Exhibit 300 (BY2010) - National Select Agent Registry (NSAR) (formerly SATERIS)

PART ONE

OVERVIEW

1. Date of Submission:: 2009-04-10

2. Agency:: 009

3. Bureau:: 20

4. Name of this Capital Asset:: CDC National Select Agent Registry (NSAR) (formerly SATERIS)

5. Unique Project Identifier:: 009-20-01-03-01-0547-00

6. What kind of investment will this be in FY2010?: Mixed Life Cycle

7. What was the first budget year this investment was submitted to OMB?: FY2005

8. Provide a brief summary and justification for this investment, including a brief description of how this closes in part or in whole an identified agency performance gap.: The 2002 Bioterrorism Preparedness & Response Act requires entities to register with the U. S. Departments of HHS or Agriculture (USDA) if they possess,use,or transfer select biological agents or toxins that could pose a severe threat to public health and safety, animal, plant health, or animal/ plant products. The 2002 Act requires maintenance of a national database of entities that are registered for possession of SA & toxins, laboratory compliance with national safety guidelines, security measures including controlled access to SA and toxins, security screening of entities & personnel and criminal/civil penalties for inappropriate use of SA/toxins. NSAR is a joint APHIS & CDC program designed to control, protect, store & oversee the use, possession & transfer SA & toxins. This inter-agency collaboration combines agency efforts, better funds use, avoid duplication resulting in savings for government. NSAR maintains information regarding an entity's SA registration, lists of select agents or toxins they have & individual access & laboratory inspection information & where SA work is conducted. Access and accurate processing of SA data via NSAR system enables agencies to increase their ability to enforce and prevent the spread of infectious diseases & illnesses. Individuals desiring to conduct research related activities are screened and approved by Department of Justice's Criminal Justice Information Services. NSAR system manages the data and controls who, where, how & when SA research is conducted, thereby aiding to improve & protect the health & well-being of the public. The existence of NSAR database containing historic, current and accurate information about individuals, location, agents, toxins, and lab inspection outcomes enables rapid reporting of SA identified in a diagnostic/lab setting, aids/notifies SAP during a outbreak event, and ability to know where SA/toxins exists or transferred, so agencies can proactively query and respond to both natural & man-made disasters in a timelier manner. NSAR investment is a single secure shared national database, which merged two disparate data systems (CDC/APHIS) into 1 national system and minimizes data collection/entry redundancy, improves information sharing, & will reduce entities reporting burden when forms are submitted electronically.

9. Did the Agency's Executive/Investment Committee approve this request?: yes

9.a. If "yes," what was the date of this approval?: 2008-07-11

10. Did the Project Manager review this Exhibit?: yes

11.a. What is the current FAC-P/PM certification level of the project/program manager?: Waiver Issued

11.b. When was the Program/Project Manager Assigned?: 2007-01-31

11.c. What date did the Program/Project Manager receive the FACP/PM certification? If the certification has not been issued, what is the anticipated date for certification?: 2010-12-31

12. Has the agency developed and/or promoted cost effective, energy-efficient and environmentally sustainable techniques or practices for this project.: no

12.a. Will this investment include electronic assets (including computers)?: yes

12.b. Is this investment for new construction or major retrofit of a Federal building or facility? (answer applicable to non-IT assets only): no

13. Does this investment directly support one of the PMA initiatives?: yes

If yes, select the initiatives that apply:

Initiative Name
Expanded E-Government

13.a. Briefly and specifically describe for each selected how this asset directly supports the identified initiative(s)? (e.g. If E-Gov is selected, is it an approved shared service provider or the managing partner?): Gaps: inadequate database to collect, enter, process, report, redundant data entry, collaborations with APHIS. Supports eGov: minimizes data entry redundancy through a single joint national db, information sharing through inter-agency e-communications, reduce reporting burden for regulated community with e-submissions. Performance/productivity improvements: reduce registration time, data entry/reporting, robust database, efficient inter-agency collaboration, reduce entity reporting burden.

14. Does this investment support a program assessed using the Program Assessment Rating Tool (PART)?: no

15. Is this investment for information technology?: yes

16. What is the level of the IT Project (per CIO Council's PM Guidance)?: Level 3

17. What project management qualifications does the Project Manager have? (per CIO Council's PM Guidance): (1) Project manager has been validated as qualified for this investment

18. Is this investment identified as high risk on the Q4 - FY 2007 agency high risk report (per OMB memorandum M-05-23)?: yes

19. Is this a financial management system?: no

20. What is the percentage breakout for the total FY2009 funding request for the following? (This should total 100%)

Area	Percentage
Hardware	4
Software	6
Services	88
Other	3

21. If this project produces information dissemination products for the public, are these products published to the Internet in conformance with OMB Memorandum 05-04 and included in your agency inventory, schedules and priorities?: n/a

22. Contact information of individual responsible for privacy related questions.

Name	Felicia Kittles
Phone Number	770.488.8919
Title	IT Security Project Manager
Email	ice8@cdc.gov

23. Are the records produced by this investment appropriately scheduled with the National Archives and Records Administration's approval?: yes

24. Does this investment directly support one of the GAO High Risk Areas?: yes

SUMMARY OF SPEND

1. Provide the total estimated life-cycle cost for this investment by completing the following table. All amounts represent budget authority in millions, and are rounded to three decimal places. Federal personnel costs should be included only in the row designated Government FTE Cost, and should be excluded from the amounts shown for Planning, Full Acquisition, and Operation/Maintenance. The total estimated annual cost of the investment is the sum of costs for Planning, Full Acquisition, and Operation/Maintenance. For Federal buildings and facilities, life-cycle costs should include long term energy, environmental, decommissioning, and/or restoration costs. The costs associated with the entire life-cycle of the investment should be included in this report. All amounts represent Budget Authority Note: For the cross-agency investments, this table should include all funding (both managing partner and partner agencies). Government FTE Costs should not be included as part of the TOTAL represented.

Cost Type	Py-1 & Earlier -2007	PY 2008	CY 2009	BY 2010
Planning Budgetary Resources	0.036	0.037	0.038	0.039
Acquisition Budgetary Resources	16.555	3.340	3.000	2.800
Maintenance Budgetary Resources	9.987	4.000	4.160	4.300
Government FTE Cost	1.440	0.280	0.290	0.301
# of FTEs	2	2	2	2

2. Will this project require the agency to hire additional FTE's?: no

PERFORMANCE

In order to successfully address this area of the exhibit 300, performance goals must be provided for the agency and be linked to the annual performance plan. The investment must discuss the agency's mission and strategic goals, and performance measures (indicators) must be provided. These goals need to map to the gap in the agency's strategic goals and objectives this investment is designed to fill. They are the internal and external performance benefits this investment is expected to deliver to the agency (e.g., improve efficiency by 60 percent, increase citizen participation by 300 percent a year to achieve an overall citizen participation rate of 75 percent by FY 2xxx, etc.). The goals must be clearly measurable investment outcomes, and if applicable, investment outputs. They do not include the completion date of the module, milestones, or investment, or general goals, such as, significant, better, improved that do not have a quantitative measure.

Agencies must use the following table to report performance goals and measures for the major investment and use the Federal Enterprise Architecture (FEA) Performance Reference Model (PRM). Map all Measurement Indicators to the corresponding Measurement Area and Measurement Grouping identified in the PRM. There should be at least one Measurement Indicator for each of the four different Measurement Areas (for each fiscal year). The PRM is available at www.egov.gov. The table can be extended to include performance measures for years beyond FY 2009.

Row	Fiscal Year	Strategic Goal Supported	Measurement Area	Measurement Grouping	Measurement Indicator	Baseline	Planned Improvement to the Baseline	Actual Results
1	2005	S.O. 2.1 - Prevent the spread of infectious diseases	Mission and Business Results	Key Asset and Critical Infrastructure Protection	Completed SA entity registrations within 180 days of receipt	5% in 180 days	10% in 180 days	10% in 180 days
2	2005	S.O. 2.4 - Prepare for and respond to natural and man-made disasters	Customer Results	Service Availability	Total system up-time	90%	>90%	0%; continuing to work on deploying the system, so no results to report
3	2005	S.O. 4.3 - Conduct and oversee applied research to improve health and well-being	Processes and Activities	Efficiency	Reduction in # of Select Agent data entry errors	5-6%	7-8%	0% continuing to work on deploying the system, so no results to report
4	2005	Effective Management of Human Capital/Information Technology/Resources	Technology	External Data Sharing	# registered entities provided data electronically via NSAR	4-5%	5-6%	0% continuing to work on deploying the system, so no results to report
5	2006	S.O. 2.1 - Prevent the spread of infectious diseases	Mission and Business Results	Key Asset and Critical Infrastructure Protection	Completed SA entity registrations within 180 days of receipt	10% in 180 days	45% in 180 days	90% in 180 days
6	2006	S.O. 2.4 - Prepare for and respond to natural and man-made disasters	Customer Results	Service Availability	Total system up-time	90%	>90%	Currently exceeding 99% up-time
7	2006	S.O. 4.3 - Conduct and oversee applied research to improve health and well-being	Processes and Activities	Efficiency	Reduction in # of Select Agent data entry errors	7-8%	6-7%	achieved data entry error reduction. 6.5% error rate
8	2006	Effective Management of Human Capital/Information Technology/Resources	Technology	External Data Sharing	# registered entities provided data electronically via NSAR	5-6%	6-7%	0%;continuing to work on deploying this functionality, problems with secure user authentication and identity proofing
9	2007	S.O. 2.1 - Prevent the spread of infectious diseases	Mission and Business Results	Key Asset and Critical Infrastructure Protection	Completed SA entity registrations within 180 days of receipt	45% in 180 days	95% in 180 days	95 % in 180 days
10	2007	S.O. 2.4 - Prepare for and respond to natural and man-made disasters	Customer Results	Service Availability	Total system up-time	90%	>90%	Currently exceeding 99% up-time
11	2007	S.O. 4.3 - Conduct and oversee applied research to improve health and well-being	Processes and Activities	Efficiency	Reduction in # of Select Agent data entry errors	6-7%	5-6%	achieved data entry error reduction. 3% error rate
12	2007	Effective Management of Human Capital/Information Technology/Resources	Technology	External Data Sharing	# registered entities provided data electronically via NSAR	6-7%	7-8%	0%;continuing to work on deploying this functionality, problems with secure user authentication and identity proofing
13	2008	S.O. 2.1 - Prevent the spread of infectious diseases	Mission and Business Results	Key Asset and Critical Infrastructure Protection	Completed SA entity registrations within 180 days of receipt	95% in 180 days	45% in 120 days	95 % in 180 days
14	2008	S.O. 2.4 - Prepare for and respond to natural and man-made disasters	Customer Results	Service Availability	Total system up-time	90%	>90%	Currently exceeding 99% up-time
15	2008	S.O. 4.3 - Conduct and oversee applied research to improve health and well-being	Processes and Activities	Efficiency	Reduction in # of Select Agent data entry errors	10-15%	4-5%	achieved data entry error reduction. 3% error rate
16	2008	Effective Management of Human Capital/Information Technology/Resources	Technology	External Data Sharing	# registered entities provided data electronically via NSAR	7-8%	8-9%	2%; performing analysis and information gathering; continuing to work on deploying this functionality, problems with secure user authentication and identity proofing
17	2009	S.O. 2.1 - Prevent the spread of infectious diseases	Mission and Business Results	Key Asset and Critical Infrastructure Protection	Completed SA entity registrations within 180 days of receipt	45% in 120 days	95% in 120 days	TBD
18	2009	S.O. 2.4 - Prepare for and respond to natural and man-made disasters	Customer Results	Service Availability	Total system up-time	90%	>90%	TBD
19	2009	S.O. 4.3 - Conduct and oversee applied research to improve health and well-being	Processes and Activities	Efficiency	Reduction in # of Select Agent data entry errors	4-5%	3-4%	TBD
20	2009	Effective Management of Human Capital/Information Technology/Resources	Technology	External Data Sharing	# registered entities provided data electronically via NSAR	8-9%	10-15%	TBD
21	2010	S.O. 2.1 - Prevent the spread of infectious diseases	Mission and Business Results	Key Asset and Critical Infrastructure Protection	Completed SA entity registrations within 180 days of receipt	95% in 120 days	45% in 90 days	TBD
22	2010	S.O. 2.4 - Prepare for and respond to natural and man-made disasters	Customer Results	Service Availability	Total system up-time	90%	>90%	TBD
23	2010	S.O. 4.3 - Conduct and oversee applied research to improve health and well-being	Processes and Activities	Efficiency	Reduction in # of Select Agent data entry errors	4%	<4%	TBD
24	2010	Effective Management of Human Capital/Information Technology/Resources	Technology	External Data Sharing	# registered entities provided data electronically via NSAR	15-20%	20-25%	TBD
25	2011	S.O. 2.1 - Prevent the spread of infectious diseases	Mission and Business Results	Key Asset and Critical Infrastructure Protection	Completed SA entity registrations within 180 days of receipt	45% in 90 days	95% in 90 days	TBD
26	2011	S.O. 2.4 - Prepare for and respond to natural and man-made disasters	Customer Results	Service Availability	Total system up-time	90%	>90%	TBD
27	2011	S.O. 4.3 - Conduct and oversee applied research to improve health and well-being	Processes and Activities	Efficiency	Reduction in # of Select Agent data entry errors	3-4%	<4%	TBD
28	2011	Effective Management of Human Capital/Information Technology/Resources	Technology	External Data Sharing	# registered entities provided data electronically via NSAR	25-35%	30-40%	TBD
29	2012	S.O. 2.1 - Prevent the spread of infectious diseases	Mission and Business Results	Key Asset and Critical Infrastructure Protection	Completed SA entity registrations within 180 days of receipt	45% in 90 days	95% in 90 days	TBD
30	2012	S.O. 2.4 - Prepare for and respond to natural and man-made disasters	Customer Results	Service Availability	Total system up-time	90%	>90%	TBD
31	2012	S.O. 4.3 - Conduct and oversee applied research to improve health and well-being	Processes and Activities	Efficiency	Reduction in # of Select Agent data entry errorsv	3-4%	<4%	TBD
32	2012	Effective Management of Human Capital/Information Technology/Resources	Technology	External Data Sharing	# registered entities provided data electronically via NSAR	30-40%	40-45%	TBD
33	2013	S.O. 2.1 - Prevent the spread of infectious diseases	Mission and Business Results	Key Asset and Critical Infrastructure Protection	Completed SA entity registrations within 180 days of receipt	45% in 90 days	95% in 90 days	TBD
34	2013	S.O. 2.4 - Prepare for and respond to natural and man-made disasters	Customer Results	Service Availability	Total system up-time	90%	>90%	TBD
35	2013	S.O. 4.3 - Conduct and oversee applied research to improve health and well-being	Processes and Activities	Efficiency	Reduction in # of Select Agent data entry errors	3-4%	<4%	TBD
36	2013	Effective Management of Human Capital/Information Technology/Resources	Technology	External Data Sharing	# registered entities provided data electronically via NSAR	45-55%	55-60%	TBD
37	2014	S.O. 2.1 - Prevent the spread of infectious diseases	Mission and Business Results	Key Asset and Critical Infrastructure Protection	Completed SA entity registrations within 180 days of receipt	45% in 90 days	<15 days	TBD
38	2014	S.O. 2.4 - Prepare for and respond to natural and man-made disasters	Customer Results	Service Availability	Total system up-time	90%	>90%	TBD
39	2014	S.O. 4.3 - Conduct and oversee applied research to improve health and well-being	Processes and Activities	Efficiency	Reduction in # of Select Agent data entry errors	3-4%	<4%	TBD
40	2014	Effective Management of Human Capital/Information Technology/Resources	Technology	External Data Sharing	# registered entities provided data electronically via NSAR	60-70%	70-90%	TBD

Enterprise Architecture

In order to successfully address this area of the business case and capital asset plan you must ensure the investment is included in the agency's EA and Capital Planning and Investment Control (CPIC) process, and is mapped to and supports the FEA. You must also ensure the business case demonstrates the relationship between the investment and the business, performance, data, services, application, and technology layers of the agency's EA.

1. Is this investment included in your agency's target enterprise architecture?: yes

2. Is this investment included in the agency's EA Transition Strategy?: yes

2.a. If yes, provide the investment name as identified in the Transition Strategy provided in the agency's most recent annual EA Assessment.: CDC National Select Agent Registry (NSAR)

3. Is this investment identified in a completed (contains a target architecture) and approved segment architecture?: no

4. Identify the service components funded by this major IT investment (e.g., knowledge management, content management, customer relationship management, etc.). Provide this information in the format of the following table. For detailed guidance regarding components, please refer to http://www.whitehouse.gov/omb/egov/. Component: Use existing SRM Components or identify as NEW. A NEW component is one not already identified as a service component in the FEA SRM. Reused Name and UPI: A reused component is one being funded by another investment, but being used by this investment. Rather than answer yes or no, identify the reused service component funded by the other investment and identify the other investment using the Unique Project Identifier (UPI) code from the OMB Ex 300 or Ex 53 submission. Internal or External Reuse?: Internal reuse is within an agency. For example, one agency within a department is reusing a service component provided by another agency within the same department. External reuse is one agency within a department reusing a service component provided by another agency in another department. A good example of this is an E-Gov initiative service being reused by multiple organizations across the federal government. Funding Percentage: Please provide the percentage of the BY requested funding amount used for each service component listed in the table. If external, provide the funding level transferred to another agency to pay for the service.

Row	Agency Component Name	Agency Component Description	Service Type	Component	Internal or External Reuse?	Funding %
1	National Select Agent Registery (547)	A national database of regulated entitites for the Select Agent Program that includes: names and locations of registered persons; the listed agents and toxins such persons possess, use or transfer; and, characterization of such agents and toxins. The information contained in the national database is classified "secret" and will be safeguarded as appropriate. In addition to the development and maintenance of SATERIS, a Continuation of Operations Plan will be developed and maintained. Th	Customer Initiated Assistance	Reservations / Registration	No Reuse	20
2	National Select Agent Registery (547)	A national database of regulated entitites for the Select Agent Program that includes: names and locations of registered persons; the listed agents and toxins such persons possess, use or transfer; and, characterization of such agents and toxins. The information contained in the national database is classified "secret" and will be safeguarded as appropriate. In addition to the development and maintenance of SATERIS, a Continuation of Operations Plan will be developed and maintained. Th	Routing and Scheduling	Outbound Correspondence Management	No Reuse	15
3	National Select Agent Registery (547)	A national database of regulated entitites for the Select Agent Program that includes: names and locations of registered persons; the listed agents and toxins such persons possess, use or transfer; and, characterization of such agents and toxins. The information contained in the national database is classified "secret" and will be safeguarded as appropriate. In addition to the development and maintenance of SATERIS, a Continuation of Operations Plan will be developed and maintained. Th	Knowledge Management	Information Retrieval	No Reuse	15
4	National Select Agent Registery (547)	A national database of regulated entitites for the Select Agent Program that includes: names and locations of registered persons; the listed agents and toxins such persons possess, use or transfer; and, characterization of such agents and toxins. The information contained in the national database is classified "secret" and will be safeguarded as appropriate. In addition to the development and maintenance of SATERIS, a Continuation of Operations Plan will be developed and maintained. Th	Management of Processes	Change Management	No Reuse	10
5	National Select Agent Registery (547)	A national database of regulated entitites for the Select Agent Program that includes: names and locations of registered persons; the listed agents and toxins such persons possess, use or transfer; and, characterization of such agents and toxins. The information contained in the national database is classified "secret" and will be safeguarded as appropriate. In addition to the development and maintenance of SATERIS, a Continuation of Operations Plan will be developed and maintained. Th	Routing and Scheduling	Inbound Correspondence Management	No Reuse	15
6	National Select Agent Registery (547)	A national database of regulated entitites for the Select Agent Program that includes: names and locations of registered persons; the listed agents and toxins such persons possess, use or transfer; and, characterization of such agents and toxins. The information contained in the national database is classified "secret" and will be safeguarded as appropriate. In addition to the development and maintenance of SATERIS, a Continuation of Operations Plan will be developed and maintained. Th	Development and Integration	Data Integration	No Reuse	10
7	National Select Agent Registery (547)	A national database of regulated entitites for the Select Agent Program that includes: names and locations of registered persons; the listed agents and toxins such persons possess, use or transfer; and, characterization of such agents and toxins. The information contained in the national database is classified "secret" and will be safeguarded as appropriate. In addition to the development and maintenance of SATERIS, a Continuation of Operations Plan will be developed and maintained. Th	Search	Query	No Reuse	15

5. To demonstrate how this major IT investment aligns with the FEA Technical Reference Model (TRM), please list the Service Areas, Categories, Standards, and Service Specifications supporting this IT investment. FEA SRM Component: Service Components identified in the previous question should be entered in this column. Please enter multiple rows for FEA SRM Components supported by multiple TRM Service Specifications. Service Specification: In the Service Specification field, Agencies should provide information on the specified technical standard or vendor product mapped to the FEA TRM Service Standard, including model or version numbers, as appropriate.

Row	SRM Component	>Service Area	Service Category	Service Standard	Service Specification (i.e., vendor and product name)
1	Reservations / Registration	Service Platform and Infrastructure	Delivery Servers	Application Servers	BEA WebLogic Platform by: BEA Systems, Inc.
2	Reservations / Registration	Service Platform and Infrastructure	Delivery Servers	Web Servers	Microsoft Internet Information Services by: Microsoft Corporation
3	Outbound Correspondence Management	Component Framework	Security	Certificates / Digital Signatures	The Transport Layer Security (TLS) Protocol Version 1.1 by: The Internet Engineering Task Force
4	Information Retrieval	Service Access and Delivery	Service Transport	Supporting Network Services	Lightweight Directory Access Protocol by: The Internet Engineering Task Force
5	Information Retrieval	Service Access and Delivery	Service Transport	Supporting Network Services	T3 Carrier by: ANSI
6	Information Retrieval	Component Framework	Data Interchange	Data Exchange	SOAP by: World Wide Web Consortium
7	Information Retrieval	Service Interface and Integration	Interface	Service Description / Interface	Web Services Description Language (WSDL) by: World Wide Web Consortium
8	Information Retrieval	Service Access and Delivery	Service Transport	Supporting Network Services	T1 Carrier by: ANSI
9	Information Retrieval	Service Access and Delivery	Service Transport	Supporting Network Services	Multipurpose Internet Mail Extensions by: The Internet Engineering Task Force
10	Information Retrieval	Service Platform and Infrastructure	Support Platforms	Dependent Platform	Microsoft Windows 2000 by: Microsoft Corporation
11	Information Retrieval	Service Access and Delivery	Access Channels	Other Electronic Channels	CDC Web Service Standard by: CDC
12	Change Management	Component Framework	Business Logic	Platform Dependent Technologies	Documentum by: EMC Corporation
13	Change Management	Service Platform and Infrastructure	Software Engineering	Test Management	Rational RequisitePro by: International Business Machines Corp.
14	Change Management	Service Platform and Infrastructure	Database / Storage	Storage	Veritas NetBackup by: Symantec Corporation
15	Change Management	Service Platform and Infrastructure	Software Engineering	Software Configuration Management	Rational ClearQuest by: International Business Machines Corp.
16	Change Management	Service Platform and Infrastructure	Software Engineering	Modeling	Rational Rose by: International Business Machines Corp.
17	Inbound Correspondence Management	Service Platform and Infrastructure	Hardware / Infrastructure	Wide Area Network (WAN)	Integrated Services Digital Network (ISDN) - Core Aspects of Frame Protocol for Use with Frame Relay Bearer Service by: ANSI
18	Inbound Correspondence Management	Component Framework	User Presentation / Interface	Static Display	Hyper Text Markup Language by: International Organization for Standardization
19	Inbound Correspondence Management	Component Framework	Security	Supporting Security Services	Check Point Firewall by: Check Point Software Technologies Ltd
20	Inbound Correspondence Management	Service Interface and Integration	Interoperability	Data Format / Classification	Extensible Markup Language (XML) 1.1 by: World Wide Web Consortium
21	Inbound Correspondence Management	Service Platform and Infrastructure	Software Engineering	Test Management	Bobby by: International Business Machines Corp.
22	Inbound Correspondence Management	Service Access and Delivery	Service Requirements	Legislative / Compliance	36 CFR Part 1194 by: United States Access Board
23	Inbound Correspondence Management	Service Access and Delivery	Access Channels	Web Browser	Mozilla Firefox by: Mozilla
24	Inbound Correspondence Management	Service Platform and Infrastructure	Support Platforms	Independent Platform	Java 2 Enterprise Edition by: Sun Microsystems, Inc.
25	Inbound Correspondence Management	Service Platform and Infrastructure	Database / Storage	Database	Microsoft SQL Server by: Microsoft Corporation
26	Inbound Correspondence Management	Service Access and Delivery	Service Transport	Service Transport	TCP/IP by: The Internet Engineering Task Force
27	Inbound Correspondence Management	Service Interface and Integration	Interoperability	Data Types / Validation	XML Schema by: World Wide Web Consortium
28	Inbound Correspondence Management	Component Framework	User Presentation / Interface	Static Display	Hypertext Transfer Protocol with SSL by: The Internet Engineering Task Force
29	Inbound Correspondence Management	Service Platform and Infrastructure	Software Engineering	Test Management	JProfiler by: ej-technologies GmbH
30	Inbound Correspondence Management	Service Platform and Infrastructure	Software Engineering	Integrated Development Environment	jBuilder by: Borland Software Corporation
31	Inbound Correspondence Management	Component Framework	Data Management	Database Connectivity	Java Database Connectivity by: Sun Microsystems, Inc.
32	Inbound Correspondence Management	Component Framework	Business Logic	Platform Independent Technologies	Enterprise Java Beans by: Sun Microsystems, Inc.
33	Inbound Correspondence Management	Service Platform and Infrastructure	Hardware / Infrastructure	Peripherals	CDC Desktop Scanner Standard by: CDC
34	Inbound Correspondence Management	Component Framework	Security	Certificates / Digital Signatures	Secure Sockets Layer by: Netscape Communications Corporation
35	Inbound Correspondence Management	Service Access and Delivery	Access Channels	Web Browser	Windows Internet Explorer 6.0 by: Microsoft Corporation
36	Inbound Correspondence Management	Component Framework	User Presentation / Interface	Dynamic Server-Side Display	Java Server Pages by: Sun Microsystems, Inc.
37	Inbound Correspondence Management	Service Access and Delivery	Service Transport	Supporting Network Services	Microsoft Active Directory by: Microsoft Corporation
38	Inbound Correspondence Management	Component Framework	Business Logic	Platform Independent Technologies	Java Servlet (JSR 53) by: Sun Microsystems, Inc.
39	Inbound Correspondence Management	Component Framework	Business Logic	Platform Independent Technologies	JavaScript by: Sun Microsystems, Inc.
40	Inbound Correspondence Management	Service Interface and Integration	Interoperability	Data Transformation	XSL Transformations (XSLT) Version 2.0 by: World Wide Web Consortium
41	Data Integration	Component Framework	Data Management	Database Connectivity	Open Database Connectivity by: Microsoft Corporation
42	Data Integration	Service Interface and Integration	Integration	Middleware	Distributed Component Object Model by: Microsoft Corporation
43	Data Integration	Service Platform and Infrastructure	Software Engineering	Integrated Development Environment	Eclipse by: Eclipse Foundation
44	Query	Service Platform and Infrastructure	Hardware / Infrastructure	Peripherals	Network Attached Storage, EMC by: EMC Corporation
45	Query	Component Framework	Data Management	Reporting and Analysis	Crystal Reports by: SAP AG
46	Query	Service Platform and Infrastructure	Database / Storage	Database	Structured Query Language by: International Organization for Standardization

6. Will the application leverage existing components and/or applications across the Government (i.e., FirstGov, Pay.Gov, etc)?: no

PART TWO

RISK

You should perform a risk assessment during the early planning and initial concept phase of the investment's life-cycle, develop a risk-adjusted life-cycle cost estimate and a plan to eliminate, mitigate or manage risk, and be actively managing risk throughout the investment's life-cycle.

Answer the following questions to describe how you are managing investment risks.

1. Does the investment have a Risk Management Plan?: yes

1.a. If yes, what is the date of the plan?: 2006-08-04

1.b. Has the Risk Management Plan been significantly changed since last year's submission to OMB?: yes

1.c. If yes, describe any significant changes:: The current Risk Management Plan was a product based on reviewing, analyzing and strategizing based on the information available regarding our contract acquisition, project goals, objectives, deliverables and developing a risk management plan that identifies the cost, schedule and performance risks for the investment. The select agent program in conjunction with other portions of COTPER/CDC has recently selected a new IT development and support contractor. As a result, an IBR will be conducted to re-access the risk associated with NSAR. The key risks areas with be evaluated and will result in a revised risk management plan in FY 2009.

2. If there is currently no plan, will a plan be developed?: yes

2.a. If yes, what is the planned completion date?: 2009-04-30

3. Briefly describe how investment risks are reflected in the life cycle cost estimate and investment schedule:: Schedule Risk from external dependencies is mitigated through the use of conservative milestone completion date estimates. Previous experience with integration efforts with both external agencies (CDC's Secure Data Network and USDA/APHIS) has provided historical context for adjusting internal schedule estimates with appropriate additional calendar time (adjusted at a macro level since we do not have a contractual relationship with either of the agencies with which we have schedule dependencies). Internal schedule risks are also accounted for through milestone estimate adjustments for historical experience, though are more directly tied to specific WBS tasks. The investment development effort is a complex project with multiple time-phased releases, however the major architectural elements are complete, integrated, and deployed; they no longer represent significant schedule risk. Initial Cost Risk is no longer a major factor since the investment has attained initial operational deployment and is 4 years into its contract. In addition, several major changes of direction for the program, driven both internally and through external direction (e.g., OMB direction to change development to a joint inter-agency system) make original cost estimates invalid. This investment is incrementally funded through annual exercise of option years to the contract base year (each year is fully funded/committed as funds are available). The original, modified, and current investment budget cost estimates are OMB approved. Lifecycle Cost Risk is estimated against the base year and 4 option years of the current contract, plus an additional estimated five years of use. Original Cost Benefit Analysis (CBA) figures present a Benefit-Cost Ratio of 1.64 with a payback period of approximately 7 years. As noted in the schedule risk and initial cost risk sections above, schedule adjustments have been made for both internal and external schedule risks, and associated cost estimates have been approved by OMB. The costs reported to OMB and used in the CBA include all development costs (DME) for the current contract period and estimated maintenance costs of the system/software for the projected five year follow-on contract (in line with the expected life cycle of the system). Earned Value Management information is reported monthly and overall investment cost and schedule variances are and expected to remain well below 10% for the remainder of the contract.

COST & SCHEDULE

1. Does the earned value management system meet the criteria in ANSI/EIA Standard 748?: no

2. Is the CV% or SV% greater than ± 10%?: yes

2.a. If yes, was it the?: CV

3. Has the investment re-baselined during the past fiscal year?: no