10 U.S.C. § 2222 — Defense business systems: business process reengineering; enterprise architecture; management
submitted 22 years ago by Pub. L. 108-375 to r/title-10-ARMED-FORCES · 2,403 words · no verdicts yet
This section requires the Department of Defense to redesign business processes, manage covered systems through enterprise architecture, and obtain specified approvals.
(a) Defense business processes. The Secretary of Defense must review and, when appropriate, redesign defense business processes to match the best commercial practices as far as practicable and reduce customization of commercial systems.
(b) Defense business systems. Each covered system developed, deployed, and operated by the Department must (1) support efficient, reviewed processes; (2) fit a comprehensive defense business enterprise architecture; (3) show and trace its spending; and (4) use an acquisition and sustainment strategy that gives priority to commercial software and practices.
(c) Guidance. (1) The Secretary must issue guidance coordinating planning, programming, and investment decisions for covered systems. (2) The Secretary must direct the Department CIO, the Under Secretary for Acquisition and Sustainment, and each military-department CIO to issue and maintain supporting guidance within their responsibilities.
(d) Guidance contents. The guidance must include policies or processes for (1) continuously reviewing and streamlining processes and reducing unique changes to commercial systems; (2) setting system requirements; (3) planning and controlling investments and collecting and reviewing budget information; (4) periodically reviewing fully deployed systems by portfolio; (5) sustainability, technology refresh, and open architectures; (6) best acquisition and engineering practices for commercial, modified commercial, and defense-unique systems; (7) auditability; and (8) required development approvals.
(e) Enterprise architecture. (1) The Secretary, through the Department CIO, must develop and maintain a blueprint called the “defense business enterprise architecture” for integrated processes. (2) It must guide interoperable solutions and follow OMB policies. (3) It must uniformly include policies, procedures, data standards, performance measures, and information requirements, and enable legal compliance, reliable timely business and financial information, integrated budget/accounting/program systems, and identification of whether each existing system belongs in the architecture’s environment, will belong after modification, or does not belong. (4) It must be integrated into the information-technology enterprise architecture, which the Department CIO must develop to improve Department IT and computing infrastructure for major business processes. (5) It must include automatically extractable enterprise data for Department-wide analysis and management. (6) The CIO, coordinating with the Chief Data and Artificial Intelligence Officer*, has primary authority over common enterprise data, must develop governance and oversee data preparation and access. The CIO and Comptroller must maintain their data, participate in governance, extract needed data, use audited financial-statement source data when appropriate, provide legally permitted access to listed Department organizations, and keep data consistent. The cost-assessment director may access data for assigned missions. Listed Department leaders must provide systems and extracted data for automatically populating common-data sets.
(f) Council. The Secretary must establish a Defense Business Council advising on the architecture, process redesign, systems, and requirements. The Department CIO and Performance Improvement Officer co-chair it. Its members include military-department CIOs and chief management officers, the listed acquisition, comptroller, personnel, and data officials, or their designees.
(g) Approvals. (1) A covered program may not enter development, production, or fielding unless the proper official finds that the system is streamlined, fits the architecture, has achievable requirements and an implementation plan, minimizes unique customization, and meets auditability requirements. (2) The proper official is generally the Department CIO for priority systems, the military-department CIO for that department’s other systems, and the Department CIO for Defense Agency*, Field Activity, or multi-department systems; the Secretary may designate another official. (3) Each fiscal year with development or sustainment spending, the official must certify, conditionally certify, or refuse to certify continued compliance and, if certification fails, notify the milestone authority and recommend correction. (4) Obligating funds without certification violates 31 U.S.C. § 1341(a)(1)(A).
(h) Milestone authority. The milestone decision authority is responsible for acquiring the system and must ensure acquisition approvals are not considered until this section’s certifications and approvals are complete.
(i) Definitions. “Defense business system” means an information system operated by, for, or on behalf of the Department of Defense, including financial, feeder, contracting, logistics, planning and budgeting, installations or real estate, human resources, training and readiness, budget, retail, health care, travel and expense, payroll, supply-chain, Department-wide resource-planning, and contractor-management systems. It excludes national security systems and systems used exclusively by defense commissaries, exchanges, or nonappropriated morale, welfare, and recreation activities. “Covered defense business system” means one expected to have more than $50 million in budget authority over the current future-years defense program. “Business system portfolio” means closely related business systems. “Covered program” means the acquisition program for such a system or increment. “Priority” means a system expected to exceed $250 million over that period or designated by the Department CIO after analysis and congressional notice. “Enterprise architecture,” “information system,” and “national security system” have the meanings supplied by the cited provisions; this section does not define them. “Business process mapping” means documenting process steps in writing and a flow chart. “Common enterprise data” means usable business or management data, generally from defense systems, automatically accessible to authorized users. “Data governance process” means a system for timely Department-wide sharing of the data described in subsection (e)(6)(A).
The Secretary of Defense shall ensure that defense business processes are reviewed, and as appropriate revised, through business process reengineering to match best commercial practices, to the maximum extent practicable, so as to minimize customization of commercial business systems.
The Secretary of Defense shall ensure that each covered defense business system developed, deployed, and operated by the Department of Defense—
supports efficient business processes that have been reviewed, and as appropriate revised, through business process reengineering;
is integrated into a comprehensive defense business enterprise architecture;
is managed in a manner that provides visibility into, and traceability of, expenditures for the system; and
uses an acquisition and sustainment strategy that prioritizes the use of commercial software and business practices.
The Secretary shall issue guidance to provide for the coordination of, and decision making for, the planning, programming, and control of investments in covered defense business systems.
The Secretary shall direct the Chief Information Officer* of the Department of Defense, the Under Secretary of Defense for Acquisition and Sustainment, and the Chief Information Officer of each of the military departments* to issue and maintain supporting guidance, as appropriate and within their respective areas of responsibility, for the guidance of the Secretary issued under paragraph (1).
The guidance issued under subsection (c) shall include the following elements:
Policy to ensure that the business processes of the Department of Defense are continuously reviewed and revised—
to implement the most streamlined and efficient business processes practicable; and
to eliminate or reduce the need to tailor commercial off-the-shelf systems to meet or incorporate requirements or interfaces that are unique to the Department of Defense.
A process to establish requirements for covered defense business systems.
Mechanisms for the planning and control of investments in covered defense business systems, including a process for the collection and review of programming and budgeting information for covered defense business systems.
Policy requiring the periodic review of covered defense business systems that have been fully deployed, by portfolio, to ensure that investments in such portfolios are appropriate.
Policy to ensure full consideration of sustainability and technological refreshment requirements, and the appropriate use of open architectures.
Policy to ensure that best acquisition and systems engineering practices are used in the procurement and deployment of commercial systems, modified commercial systems, and defense-unique systems to meet Department of Defense missions.
Policy to ensure a covered defense business system is in compliance with the Department’s auditability requirements.
Policy to ensure approvals required for the development of a covered defense business system.
The Secretary, working through the Chief Information Officer of the Department of Defense, shall develop and maintain a blueprint to guide the development of integrated business processes within the Department of Defense. Such blueprint shall be known as the “defense business enterprise architecture”.
The defense business enterprise architecture shall be sufficiently defined to effectively guide implementation of interoperable defense business system solutions and shall be consistent with the policies and procedures established by the Director of the Office of Management and Budget.
The defense business enterprise architecture shall—
include policies, procedures, business data standards, business performance measures, and business information requirements that apply uniformly throughout the Department of Defense; and
enable the Department of Defense to—
comply with all applicable law, including Federal accounting, financial management, and reporting requirements;
routinely produce verifiable, timely, accurate, and reliable business and financial information for management purposes;
integrate budget, accounting, and program information and systems; and
identify whether each existing business system is a part of the business systems environment outlined by the defense business enterprise architecture, will become a part of that environment with appropriate modifications, or is not a part of that environment.
The defense business enterprise architecture shall be integrated into the information technology enterprise architecture required under subparagraph (B).
The Chief Information Officer of the Department of Defense shall develop an information technology enterprise architecture. The architecture shall describe a plan for improving the information technology and computing infrastructure of the Department of Defense, including for each of the major business processes conducted by the Department of Defense.
The defense business enterprise shall include enterprise data that may be automatically extracted from the relevant systems to facilitate Department of Defense-wide analysis and management of its business operations.
The Chief Information Officer of the Department of Defense, in coordination with the Chief Data and Artificial Intelligence Officer, shall have primary decision-making authority with respect to the development of common enterprise data. In consultation with the Defense Business Council, the Chief Information Officer shall—
develop an associated data governance process; and
oversee the preparation, extraction, and provision of data across the defense business enterprise.
The Chief Information Officer and the Under Secretary of Defense (Comptroller) shall—
in consultation with the Defense Business Council, document and maintain any common enterprise data for their respective areas of authority;
participate in any related data governance process;
extract data from defense business systems as needed to support priority activities and analyses;
when appropriate, ensure the source data is the same as that used to produce the financial statements subject to annual audit;
in consultation with the Defense Business Council, provide access, except as otherwise provided by law or regulation, to such data to the Office of the Secretary of Defense, the Joint Staff, the military departments, the combatant commands, the Defense Agencies, the Department of Defense Field Activities, and all other offices, agencies, activities, and commands of the Department of Defense; and
ensure consistency of the common enterprise data maintained by their respective organizations.
The Director of Cost Assessment and Program Evaluation shall have access to data for the purpose of executing missions as designated by the Secretary of Defense.
The Secretary of Defense, the Chairman of the Joint Chiefs of Staff, the Secretaries of the military departments, commanders of combatant commands, the heads of the Defense Agencies, the heads of the Department of Defense Field Activities, and the heads of all other offices, agencies, activities, and commands of the Department of Defense shall provide access to the relevant system of such department, combatant command, Defense Agency*, Defense Field Activity, or office, agency, activity, and command organization, as applicable, and data extracted from such system, for purposes of automatically populating data sets coded with common enterprise data.
The Secretary shall establish a Defense Business Council to provide advice to the Secretary on developing the defense business enterprise architecture, reengineering the Department’s business processes, developing and deploying defense business systems, and developing requirements for defense business systems. The Council shall be co-chaired by the Chief Information Officer and the Performance Improvement Officer of the Department of Defense.
The membership of the Council shall include the following:
The Chief Information Officers of the military departments, or their designees.
The Chief Management Officers of the military departments, or their designees.
The following officials of the Department of Defense, or their designees:
The Under Secretary of Defense for Acquisition and Sustainment with respect to acquisition, logistics, and installations management processes.
The Under Secretary of Defense (Comptroller) with respect to financial management and planning and budgeting processes.
The Under Secretary of Defense for Personnel and Readiness with respect to human resources management processes.
The Chief Data and Artificial Intelligence Officer of the Department of Defense.
The Secretary shall ensure that a covered defense business system program cannot proceed into development (or, if no development is required, into production or fielding) unless the appropriate approval official (as specified in paragraph (2)) determines that—
the system has been, or is being, reengineered to be as streamlined and efficient as practicable, and the implementation of the system will maximize the elimination of unique software requirements and unique interfaces;
the system and business system portfolio are or will be in compliance with the defense business enterprise architecture developed pursuant to subsection (e) or will be in compliance as a result of modifications planned;
the system has valid, achievable requirements and a viable plan for implementing those requirements (including, as appropriate, market research, business process reengineering, and prototyping activities);
the system has an acquisition strategy designed to eliminate or reduce the need to tailor commercial off-the-shelf systems to meet unique requirements, incorporate unique requirements, or incorporate unique interfaces to the maximum extent practicable; and
the system is in compliance with the Department’s auditability requirements.
For purposes of paragraph (1), the appropriate approval official with respect to a covered defense business system is the following:
Except as may be provided in subparagraph (C), in the case of a priority defense business system, the Chief Information Officer of the Department of Defense.
Except as may be provided in subparagraph (C), for any defense business system other than a priority defense business system—
in the case of a system of a military department, the Chief Information Officer of that military department; and
in the case of a system of a Defense Agency or Department of Defense Field Activity*, or a system that will support the business process of more than one military department or Defense Agency or Department of Defense Field Activity, the Chief Information Officer of the Department of Defense.
In the case of any defense business system, such official other than the applicable official under subparagraph (A) or (B) as the Secretary designates for such purpose.
For any fiscal year in which funds are expended for development or sustainment pursuant to a covered defense business system program, the appropriate approval official shall review the system and certify, certify with conditions, or decline to certify, as the case may be, that it continues to satisfy the requirements of paragraph (1). If the approval official determines that certification cannot be granted, the approval official shall notify the milestone decision authority for the program and provide a recommendation for corrective action.
The obligation of Department of Defense funds for a covered defense business system program that has not been certified in accordance with paragraph (3) is a violation of section 1341(a)(1)(A) of title 31.
The milestone decision authority for a covered defense business system program shall be responsible for the acquisition of such system and shall ensure that acquisition process approvals are not considered for such system until the relevant certifications and approvals have been made under this section.
In this section:
The term “defense business system” means an information system that is operated by, for, or on behalf of the Department of Defense, including any of the following:
A financial system.
A financial data feeder system.
A contracting system.
A logistics system.
A planning and budgeting system.
An installations management system or real estate system.
A human resources management system.
A training and readiness system.
A budget system.
A retail system.
A health care system.
A travel and expense system.
A payroll system.
A supply chain management system.
A Departmentwide resource planning system.
A contractor management system.
The term does not include—
a national security system; or
an information system used exclusively by and within the defense commissary system or the exchange system or other instrumentality of the Department of Defense conducted for the morale, welfare, and recreation of members of the armed forces* using nonappropriated funds.
The term “covered defense business system” means a defense business system that is expected to have a total amount of budget authority, over the period of the current future-years defense program submitted to Congress under section 221 of this title, in excess of $50,000,000.
The term “business system portfolio” means all business systems performing functions closely related to the functions performed or to be performed by a covered defense business system.
The term “covered defense business system program” means a defense acquisition program to develop and field a covered defense business system or an increment of a covered defense business system.
The term “priority defense business system” means a defense business system that is—
expected to have a total amount of budget authority over the period of the current future-years defense program submitted to Congress under section 221 of this title in excess of $250,000,000; or
designated by the Chief Information Officer of the Department of Defense as a priority defense business system, based on specific program analyses of factors including complexity, scope, and technical risk, and after notification to Congress of such designation.
The term “enterprise architecture” has the meaning given that term in section 3601(4) of title 44.
The term “information system” has the meaning given that term in section 11101 of title 40, United States Code.
The term “national security system” has the meaning given that term in section 3552(b)(6)(A) of title 44.
The term “business process mapping” means a procedure in which the steps in a business process are clarified and documented in both written form and in a flow chart.
The term “common enterprise data” means business operations or management-related data, generally from defense business systems, in a usable format that is automatically accessible by authorized personnel and organizations.
The term “data governance process” means a system to manage the timely Department of Defense-wide sharing of data described under subsection (e)(6)(A).
Source credit: (Added Pub. L. 108–375, div. A, title III, § 332(a)(1), Oct. 28, 2004, 118 Stat. 1851; amended Pub. L. 109–364, div. A, title IX, § 906(a), Oct. 17, 2006, 120 Stat. 2354; Pub. L. 110–417, [div. A], title III, § 351, Oct. 14, 2008, 122 Stat. 4425; Pub. L. 111–84, div. A, title X, § 1072(a), Oct. 28, 2009, 123 Stat. 2470; Pub. L. 111–383, div. A, title X, § 1075(b)(29), Jan. 7, 2011, 124 Stat. 4370; Pub. L. 112–81, div. A, title IX, § 901, Dec. 31, 2011, 125 Stat. 1527; Pub. L. 112–239, div. A, title IX, § 906, Jan. 2, 2013, 126 Stat. 1869; Pub. L. 113–66, div. A, title IX, § 901, Dec. 26, 2013, 127 Stat. 815; Pub. L. 113–283, § 2(e)(5)(A), Dec. 18, 2014, 128 Stat. 3087; Pub. L. 113–291, div. A, title VIII, § 803, title IX, § 901(d), (k)(3), title X, § 1071(f)(16), Dec. 19, 2014, 128 Stat. 3427, 3463, 3468, 3511; Pub. L. 114–92, div. A, title VIII, § 883(a)(1), (f), title X, § 1081(a)(7), Nov. 25, 2015, 129 Stat. 942, 1001; Pub. L. 114–328, div. A, title X, § 1081(a)(6), (c)(5), Dec. 23, 2016, 130 Stat. 2417, 2419; Pub. L. 115–91, div. A, title IX, § 912(a), title X, § 1081(b)(2), Dec. 12, 2017, 131 Stat. 1519, 1597; Pub. L. 115–232, div. A, title X, § 1081(f)(1)(A)(ii), Aug. 13, 2018, 132 Stat. 1986; Pub. L. 116–92, div. A, title VIII, § 839(a), title IX, § 902(25), title XVII, § 1731(a)(31), Dec. 20, 2019, 133 Stat. 1498, 1545, 1814; Pub. L. 117–263, div. A, title IX, § 902, Dec. 23, 2022, 136 Stat. 2748; Pub. L. 118–159, div. A, title IX, § 902(b), Dec. 23, 2024, 138 Stat. 2026; Pub. L. 119–60, div. A, title VIII, § 812(a)(2), Dec. 18, 2025, 139 Stat. 951.)
- 2004Enacted · Pub. L. 108-375 · 118 Stat. 1851
- 2006Amended · Pub. L. 109-364 · 120 Stat. 2354
- 2008Amended · Pub. L. 110-417 · 122 Stat. 4425
- 2009Amended · Pub. L. 111-84 · 123 Stat. 2470
- 2011Amended · Pub. L. 111-383 · 124 Stat. 4370
- 2011Amended · Pub. L. 112-81 · 125 Stat. 1527
- 2013Amended · Pub. L. 112-239 · 126 Stat. 1869
- 2013Amended · Pub. L. 113-66 · 127 Stat. 815
- 2014Amended · Pub. L. 113-283 · 128 Stat. 3087
- 2014Amended · Pub. L. 113-291 · 128 Stat. 3427, 3463, 3468, 3511
- 2015Amended · Pub. L. 114-92 · 129 Stat. 942, 1001
- 2016Amended · Pub. L. 114-328 · 130 Stat. 2417, 2419
- 2017Amended · Pub. L. 115-91 · 131 Stat. 1519, 1597
- 2018Amended · Pub. L. 115-232 · 132 Stat. 1986
- 2019Amended · Pub. L. 116-92 · 133 Stat. 1498, 1545, 1814
- 2022Amended · Pub. L. 117-263 · 136 Stat. 2748
- 2024Amended · Pub. L. 118-159 · 138 Stat. 2026
- 2025Amended · Pub. L. 119-60 · 139 Stat. 951
A history note hasn’t been published yet. The record shows enactment by Pub. L. 108-375 on 2004-10-28.
all 0 arguments · sorted by: best
no arguments yet — make the first case