Federal Manager's Daily Report

Unless weaknesses are effectively addressed and DHS implements and institutionalizes a full set of acquisition management controls, the Homeland Security Information Network project "will be at increased risk of operating in an ad hoc and chaotic manner–potentially resulting in increased project costs, delayed schedules, and performance shortfalls," GAO has said.

GAO wrote that DHS halted further improvements on the existing HSIN system in September 2007 and since then has continued to operate and maintain the system while a replacement–HSIN Next Gen–is being planned and acquired. "DHS decided in large part to pursue this replacement due to the existing system has security and information-sharing limitations that do not meet department and other users’ needs, thus impeding the department’s ability to effectively perform its mission; and the new system is to be a key part of a departmentwide consolidation effort to, among other things, reduce the number of systems within DHS that share sensitive but unclassified information," GAO wrote.

The acquisition strategy for HSIN Next Gen calls for four phases, with the transition to be fully completed in September 2009.

"DHS is in the process of implementing key acquisition management controls for HSIN Next Gen, but has yet to implement the full set of controls essential to effectively managing information technology system projects in a rigorous and disciplined manner. Specifically, it has not fully implemented key process controls in the areas of project and acquisition planning, requirements development and management, and risk management," said GAO.

DHS officials attributed the partial implementation of these key processes in large part to the aggressive schedule for acquiring and deploying HSIN Next Gen and stated the department plans to address these weaknesses by, for example, tasking its contractor to assist in the development and completion of the risk management process area. However, DHS has not yet established dates for when all of these activities will be completed, the report said.