Geography Division Transformation and

Application Modernization (GEOTAM)

Deliverables and Work Products

April 17, 2026

U.S. Census Bureau

Geography Division Transformation and Application Modernization

GEOTAM Attachment: Deliverables and Work Products

1.0 Deliverables

Deliverable Section C Reference

Elements of the Deliverable Due Date / Frequency

Delivery Method /Location

Contract Management Plan (CMP)

3.1.1.1 Order

Governance

Defines the Contractor’s organizational structure, management controls, and processes used to administer and oversee the order.

Shall include, but is not limited to:

• Contractor team capabilities.

• Contractor team & CPMO organizational structure, roles, and points of contact.

• Staffing Plan that details the required resources, skillsets, onboarding, retention, suitability, training, and staffing strategies throughout the life of the order.

• Subcontractor Management Plan that describes how subcontractors are managed, coordinated, overseen, and integrated into order execution.

• Governance structure and decision-making protocols.

• Project management procedures and controls.

• Schedule management (contract-level).

• Cost management.

• Quality management & continuous improvement.

• Risk and issue management.

• Communication management (contract-administrative).

• Compliance management

• Schedule and scope management

• Governance

• Project management procedures and policies, including a process for project tracking in terms of

10 business days after the Program Manager has been cleared, and no more than 3 business days after updates have been made

Electronic upload to Government Repository to

COR/GPMO

Reference

Elements of the Deliverable Due Date / Frequency

Delivery Method /Location identified deliverables, working documents, work products and cost.

Monthly Contract Administration Status Report

(MCASR)

3.1.1.2 Staffing and

Subcontractor Management

Summarizes monthly contract performance, updates to management artifacts, task status, risks, issues, and support needs.

Shall include, but is not limited to:

• Any updates made to the CMP, QCP, Risk and Mitigation Plans, Order Communications and Decision Logs, Staffing Plans, and Subcontractor Management Plan.

• Updated Staffing Matrix

• Monthly Internal Use Software (IUS) Monthly Report.

• The identification, summary description, and status of in-progress and newly assigned tasks.

• Progress against agreed-to milestones.

• Risks and issues that may impede progress.

• Request for support required from the GEO Program.

• Identification of delivered work products/working documents/deliverables and pending action items.

Monthly Electronic to

COR/GPMO

along with the monthly invoice submission

Kick-off meeting

3.1.4.1 Kick-off

Meeting

Provides initial alignment between the Contractor and the Government by introducing key personnel, reviewing scope and expectations, and establishing the processes and protocols for order execution.

Shall include, but is not limited to:

• An introduction of Contractor key personnel and other significant team members.

Within five

(5) business days of contract award

Electronic upload to Government

Reference

Elements of the Deliverable Due Date / Frequency

Delivery Method /Location

• A review of the background, scope, schedule and deliverables.

• An overview of the activities required to initiate and manage the contract.

• A review of invoice procedures and expectations for contract-level reporting.

• 3Discussion of initial coordination, communication expectations, and operational readiness steps.

Personnel Documentation Records

3.1.1.2 Staffing and

Subcontractor Management

A complete and update-to-date collection of all personnel-related documentation for Contractor and subcontractor staff assigned under this contract to provide to the Government upon request in the format and timeframe specified by the Government.

Shall include, but is not limited to:

• Suitability Records

• Training Completion Records

• Certification Evidence

• Role Assignments

• Onboarding/Exit documentation

As required Electronic upload to Government Repository to

COR/GPMO

PMR Meeting 3.1.4.4 Program Management Review (PMR)

Delivers a comprehensive, data-driven evaluation of program performance, cost, schedule, and projected future outcomes to the GPMO.

Shall include, but is not limited to:

• Executive summary of program status

• Performance metrics and analysis

• Cost, schedule, and risk status

• Issues, dependencies, and mitigation actions

• Trends, variances, and root-cause analysis

• Forecasted activities and projected program outlook

First submission 60 days after contract start; As defined by the COR thereafter.

Electronic upload to Government

Reference

Elements of the Deliverable Due Date / Frequency

Delivery Method /Location

• Action items with owners and due dates

Quality Control Plan (QCP)

3.1.2.3 Program

Quality Management & QASP Performance

Identifies metrics, indicators, and review processes supporting quality control under this order.

Shall include, but is not limited to:

• Alignment of the indicators, indexes and metrics to GEO’s stated objectives and measures of success.

• A description of the review/audit process, its documentation, methods of internal review, identification of staff position(s) performing the reviews, and the frequency of the reviews.

• A description of the approach and procedures for communicating with the Government, to include handling corrective actions; identifying and implementing potential improvements to GEO Program services.

• Identification of with which lesson(s) learned are addressed in each update of the QCP.

Annually Electronic upload to Government Repository to

COR/GPMO

Transition-In Plan (TIP)

3.1.3.1 Transition-In Defines the Contractor’s approach for onboarding resources obtaining access, transferring knowledge, and achieving Full Operational Capability (FOC) of systems or services.

Shall include, but is not limited to:

• Transition-in phases

• Transition-in risks and mitigation plans

• Transition-in team roles, responsibilities, and communication lines

• Stakeholder mapping for transition-in

• Knowledge and document management processes

• Staffing plan for transition-in

10 business days after PM is cleared

Electronic upload to Government

Reference

Elements of the Deliverable Due Date / Frequency

Delivery Method /Location

• Background investigation submission schedule and process

• Onboarding process and required training

• GFE/GFI and systems access plans

• Document reviews and initial artifact assessments

• Project-based plans for knowledge transfer and cut-over activities.

Transition-Out Plan (TOP)

3.1.3.2 Transition-

Out

Describes how the Contractor will wind down activities, transfer knowledge, return assets, and support close-out.

Shall include, but is not limited to:

• Transition-out risks and mitigation plans

• Transition-out team roles, responsibilities, and communication lines

• Stakeholder mapping for transition-out

• Knowledge and document handover processes

• Knowledge transfer and cut-over plans

• Staffing ramp-down plan

• Access revocation and separations process

• GFE/GFI return and asset disposition plan

• Schedule baseline and milestones for transition-out

• Coordination and governance approach

• Close-out activities and final materials

• Documented reviews and final artifact assessments

90 business days before the end of the contract

Electronic upload to Government Repository to

COR/GPMO

Weekly Status Report & Meeting

3.1.4.2 Weekly

Status Report and Meeting

Provides weekly updates on progress, risks, issues, staffing, and key events.

Shall include, but is not limited to:

• A summary of the work accomplished in the previous week and work planned for the current and following week.

Weekly Electronic upload to Government

Reference

Elements of the Deliverable Due Date / Frequency

Delivery Method /Location

• Risks and mitigations of risks, to include barriers to completing work, and impacts on quality, schedule and cost and proposed solutions.

• Issues and resolutions to issues.

• Staffing status.

• Any other topics of significance to report.

• Key issues and opportunities and events for the upcoming week.

Monthly Cost and Schedule Report

3.1.4.3 Monthly Cost

and Schedule Report and Meeting

Provides a consolidated, data-driven view of the Contractor’s monthly cost performance and schedule execution.

Shall include, but is not limited to:

• Current and cumulative cost status by CLIN and SLIN

• Labor and non-labor cost breakdowns aligned to the CWBS and DWBS

• Planned vs actual cost and schedule performance, including variances

• Forecasted costs, level of effort, and funding requirements through the period of performance

• Identification and explanation of significant cost or schedule variances and trends

• Schedule status, critical path impacts, and milestone performance

• Funds invoiced to date and reconciliation against obligated funding

• Identification of risks or issues affecting cost or schedule performance

Supporting data required for invoice validation and performance tracking

Monthly Electronic upload to Government

Reference

Elements of the Deliverable Due Date / Frequency

Delivery Method /Location

Internal Use Software (IUS) Monthly Report

3.1.1.2

Staffing and Subcontractor Management

Contractor’s inputs to a Government drafted report that documents all IUS-related lifecycle events, costs, enhancements, and disclosures for Census financial reporting.

Shall include, but is not limited to:

• Name

• Labor Category

• Hourly Rate

• Number of hours worked per current invoicing period

• Project Phase

• Task

Monthly Electronic upload to Government Repository to

COR/GPMO

Knowledge Transfer Strategy & Organizational Change Management Plans

3.2.3 Organizational Change Management

Result in minimal costs, maximum adoption, ongoing service, and long-term adoption for GEO Programs’ transformation and application modernization initiatives that align with enterprise and GEO objectives.

Shall include, but is not limited to:

• Defining change vision, objectives, and success measures

• Stakeholder analysis and segmentation

• Change impact assessment (Processes, roles, skills)

• Sponsorship and Governance model

• Communication strategy, frequency, feedback loops

• Training and enablement plan

• Adoption and readiness metrics

• Resistance management and escalation approach

• Cutover support and post go-live reinforcement (e.g.

coaching, office hours)

• Integration points with IMS, PI/iteration cadence (if applicable)

TBD Electronic upload to Government

Reference

Elements of the Deliverable Due Date / Frequency

Delivery Method /Location

Application Rationalization and Optimization Plan

3.3.6 Cloud Application Migration

Assessment plan defining evaluation criteria, methodology, and improvement recommendations for all applications.

Shall include, but is not limited to:

• Inventory of all applications and systems within scope

• Definitions of assessment criteria (e.g. business value, technical health, cost, security posture)

• Methodology, scoring model, and prioritization approach

• Evaluation of redundancy, utilization, and alignment with enterprise architecture

• Compliance and risk factors

• Recommendations for consolidation, modernization, or retirement in alignment with IT strategy and best practices

• Integration points with IMS

TBD Electronic upload to Government Repository to

COR/GPMO

Defect Management Plan

3.3.3 Application

Testing

Defines a structured, repeatable process for identifying, tracking, and resolving system-level defects to maintain operational stability, compliance, and quality through the lifecycle.

Shall include, but is not limited to:

• Definition of the end-to-end lifecycle process

• Severity/priority and SLAs for response, workaround, and resolution

• Intake channels

• Methods for Root-cause analysis (RCA), corrective/preventative actions, and tracking of recurring issues

• Integration with CI/CD, automated testing, and backlog tools

• Governance roles and responsibilities

Electronic upload to Government

Reference

Elements of the Deliverable Due Date / Frequency

Delivery Method /Location

• Escalation paths and decision gates for high impact incidents

• Reporting cadence, metrics, and dashboards

• Process for security vulnerabilities and compliance defects

• Data retention, audit, and knowledge base updates to support continuous improvement

Test Strategies and Plans

3.3.3 Application

Testing

Framework of test principles, scope, plans, and schedules.

Shall include, but is not limited to:

• List of high-level plans and principles that guide the overall software testing process.

TBD Electronic upload to Government Repository to

COR/GPMO

Test Data Strategy and Plan

3.3.3 Application

Testing

Defines the approach for creating, securing, and managing test data.

Shall include, but is not limited to:

• How test data will be created, secured, maintained, and refreshed to ensure accurate, repeatable, and compliant testing across all environments.

• Test data sources, types, and required datasets

• Data privacy, security, and compliance controls

• Roles and responsibilities

• Test data refresh cycle and maintenance procedures

• Integration with test environments and test execution schedules

TBD Electronic upload to Government Repository to

COR/GPMO

Cloud Application Migration Strategy

3.3.6 Cloud Application Migration

End-to-end plan covering migration strategy, sequencing, tools, and validation.

Shall include, but is not limited to:

• CSP assessment and recommendations

• Cost benefit analysis

TBD Electronic upload to Government

Reference

Elements of the Deliverable Due Date / Frequency

Delivery Method /Location

• Cloud adoption framework

• Governance Framework

• Migration Strategy

• Pre-migration readiness checklist

• Application inventory with dependencies/compliance requirements

• Migration sequencing and cutover approach

• Rollback procedures and downtime windows

• Migration Tools/automation scripts

• Performance validation and security posture checks

• Risk mitigation strategies and contingency plans

• Post-migration validation steps and acceptance criteria

• Integration with IMS

Cloud Application Migration Roadmap

3.3.6 Cloud Application Migration

Roadmap for FinOps, DevSecOps, and continuous cloud optimization.

Shall include, but is not limited to:

• Cloud optimization objectives and scope applicable across migrated and modernized cloud applications

• FinOps governance and optimization approach, including cost visibility, allocation, monitoring, and optimization practices

• DevSecOps optimization practices including secure automation, pipeline standardization, and continuous improvement of cloud operations

• Zero-to-mastery enablement approach addressing skills development, knowledge transfer, and adoption maturity

• Optimization roadmap organized into phased improvement periods (near, mid, long term)

TBD Electronic upload to Government

Reference

Elements of the Deliverable Due Date / Frequency

Delivery Method /Location

• Key assumptions, dependencies, risks, and optimization success metrics.

2.0 Work Products

Work Product Section C Reference

Work Product Elements Due Date / Frequency

Delivery Method /Location

Change Log 3.1.1.1 Procurement Governance

Tracks all order changes with descriptions, decisions, approvals, and implementation outcomes. May be incorporated into the Communications and Decision Log for consolidated tracking.

Shall include, but is not limited to:

• Description

• Originator

• Date

• Status

• Impact Analysis

• Approvals

• Decisions

• Implementation Outcomes

As required Electronic upload to Government Repository to

COR/GPMO

Communication Plan

3.1.1.4 Communication Management

Describes communication protocols, including communication channels, meeting cadencies, documentation standards, escalation paths, and message coordination.

Shall include, but is not limited to:

• Communication methods and frequency

• Roles and responsibilities

• Meeting cadencies

• Documentation standards

• Escalation paths

• Message coordination

10 business days after PM is cleared, then Annually

Electronic upload to Government

Reference

Work Product Elements Due Date / Frequency

Delivery Method /Location

Communications and Decision Log

3.1.1.4 Communication Management

Records key communications. Decisions, actions, and order-administrative changes throughout the order.

Shall include, but is not limited to:

• Record of all key order and program changes, communications and decisions.

• Essential discussions, agreements, action items, and rationale behind major decisions made throughout the contract lifecycle.

Ongoing Electronic upload to Government Repository to

COR/GPMO

Contractor Work Breakdown Structure

(CWBS)

3.1.2.2.1.Contractor Work Breakdown Structure (CWBS)

Outlines the hierarchical decomposition of work aligned to the DWBS.

Shall include, but is not limited to:

• Major work scope elements, tasks, and deliverables required order execution

• Updates synchronized with changes to the

DWBS.

Ongoing Electronic upload to Government Repository to

COR/GPMO

CWBS

Dictionary

3.1.2.2.1.Contractor Work Breakdown Structure (CWBS)

Defines each CWBS element.

Shall include, but is not limited to:

• Scope

• Deliverables

• Roles

• Milestones

Ongoing Electronic upload to Government

Reference

Work Product Elements Due Date / Frequency

Delivery Method /Location

Contractor Schedule

3.1.2.2.3 Contractor

Schedule

Order-level schedule aligned to CWBS, GWBS, GEO IMS, deliverables, and the scope of the order.

Shall include, but is not limited to:

• Critical path activities

• Dependencies

• Schedule risks associated with order scope

Ongoing

Electronic upload to Government Repository to

COR/GPMO

Lessons Learned Log

3.1.2.7 Lessons

Learned Management

Captures insights, findings, and improvement opportunities derived from all order-administrative activities and observations and recommendations identified through order execution

Shall include, but is not limited to:

• Identification of lessons learned.

• Areas for improvement across the order.

• Impact of each lesson learned.

• Process improvement recommendations for each lesson learned.

After major deliverables, milestones, phase completions, decision gates, reviews, tests, and other significant events

Electronic upload to Government Repository to

COR/GPMO

Meeting Minutes & Action Items List

Task Areas 1 - 5 Shall include, but is not limited to:

• Meeting minutes and action item tracking lists for meetings identified by the COR.

Within three (3) business days after the meeting

Electronic upload to Government Repository to

COR/GPMO

Monthly QASP Performance Response & Meeting

3.1.2.3

Program Quality Management & QASP Performance

Responds to Government QASP findings with clarifications, corrective actions, and performance updates.

Shall include, but is not limited to:

Submit response of Government’s Monthly QASP findings within 3

Electronic upload to Government

Reference

Work Product Elements Due Date / Frequency

Delivery Method /Location

• A summary of the Government’s monthly QASP findings and the Contractor’s response addressing any Government-identified deficiencies, including clarifications, explanations, and supporting data for each identified performance observation.

• Corrective actions and preventative actions.

• Risks and risk mitigations.

• Issues and resolutions.

• Dependences or support needed from the Government.

• Notable accomplishments or process improvements.

business days of receipt.

Conduct Monthly QASP meeting within 5 business days of receipt of Monthly QASP findings.

Monthly Risk & Issue Report

3.1.4.5 Monthly

Risk and Issue Reporting

Consolidates order risks and program risks into a unified monthly summary for Government review

Shall include, but is not limited to:

• High-level risks and issues across program management, technology, facilities, equipment, staffing, and funding

• Mitigation plans, status updates, and resolutions.

Monthly Electronic upload to Government Repository to

COR/GPMO

Operational Readiness Review Materials

3.1.2.6 Operational

Readiness Reviews

Provides readiness evidence and documented outcomes for each ORR. ORRs are conducted in alignment with the Operational Delivery (OD) Schedules.

Shall include, but is not limited to:

• Summary of readiness status for upcoming operational phase

10 business days prior to ORR.

Electronic upload to Government

Reference

Work Product Elements Due Date / Frequency

Delivery Method /Location

• Evidence that required capabilities, processes, tools, and resources are prepared

• Status of program-level deliverables relevant to deployment

• Open items, risks, issues, and mitigation actions tied to readiness

• Data needed to support the Government’s phase-gate approval process

Oversight & Data Call Support Materials

3.1.2.5 Data Call

and Audit Support

Shall include, but is not limited to:

• Data and materials prepared to support responses to GEO program data calls and oversight inquires, to include those from GAO, the Office of Inspector General, and other governing bodies.

As required Electronic upload to Government Repository to

COR/GPMO

Risk Register 3.1.1.3.Order Risk Management

Documents order and program risks in a manner that aligns with the Government risk management process.

Shall include, but is not limited to:

• Risk Description

• Likelihood

• Impact

• Mitigation

• Owner

• Status

Monthly Electronic upload to Government Repository to

COR/GPMO

Meeting Presentations and Briefings

Task Areas 1 - 5 Presentations and briefing materials supporting technical meetings, program reviews, governance boards, and other engagements, as required.

As required Electronic upload to Government

Reference

Work Product Elements Due Date / Frequency

Delivery Method /Location

Shall include, but is not limited to:

• Key information

• Decisions

• Progress

• Risks

Recommendations

Documentation and Reports

Task Areas 1 - 5 Documents and reports produced in support of IT project management, systems engineering, testing, security, architecture, planning, and operations.

Shall include, but is not limited to:

• Analysis of Alternatives (AoAs)

• Analysis/Evaluations of IT solutions and technologies

• API Standards

• Application Architecture Trade-off Analysis

• Application Security Playbooks

• Business Cases

• Business Continuity and Recovery Plans

• Change and Configuration Control processes, standards, templates

• Change Control Plan

• Continuity of Operations (COOP) Plans

• Data Integrity standards, policies, metrics, and frameworks

• Disaster Recovery (DR) Plans

• GEO Disposition Management Plan

• Defect Management Plan

• DevSecOps Documentation, Procedures, and Policies

As required Electronic upload to Government

Reference

Work Product Elements Due Date / Frequency

Delivery Method /Location

• Information Systems Contingency Plans

• IIP

• Line of Business Architecture Documents

• Memoranda of Understanding

• ODMP

• Program Test Analysis Reports

• Program/Project Charters

• Project Close-out Plans

• Project Plans

• Project post-mortems, after action reviews, retrospectives, and lessons learned

• Readiness Reviews

• Requirements documentation

• Risk Management Documentation

• Schedule Management Plan

• SDLC Documents

• Security Findings Remediation process

• SEMP

• Software Bill of Materials (SBOMs)

• Software Configuration Management documentation

• Software Developer Guide

• Standard Operating Procedures and process documentation

• System-level test cases, test scripts, test scenarios, and test metrics

• Systems Architecture and Engineering Artifacts

• Systems Engineering Plan

• Systems Management Plans

• TEMP

Reference

Work Product Elements Due Date / Frequency

Delivery Method /Location

• Wireframe Diagrams

• Workflow Diagrams

• ZTA Gap Analysis and Recommendations

Training Plans & Curriculum

Error! Reference source not found.

Error! Reference source not found.

Detailed training program aligned to Government workforce needs.

Shall include, but is not limited to:

• Training goals and objectives in alignment with skills and current state assessment.

• Training schedule

• Training delivery methods (e.g., experiential learning, hands-on workshops, or other best practice modes)

• Performance measurement

TBD Electronic upload to Government Repository to

COR/GPMO

Government Staff Training

Error! Reference source not found.

Error! Reference source not found.

Training content, as required by Government staff, and in accordance with the training plan.

Training topics must include but are not limited to Change Management (CM) tools and procedures, program management tools, Scaled Agile tools, and public and private cloud.

Shall include, but is not limited to:

• Manuals

• Documentation

• Job Aids

• Hands-on exercises,

• Training tools

• Demonstrations

• Seminars

Reference

Work Product Elements Due Date / Frequency

Delivery Method /Location

Agile Planning and Execution Artifacts

Task Area 3 Outputs from agile planning cycles documenting objectives, dependencies, and progress.

Shall include, but is not limited to:

• Incremental planning outputs documenting objectives, priorities, and planned work

• Team-level and cross-team coordination artifacts supporting aligned execution

• Visibility into dependencies, risks, and progress across delivery efforts

• Lightweight status and outcome summaries supporting transparency and decision-making

• Retrospective inputs or improvement actions identified during execution cycles

TBD Electronic upload to Government Repository to

COR/GPMO

Agile Program Enablement and Incremental Delivery Roadmap

Task Area 3 Roadmap describing alignment, cadence, and governance across agile teams.

Shall include, but is not limited to:

• Description of the multi-team delivery structure and coordination approach

• Incremental, time-boxed planning cadence and synchronization points

• Identification of key roles, responsibilities, and coordination mechanisms across team, program, and stakeholder levels

• Agile coaching and training approach for teams and leadership

• Incremental planning and execution playbooks (e.g. planning events, reviews, retrospectives)

TBD Electronic upload to Government

Reference

Work Product Elements Due Date / Frequency

Delivery Method /Location

• Agile performance metrics and reporting approach

• Approach for continuous learning, feedback, and delivery improvement

Cloud Architecture & Engineering Roadmap

3.3.6 Cloud

Application Migration

Phased roadmap outlining required cloud services, capabilities, modernization activities, dependencies, and sequencing to support Decennial cloud adoption.

Shall include, but is not limited to:

• Time-phased milestones

• Sequenced migration waves and modernization activities

• Identification of dependencies

• Resource planning and up-skilling requirements

• Decision gates and approval check points for each phase

• Alignment with EA standards and security

• Reporting cadence

• Contingency plans

Within 180 days of the contract award

Electronic upload to Government Repository to

COR/GPMO

Application Architecture Design Patterns

3.3.2 Application

Architecture Support

Standardized, reusable architectural patterns guiding application design for interoperability, scalability, security, and consistency across systems.

Shall include, but is not limited to:

• Detailed design patterns for enterprise application architectures.

TBD Electronic upload to Government

Reference

Work Product Elements Due Date / Frequency

Delivery Method /Location

Concepts of Operations

3.3.2 Application

Architecture Support

Documentation describing how an application or system operates, including user roles, workflows, major interfaces, and operational constraints.

Shall include, but is not limited to:

• Description of how applications support mission and business operations

• Key user roles and high-level operational workflows

• Application interactions and integration points

• Assumptions and constraints affecting application operations

TBD Electronic upload to Government Repository to

COR/GPMO

Reporting Strategy and Plan

3.2.1.6 Reporting Support

Framework for performance reporting, metrics and visualization.

Shall include, but is not limited to:

• Approach for monitoring and reporting progress of achieving security status to include but not limited to: ATOs and penetration testing

• Stakeholder Reports and Visualizations

• Summary Reports with Metrics

TBD Electronic upload to Government Repository to

COR/GPMO

Architecture & Engineering Runbooks

3.2.4 Product

Delivery Management

Detailed steps for deployment, rollback, monitoring, and operational readiness.

Shall include, but is not limited to:

• Comprehensive steps detailing system and user interactions

• Deployment, rollback, and change procedures

• Soft launch activities

TBD Electronic upload to Government

Reference

Work Product Elements Due Date / Frequency

Delivery Method /Location

• System go-live activities

• Post-conduct operations interactions

• Monitoring/altering thresholds and incident response steps

• Patch/update schedule and responsibilities

Test Management Approach

3.3.3 Application

Testing

Framework supporting requirements traceability, defect injection analysis, test governance, and continuous improvement of the testing lifecycle.

Shall include, but is not limited to:

• Requirements traceability integration

• Defect injection rate tracking & analysis

• Test governance processes

• Testing lifecycle methods & standards

• Metrics, KPIs, and Reporting Cadence

• Test environment & data readiness requirements

TBD Electronic upload to Government Repository to

COR/GPMO

Test Analysis Report

3.3.3 Application

Testing

Comprehensive summary of test activities, results, defects, insights, and evaluation metrics across test phases.

Shall include, but is not limited to:

• A comprehensive overview of the testing process, including details about what was tested, how it was tested, and the outcomes.

• Results and findings from the testing phase of software development.

• Reporting metrics and data visualizations capturing defects, testing trends, timeframes, and categories

TBD Electronic upload to Government

Reference

Work Product Elements Due Date / Frequency

Delivery Method /Location

Plan of Action and Milestones

(POA&M)

3.2.6 Governance Documentation of ATO-related findings, remediation steps, responsible parties, timelines, milestones, and acceptance criteria for unresolved items.

Shall include, but is not limited to:

• Unique identifiers for each finding, description, severity, associated control

• Corrective actions for each item to include responsible parties, resources, and remediation steps

• Target completion dates and interim milestones

• Risk acceptance or mitigation strategies for unresolved items

TBD Electronic upload to Government Repository to

COR/GPMO

Research and Development Reports

3.3.7 Research, Development, and Innovation

Reports summarizing feasibility studies, research findings, technical evaluations, risks, opportunities, and recommendations related to new technologies or innovations.

Shall include, but is not limited to:

• Description of research or study scope, objectives, and approach

• Summary of data sources, methods, and analytical techniques employed

• Key findings, observations, and results of the research conducted

• Analysis of implications, risks, and opportunities relevant to the program

• Conclusions and recommended considerations or next steps for decision making

TBD Electronic upload to Government

Reference

Work Product Elements Due Date / Frequency

Delivery Method /Location

• Assumptions, constraints, and limitations of the research

Analyses of Alternatives (AOAs) Master List

3.3.7 Research, Development, and Innovation

A consolidated and continuously updated record of all AoAs (planned, outgoing, and completed), including scope assumptions, constraints, and decisions.

Shall include, but is not limited to:

• Description of the scope and decision context for each AoA

• Status of each analysis

• Reference to associated documentation, findings, or reports

• Identification of key assumptions, constraints, and decision Dependencies.

TBD Electronic upload to Government