the NIH search engine, and the HHS Home Page	99.9% availability for production public-facing web servers	Sustain 99.9% availability for production public-facing web servers
39	2012	S.O. 4.2 - Increase basic scientific knowledge to improve human health and development	Technology	Reliability	Percent availability of IT Infrastructure services and activities	99.9% availability for Data Center servers for production enterprise applications.	Sustain 99.9% availability for Data Center servers for production enterprise applications.
40	2012	S.O. 4.2 - Increase basic scientific knowledge to improve human health and development	Customer Results	Accuracy of Service or Product Delivered	Metrics defined in IT Help Desk Service Level Agreement and A76 Help Desk Quality Assurance Service Plan	The NIH Help Desk will meet all service quality metrics as stated in the A76 Help Desk Quality Assurance Service Plan and as stated in the collaborative Help Desk Service Level Agreement with the NIH IC's.	The NIH Help Desk will meet or exceed its FY 2011 Customer Satisfaction level, will maintain or improve its response time to Help Desk calls, and respond to at least 270,000 calls.
41	2012	S.O. 4.2 - Increase basic scientific knowledge to improve human health and development	Technology	Availability	Percent availability of Network services to the NIH community	99.9% availability to customers for NIH network backbone (NIHnet).	Sustain 99.9% availability to customers for NIH network backbone (NIHnet).
42	2012	S.O. 4.2 - Increase basic scientific knowledge to improve human health and development	Processes and Activities	Security	Reduce number of "red" vulnerabilities detected on NIH systems	Number of FY 2011 "red" vulnerabilities	Reduce FY 2011 actual results by at least 10%
43	2013	S.O. 4.2 - Increase basic scientific knowledge to improve human health and development	Mission and Business Results	Scientific and Technological Research and Innovation	Enhance development and application of scientific computing resources	Enhance NIH sharing of IT services with other Federal Agencies and HHS OPDIVs	Continue use of Standard Memoranda of Understanding and Service Level Agreements for existing services and update for new and expanded services.
44	2013	S.O. 4.2 - Increase basic scientific knowledge to improve human health and development	Customer Results	Availability	Percent availability of IT infrastructure services for NIH and HHS public-facing web pages, including the NIH Home Page, the NIH search engine, and the HHS Home Page	99.9% availability for production public-facing web servers	Sustain 99.9% availability for production public-facing web servers
45	2013	S.O. 4.2 - Increase basic scientific knowledge to improve human health and development	Technology	Availability	Percent availability of IT Infrastructure services and activities	99.9% availability for Data Center servers for production enterprise applications.	Sustain 99.9% availability for Data Center servers for production enterprise applications.
46	2013	S.O. 4.2 - Increase basic scientific knowledge to improve human health and development	Customer Results	Accuracy of Service or Product Delivered	Metrics defined in IT Help Desk Service Level Agreement and A76 Help Desk Quality Assurance Service Plan	The NIH Help Desk will meet all service quality metrics as stated in the A76 Help Desk Quality Assurance Service Plan and as stated in the collaborative Help Desk Service Level Agreement with the NIH IC's.	The NIH Help Desk will meet or exceed its FY 2012 Customer Satisfaction level, will maintain or improve its response time to Help Desk calls, and respond to at least 270,000 calls.
47	2013	S.O. 4.2 - Increase basic scientific knowledge to improve human health and development	Technology	Availability	Percent availability of Network services to the NIH community	99.9% availability to customers for NIH network backbone (NIHnet).	Sustain 99.9% availability to customers for NIH network backbone (NIHnet).
48	2013	S.O. 4.2 - Increase basic scientific knowledge to improve human health and development	Processes and Activities	Security	Reduce number of "red" vulnerabilities detected on NIH systems	Number of FY 2012 "red" vulnerabilities	Reduce FY 2012 actual results by at least 10%

1. Is this investment included in your agency's target enterprise architecture?

yes

2. Is this investment included in the agency's EA Transition Strategy?

yes

2.a. If yes, provide the investment name as identified in the Transition Strategy provided in the agency's most recent annual EA Assessment.

NIH Information Technology Infrastructure

3. Is this investment identified in a completed (contains a target architecture) and approved segment architecture?

no

4. Identify the service components funded by this major IT investment (e.g., knowledge management, content management, customer relationship management, etc.). Provide this information in the format of the following table. For detailed guidance regarding components, please refer to http://www.whitehouse.gov/omb/egov/.

Component: Use existing SRM Components or identify as NEW. A NEW component is one not already identified as a service component in the FEA SRM.

Reused Name and UPI: A reused component is one being funded by another investment, but being used by this investment. Rather than answer yes or no, identify the reused service component funded by the other investment and identify the other investment using the Unique Project Identifier (UPI) code from the OMB Ex 300 or Ex 53 submission.

Internal or External Reuse?: Internal reuse is within an agency. For example, one agency within a department is reusing a service component provided by another agency within the same department. External reuse is one agency within a department reusing a service component provided by another agency in another department. A good example of this is an E-Gov initiative service being reused by multiple organizations across the federal government.

Funding Percentage: Please provide the percentage of the BY requested funding amount used for each service component listed in the table. If external, provide the funding level transferred to another agency to pay for the service.

Row	Agency Component Name	Agency Component Description	Service Type	Component	Reused Component Name	Reused UPI	Internal or External Reuse?	Funding %
1	Assistance Request	Defines the set of capabilities that support the solicitation of support from a customer.	Customer Initiated Assistance	Assistance Request			No Reuse	2
2	Call Center Management	Defines the set of capabilities that handle telephone sales and/or service to the end customer.	Customer Relationship Management	Call Center Management			No Reuse	2
3	Certification and Accreditation	Certification and Accreditation - Supports the certification and accreditation (C&A) of federal information systems, as described in NIST SP800-37.	Security Management	Certification and Accreditation			No Reuse	2
4	Computers / Automation Management	Defines the set of capabilities that support the identification, upgrade, allocation and replacement of physical devices, including servers and desktops, used to facilitate production and process-driven activities.	Asset / Materials Management	Computers / Automation Management			No Reuse	13
5	Configuration Management	Defines the set of capabilities that control the hardware and software environments, as well as documents of an organization.	Management of Processes	Configuration Management			No Reuse	11
6	Data Exchange	Defines the set of capabilities that support the interchange of information between multiple systems or applications; includes verification that transmitted data was received unaltered.	Data Management	Data Exchange			No Reuse	4
7	Digital Signature Management	Defines the set of capabilities that guarantee the unaltered state of a file.	Security Management	Digital Signature Management			No Reuse	3
8	Email	Defines the set of capabilities that support the transmission of memos and messages over a network.	Collaboration	Email			No Reuse	5
9	Enterprise Application Integration	Defines the set of capabilities that support the redesigning of disparate information systems into one system that uses a common set of data structures and rules.	Development and Integration	Enterprise Application Integration			No Reuse	10
10	Event / News Management	Defines the set of capabilities that monitor servers, workstations and network devices for routine and non-routine events.	Communication	Event / News Management			No Reuse	1
11	FISMA Management and Reporting	FISMA Management and Reporting - Support management and reporting of compliance with the Federal Information Security Management Act 0f 2002.	Security Management	FISMA Management and Reporting			No Reuse	2
12	Identification and Authentication	Defines the set of capabilities that support obtaining information about those parties attempting to log on to a system or application for security purposes and the validation of those users.	Security Management	Identification and Authentication			No Reuse	4
13	Incident Response	Incident Response - Provides active response and remediation to a security incident that has allowed unauthorized access to a government information system.	Security Management	Incident Response			No Reuse	2
14	Instant Messaging	Defines the set of capabilities that support keyboard conferencing over a Local Area Network or the internet between two or more people.	Communication	Instant Messaging			No Reuse	1
15	Intrusion Detection	Defines the set of capabilities that support the detection of illegal entrance into a computer system.	Security Management	Intrusion Detection			No Reuse	2
16	Intrusion Prevention	Intrusion Prevention - Includes penetration testing and other measures to prevent unauthorized access to a government information system.	Security Management	Intrusion Prevention			No Reuse	2
17	Issue Tracking	Defines the set of capabilities that receive and track user-reported issues and problems in using IT systems, including help desk calls.	Systems Management	Issue Tracking			No Reuse	2
18	Network Management	Defines the set of capabilities that monitor and maintain a communications network in order to diagnose problems, gather statistics and provide general usage.	Organizational Management	Network Management			No Reuse	24
19	Real Time / Chat	Defines the set of capabilities that support the conferencing capability between two or more users on a local area network or the internet.	Communication	Real Time / Chat			No Reuse	1
20	Remote Systems Control	Defines the set of capabilities that support the monitoring, administration and usage of applications and enterprise systems from locations outside of the immediate system environment.	Systems Management	Remote Systems Control			No Reuse	1
21	Shared Calendaring	Defines the set of capabilities that allow an entire team as well as individuals to view, add and modify each other's schedules, meetings and activities.	Collaboration	Shared Calendaring			No Reuse	2
22	Video Conferencing	Defines the set of capabilities that support video communications sessions among people who are geographically dispersed.	Communication	Video Conferencing			No Reuse	1
23	Virus Protection	Virus Protection - Provides anti-virus service to prevent, detect, and remediate infection of government computing assets.	Security Management	Virus Protection			No Reuse	3
24	Workgroup / Groupware	Defines the set of capabilities that support multiple users working on related tasks.	Organizational Management	Workgroup / Groupware			No Reuse	1

5. To demonstrate how this major IT investment aligns with the FEA Technical Reference Model (TRM), please list the Service Areas, Categories, Standards, and Service Specifications supporting this IT investment.

FEA SRM Component: Service Components identified in the previous question should be entered in this column. Please enter multiple rows for FEA SRM Components supported by multiple TRM Service Specifications.

Service Specification: In the Service Specification field, Agencies should provide information on the specified technical standard or vendor product mapped to the FEA TRM Service Standard, including model or version numbers, as appropriate.

Row	SRM Component	>Service Area	Service Category	Service Standard	Service Specification (i.e., vendor and product name)
1	Assistance Request	Service Access and Delivery	Service Transport	Supporting Network Services	Remedy
2	Call Center Management	Service Access and Delivery	Service Transport	Supporting Network Services	Remedy
3	Certification and Accreditation	Service Access and Delivery	Service Requirements	Legislative / Compliance	Watchfire
4	Computers / Automation Management	Service Platform and Infrastructure	Hardware / Infrastructure	Servers / Computers	Various
5	Computers / Automation Management	Service Platform and Infrastructure	Hardware / Infrastructure	Embedded Technology Devices	Random Access Memory
6	Computers / Automation Management	Service Platform and Infrastructure	Hardware / Infrastructure	Embedded Technology Devices	Hard Disk Drive
7	Computers / Automation Management	Service Platform and Infrastructure	Hardware / Infrastructure	Embedded Technology Devices	Microprocessor
8	Computers / Automation Management	Service Platform and Infrastructure	Hardware / Infrastructure	Embedded Technology Devices	Redundant Array of Independent Disks (RAID)
9	Computers / Automation Management	Service Platform and Infrastructure	Hardware / Infrastructure	Peripherals	Various
10	Configuration Management	Service Platform and Infrastructure	Software Engineering	Software Configuration Management	Issue Management
11	Configuration Management	Service Platform and Infrastructure	Software Engineering	Software Configuration Management	Task Management
12	Configuration Management	Service Platform and Infrastructure	Software Engineering	Software Configuration Management	Chanage Management
13	Configuration Management	Service Platform and Infrastructure	Software Engineering	Software Configuration Management	Deployment Management
14	Configuration Management	Service Platform and Infrastructure	Software Engineering	Software Configuration Management	Requirment Management and Traceability
15	Data Exchange	Component Framework	Presentation / Interface	Static Display	HTML
16	Data Exchange	Component Framework	Presentation / Interface	Dynamic Server-Side Display	JSP
17	Data Exchange	Component Framework	Presentation / Interface	Dynamic Server-Side Display	ASP.Net
18	Digital Signature Management	Component Framework	Security	Certificates / Digital Signatures	Secure Sockets Layer (SSL)
19	Digital Signature Management	Component Framework	Security	Certificates / Digital Signatures	Digital Certificate
20	Email	Service Access and Delivery	Access Channels	Collaboration / Communications	Microsoft Exchange
21	Email	Service Access and Delivery	Access Channels	Collaboration / Communications	Microsoft Exchange
22	Email	Service Access and Delivery	Service Transport	Supporting Network Services	IMAP/POP3, MIME, S/MIME, SMTP
23	Email	Service Access and Delivery	Access Channels	Wireless / PDA	RIM Blackberry
24	Email	Service Platform and Infrastructure	Support Platforms	Wireless / Mobile	RIM-Exchange Bridge
25	Enterprise Application Integration	Service Interface and Integration	Integration	Enterprise Application Integration	TIBCO BusinessWorks
26	Enterprise Application Integration	Service Interface and Integration	Integration	Middleware	TIBCO EMS
27	Enterprise Application Integration	Service Interface and Integration	Interoperability	Data Transformation	TIBCO BusinessWorks
28	Enterprise Application Integration	Component Framework	Security	Supporting Security Services	CA TransactionMinder
29	Enterprise Application Integration	Service Access and Delivery	Access Channels	Web Browser	Various
30	Enterprise Application Integration	Service Platform and Infrastructure	Database / Storage	Database	Oracle, Various
31	Enterprise Application Integration	Service Platform and Infrastructure	Support Platforms	Platform Independent	EJB
32	Enterprise Application Integration	Component Framework	Business Logic	Platform Dependent	JavaScript
33	Event / News Management	Service Access and Delivery	Access Channels	Collaboration / Communications	Listserv
34	FISMA Management and Reporting	Service Access and Delivery	Service Requirements	Legislative / Compliance	Prosight
35	Identification and Authentication	Service Access and Delivery	Service Requirements	Authentication / Single Sign-on	CA SiteMinder
36	Identification and Authentication	Service Access and Delivery	Service Requirements	Authentication / Single Sign-on	Microsoft Active Directory
37	Incident Response	Service Access and Delivery	Service Requirements	Legislative / Compliance	Various
38	Instant Messaging	Service Access and Delivery	Access Channels	Collaboration / Communications	Various
39	Intrusion Detection	Service Platform and Infrastructure	Hardware / Infrastructure	Network Devices / Standards	Various
40	Intrusion Prevention	Service Platform and Infrastructure	Hardware / Infrastructure	Network Devices / Standards	Various
41	Issue Tracking	Service Access and Delivery	Service Transport	Supporting Network Services	Remedy
42	Network Management	Service Access and Delivery	Service Transport	Service Transport	TCP/IP
43	Network Management	Service Platform and Infrastructure	Hardware / Infrastructure	Local Area Network (LAN)	Ethernet
44	Network Management	Service Platform and Infrastructure	Hardware / Infrastructure	Wide Area Network (WAN)	Frame Relay
45	Network Management	Service Access and Delivery	Service Transport	Service Transport	HTTP
46	Network Management	Service Access and Delivery	Service Transport	Service Transport	HTTPS
47	Network Management	Service Access and Delivery	Service Transport	Supporting Network Services	SNMP
48	Network Management	Service Access and Delivery	Service Transport	Supporting Network Services	LDAP, X.400
49	Network Management	Service Access and Delivery	Service Transport	Service Transport	FTP
50	Network Management	Service Access and Delivery	Delivery Channels	Virtual Private Network (VPN)	Various
51	Network Management	Service Platform and Infrastructure	Support Platforms	Platform Independent	J2EE, Linux
52	Network Management	Service Platform and Infrastructure	Support Platforms	Platform Dependent	Windows, Microsoft.Net, Apple Mac OS
53	Network Management	Service Platform and Infrastructure	Delivery Servers	Web Servers	Various
54	Network Management	Service Platform and Infrastructure	Database / Storage	Storage	NAS, SAN
55	Real Time / Chat	Service Access and Delivery	Access Channels	Collaboration / Communications	Various
56	Remote Systems Control	Service Access and Delivery	Service Transport	Supporting Network Services	Microsoft SMS
57	Network Management	Service Access and Delivery	Service Transport	Supporting Network Services	Various
58	Video Conferencing	Service Platform and Infrastructure	Delivery Servers	Media Servers	Macromedia Breeze
59	Virus Protection	Service Platform and Infrastructure	Hardware / Infrastructure	Network Devices / Standards	Various
60	Workgroup / Groupware	Service Access and Delivery	Access Channels	Collaboration / Communications	Plumtree and Wiki

6. Will the application leverage existing components and/or applications across the Government (i.e., FirstGov, Pay.Gov, etc)?

yes

6.a. If yes, please describe.

This investment leverages: IT Infrastructure Optimization Line of Business.

1. Does the investment have a Risk Management Plan?

yes

1.a. If yes, what is the date of the plan?

2004-05-30

1.b. Has the Risk Management Plan been significantly changed since last year's submission to OMB?

no

1. Was operational analysis conducted?

yes

1.a. If yes, provide the date the analysis was completed.

2007-07-31

What were the results of your operational analysis?

NIH IT Infrastructure is a steady state investment that undergoes Evaluation reviews on its component programs. Operational analyses for the component programs include comparison of established performance measures to the planned and actual spending for the services provided. The results of the operational analyses are reviewed by the NIH CIO, the CPIC Review Board (Technical Review Board equivalent), the Information Technology Working Group (ITWG) and the Management and Budget Working Group (MBWG) (which together are the ITIRB equivalent). Funding decisions for central IT Infrastructure are made by the MBWG. NIH Institutes and Centers make funding decisions for hardware, software, and services which are not centrally provided. To validate its information technology infrastructure spending, NIH from time to time commissions independent third-party benchmark analyses. Most recently Gartner, Inc., an industry leader in IT measurement, studied NIHNet (FY 2005) and telecommunications operations (FY 2006) expenditures. Gartner compared NIH expenses to other organizations with infrastructure of similar size and complexity and found NIH spending reasonable and appropriate within the bounds of measurement error. Gartner identified opportunities for NIH to improve process management and reduce expenditures. NIH is pursuing the areas for process management and expense reduction.