WORK PLAN FL IT IV&V Work Plan PART THREE - WORK PLAN AND IV&V METHODOLOGY ID Task Name Duration 1 FL IT IV&V Project Work Plan 261 days 2 DDI / SI Contract Award 0 days 3 Project Initiation and Planning 13 days 4 Set standards, define processes (w/fl IT PM Team) 4 days 5 MILESTONE: Approved DDI Vendor Work Plan/Schedule 1 day 6 QA Review Methodology/Strategy 8 days 7 Develop review strategy and methodology 3 days 11 Submit methodology/strategy 1 day 12 PM review/comment 2 days 13 Finalize deliverable and submit 2 days 14 Deliverable Control Procedures 6 days 15 Develop and write deliverable control procedures 2 days 16 Submit deliverable control procedures 1 day 17 PM review/comment 2 days 18 Finalize deliverable and submit 1 day 19 Quality Management Plan (QMP) 6 days 20 Review vendor DDI schedule 2 days 21 Identify objectives, milestones and deliverables 1 day 22 Review/comment on DDI vendor Work Plan 3 days 23 Write compliance monitoring methodology 1 day 24 Write risk mitigation and analysis plan 1 day 25 Submit QMP 1 day 26 PM review/comment 1 day 27 Finalize deliverable and submit 1 day 28 IV&V Schedule for DDI Project Management Plan 6 days 29 Analyze DDI vendor schedule and PMP 2 days 30 Integrate IV&V entries (activities) into DDI vendor schedule 1 day 31 Submit integrated schedule 1 day 32 DDI Vendor and FL IT PM Teams review/comment 1 day 33 Finalize deliverable and submit 1 day 34 Confirm IV&V Project Initiation activities complete 1 day 35 Project Execution and Replanning 257 days 36 Initial Assessment Report 5 days 37 Draft the ER template 1 day 38 Submit ER template 1 day 39 PM review/comment 2 days 40 Finalize deliverable and submit 1 day 41 Solicitation / Procurement V&V 42 DDI deliverable V&V - Project Management 44 DDI deliverable V&V - Data store, design, cleansing
FL IT IV&V Work Plan ID Task Name Duration 46 DDI deliverable V&V - Replacement config, implement 48 DDI deliverable V&V - turnover & transition 50 Phase I 51 Quality Assurance Status and Risk Reports (QASRR) 13 days 52 QASRR-01/02/03/ 13 days 64 Participate in JADs and Requirements Validation 256 days 65 Participate in product development activities 256 days 66 Testing Monitoring and Assistance 256 days 67 Provide test phase oversight 89 Weekly Status Meetings (WSMs) 2 days 90 WSM-01/02/03/ 2 days 95 Weekly Assessment Reports (WARs) 2 days 96 WAR-01/02/03/ 2 days 106 IV&V Schedule Updates for DDI Project Management Plan 136 days 107 Monthly Assessment Reports: MAR-01/02/03/ 108 Special Communication Reports (as needed for critical issues) 109 Quality Management Plan (QMP) Updates 1 day 110 Work Breakdown Structure Updates / Rolling Waves 1 day 111 Phase Gate Assessment Report 112 Phase II / III / 113 Project Closure 114 Closure Report 115 Analyze project benefits and successes 3 days 116 Develop Lessons Learned 5 days 117 Draft Closure Report 3 days 118 Submit Report to FL IT PM Team 1 day 119 FL IT PM Team review/comment 2 days 120 Finalize and submit 1 day 121 Data Archive 5 days 122 Gather IV&V project documentation, deliverables, artifacts 4 days 123 Submit archive to FL IT PM 1 day 124 End FL IT Project
IV&V METHODOLOGY Software Engineering Services (SES) brings considerable experience applying IV&V processes using industry best practices to facilitate an effective, structured, and repeatable performance evaluation. Our IV&V approach fully complies with requirements of multiple agencies including the Center for Medicare and Medicaid Services (CMS) by integrating the following standards and practices: CMMI-DEV process areas to ensure the use of quality processes throughout the Development Life Cycle ISO 9001:2008 to ensure the use of sound Quality Management Principles Project Management Institute (PMI) Project Management Body of Knowledge (PMBoK) Fifth Edition to ensure sound Project Management practices. PMBoK - Government Extension, as additional standards by which to assess projects Institute of Electrical and Electronics Engineers (IEEE) Standard 1012-2004 to supplement assessment of quality assurance, configuration management, requirements, and life cycle processes. We fully understand how best practices must be blended and overlapped in order to achieve high quality results; we know how to apply the practices to achieve verification and validation of a project s products and processes throughout the entire system life cycle. We have deep experience with the systems integration best practices that are needed for large, complex IT program assessments and audits. We know that successful integration of IT-driven products and services requires a team of State and vendor program managers who are practicing integrated management. Our expertise with integrated project management will ensure that Florida IV&V projects adhere to best practices, and that risks to quality, cost and schedule are identified and managed. In summary, our method guarantees a thorough treatment of project risk, issues, and gaps by always focusing on best practice: 1. Verify the process: Is the project using documented procedures? 2. Verify compliance: Is the project being managed in alignment with documented procedures? 3. Validate the outcome: a. Are the procedures enabling effective project management? b. Do output work products (project deliverables and artifacts) demonstrate effective processes, resulting in products/services in the client s best interest? IV&V Data Collection and Analysis SES performs continuous IV&V monitoring and review of all aspects and evidence of vendor activity. We built our Quality Assurance (QA) approach to assess both vendor processes and
their work products; the work products include deliverables, but also the entire range of project artifacts including design and development documentation, reports, meeting minutes, etc. Our work relies on data that we collect through these three (3) methods: 1. Product and process reviews of deliverables and processes 2. Participation in project and technical meetings and reviews 3. Interviews of project team members All collected data are integrated into structured checklists tailored for and approved by the State. The integrated checklist questions will guide the SES team during each activity, covering the scope of all project components as appropriate for each point in the life cycle of activities. The IV&V checklists are organized in four primary oversight areas, depending on the scope of required oversight of the particular project: Management, Development, Implementation, and Operations. The Checklists serve the following critical functions: 1. Consolidate and integrate the analysis of all collected data 2. Provide scoring of DDI vendor process implementation and process effectiveness 3. Standardize the approach to document risks, findings, and recommendations IV&V REPORTING AND TRAINING We have continually refined our data analysis and reporting procedures through many years experience working with current and past clients in Alabama, Florida, Iowa, Kansas, Massachusetts, Minnesota, and Texas. Our expertise as a CMMI Institute Partner and our PMP-certified staff can deliver top-notch training opportunities when needed. SES will generate IV&V Reports to meet State needs; we focus on risks to project quality, cost, scope and schedule, but equally important, we always specify achievable recommendations to mitigate State risk. The SES IV&V Process figure summarizes collection, analysis and reporting process. The SES IV&V reporting contains the essential components needed to communicate project progress in achieving its goals and objectives; typically we include components from the comprehensive list below that will best meet the scope of State needs in monthly and quarterly reporting; summary update reporting may also be required for periodic status between monthly and quarterly reporting:
COMPONENT Executive Summary Method of Review Assessment Findings and Observations by Oversight Area Assessment of Impediments Oversight Summary CONTENT Overall Project Health Findings and Recommendations Updates Status of Previously Reported Findings Rating of Task Items and Task Numbers Review Description IV&V Scoring and metrics Project Planning Project Sponsorship Project Management: Stakeholder, Schedule, Cost, Risk, Configurations, Human Resources, Organizational Change Business Engineering Communication and Reporting Quality Assurance and Quality Control Requirements Management Requirements Development Contract-to-Implementation Traceability Development Environment Software Development Data Management Operating Environment System and Acceptance Testing Training Oversight Operations and Maintenance Data and Application Security Security Policies Compliance Risk Management Issue Management Change Request Management Changes in Priority Ranking Summary of New Observations and Findings Disposition of All IV&V Findings IV&V Activity (all meetings, interviews, product reviews, process reviews)