Today, we manage over $1.05 billion for 67 investments across 34 federal agencies. This page is a living repository of our investments, with new investments announced on a rolling basis. Each summary features project details, which are defined here.

---

^

  Index

   Active investments

     Listed in alphabetical order by agency acronym.

A-G

H-Z

AbilityOne: Development of the next generation procurement list information management system 2.0 AFRH: Transforming resident-centered healthcare through modernized electronic health record systems AmeriCorps: Grants management modernization DHS: Information sharing modernization DHS: Southwest Border Technology Integration Program DOC-NIST: Pioneering AI safety for a smarter future DOC-NWS: Modernizing Weather.gov DOD-Army: Critical infrastructure cyber protection DOE: Human resources information technology modernization DOE: Modernizing nuclear emergency response DOI-BIE: Improving services for Tribal communities through modernized school websites DOI-BLM: Digitizing records for easier public access DOJ-ATR: Improving antitrust enforcement with modern technology DOL: Data modernization DOL: Enhancing security of DOL data and applications DOL: Ensuring injured and ill workers receive services and benefits faster DOL: PERM visa modernization DOL-EBSA: Improving ability of America’s workers to find lost retirement benefits DOS: Increasing capacity to safeguard identity data DOS: Increasing diplomacy through generative AI DOT: Protecting aviation consumers and streamlining regulated entity interactions through human-centered design DOT-FAA: Improving mission support with modernized applications ED: Improving federal student loan borrower experience ED: Zero trust architecture EEOC: Charge and case management system modernization EPA: Securing data availability and integrity FEC: Modernizing FECFile FTC: Multi-cloud security operations center FTC: Securing and modernizing the registered identification number system GSA: Advancing zero trust GSA: Login.gov GSA: Modernizing regulatory services for the public and the federal government

HHS-OIG: Securing public health information with mature zero trust HUD: Identity credential access management modernization for FHA Connection HUD: Transforming identity and access management NARA: High value asset mission essential systems NASA: Accelerating network cybersecurity and performance improvements in benefit to agency missions NLRB: Case management system modernization NTSB: Improving customer experience with digital content delivery OPM: Website and digital modernization OPM: Zero trust networking PRC: IT modernization RRB: Citizen-centric online self-services SSA: Digitizing forms and enhancing customer experience SSA: Modernizing beneficiary notifications SSA: Personal data security for public benefits processing SSA: Using AI to support disability claim processing SSS: Registration and verification modernization Treasury: Secure cloud national intelligence sharing USAGM: Improving IT security with zero trust architecture USAID: CRM system USAID: USAID zero trust architecture USDA: Network modernization USDA: Network monitoring, detection, and response VA: Digitizing forms and personalizing experiences for better veterans benefits management and customer support VA: Veteran identity modernization

   Inactive investments

A-G	H-Z
DHS-CBP: Automated commercial environment collections module DOE: Enterprise cloud email DOL: Labor certificate processing modernization GSA: Application modernization integrating flexible architectures GSA: MAX.gov transition GSA: NewPay payroll and work schedule and leave management software as a service	HUD: UNISYS mainframe migration USDA: Agricultural marketing service specialty crops system modernization USDA: Farmers.gov customer experience portal USDA: Infrastructure optimization and cloud adoption

   Classified investments

     Classified investment details are not shown.
     For questions, please email tmf@gsa.gov.

---

Active investments

---

Connecting those who are blind or have significant disabilities to employers

ABILITYONE COMMISSION: Development of the next generation procurement list information management system 2.0

Investment start: October 2022.

Challenge: The AbilityOne Program creates employment opportunities for more than 36,000 individuals who are blind or have significant disabilities. Through the program, nearly $4 billion in products and services made by Americans with disabilities is provided to the federal government annually, including office supplies, personal protective equipment, and administrative services. The Commission’s Procurement List Information Management System (PLIMS) connects federal agencies with verified nonprofit agencies that employ people who are blind or have significant disabilities, monitors pricing of these products and services, and is central to overseeing the AbilityOne Program. This system is outdated and difficult to use, has duplicate data and significant security risks, and lacks manufacturer support.

Approach: With TMF support, the Commission is modernizing its PLIMS in a cloud-based Software as a Service environment to:

• Connect federal customers with program partners and improve system accessibility
• Create a more secure technical system with access control and disaster recovery capability
• Better serve federal customers who depend on AbilityOne products and services

---

Revolutionizing healthcare services for America’s heroes

ARMED FORCES RETIREMENT HOME (AFRH): Transforming resident-centered healthcare through modernized electronic health record systems

Investment start: January 2024.

Challenge: AFRH was established in 1811 as a promise from our nation to provide care for its retired and disabled military members. However, the current decade-old existing electronic health record (EHR) system at AFRH suffers from inefficiencies, redundancies, and a high rate of data entry inconsistencies and errors. The system also lacks interoperability across the Department of Defense, Department of Veterans Affairs, and private sector provider networks, leading to challenges in seamless data sharing and decision-making. This situation has resulted in unnecessarily delayed services, and errors in service delivery, impacting both healthcare providers and residents.

Approach: With TMF support, AFRH will:

• Implement a state-of-the-art, interoperable EHR system aligned with federal and industry best practices
• Conduct a comprehensive needs assessment followed by system design, development, and implementation
• Improve service delivery efficiency, so providers can spend more time focused on care and outcomes

---

Better infrastructure for national service grants at AmeriCorps

AMERICORPS: Grants management modernization

Investment start: August 2022.

Challenge: AmeriCorps ensures that every American over the age of 18 has the opportunity to participate in national service and that U.S. community-based organizations can benefit from national service resources. AmeriCorps’ current system for more than 2,800 nonprofit, faith, and community-based organizations to apply for funding or manage existing federal national service grants is outdated. The system cannot integrate with other federal systems, making it burdensome for organizations to apply. It also lacks modern business intelligence capabilities to manage grants and restricts AmeriCorps’ ability to keep pace with grant-making standards and technical needs.

Approach: With TMF support, AmeriCorps is working to:

• Partner with the Grants Quality Service Management Office at the Department of Health and Human Services to capture new federal grants practices
• Replace its legacy system, integrate new practices, and improve its ability to secure protected data

This investment will:

• Reduce barriers to accessing AmeriCorps’ resources
• Support over 1,300 existing grantees and improve customer experience for about 250,000 individuals from over 40,000 communities
• Expand its ability to recruit and retain new organizations

---

An updated platform for coordination among first responders, law enforcement, and government during crises

U.S. DEPARTMENT OF HOMELAND SECURITY (DHS): Information sharing modernization

Investment start: June 2022.

Challenge: DHS delivers timely intelligence and enables real-time collaboration across organizations for natural disasters, security events, and other crises. These organizations include federal, state, local, territorial, tribal, international, private sector, and first responders. DHS’ Homeland Security Information Network (HSIN) played a pivotal role during the COVID-19 pandemic, supporting vaccine distribution and operations through the coordination of hundreds of organizations. This demand resulted in unprecedented pressure on DHS’ decade-old information sharing network, exposing its limitations.

Approach: With TMF support, DHS is rebuilding its information sharing system as a cloud native platform with modern tools that will:

• Scale up to meet peaks in demand during emergencies
• Provide improved access and security
• Allow better content sharing and discoverability
• Better connect HSIN partners to each other for closer collaboration
• Provide easy and secure access to mobile platforms and other devices for remote work

---

Supporting more efficient, digitized processing of noncitizens

U.S. DEPARTMENT OF HOMELAND SECURITY (DHS): Southwest Border Technology Integration Program

Investment start: September 2021.

Challenge: Southwest Border processing currently involves multiple DHS components and partner agencies, each operating on independent data systems and with many key handoffs still taking place with paper files.

Approach: With TMF support, DHS’s Southwest Border Technology Integration Program is working to:

• Replace remaining outdated manual data processes associated with border enforcement with a fully automated and interoperable platform to facilitate efficient and timely intake of noncitizens, protection of unaccompanied children, and reunification of families
• Provide standardized and secure data sharing across the federal enterprise and throughout the immigration lifecycle to improve border flow, capacity management, and timeliness and fidelity of data used by decision makers
• Connect disparate systems, improve cross-agency collaboration, and support data-driven decision-making

---

Establishing standards to help federal agencies safely and responsibly deploy AI in ways that benefit the American public

U.S. Department of Commerce, National Institute of Standards and Technology (DOC-NIST): Pioneering AI safety for a smarter future

Investment start: July 2024.

Challenge: NIST’s mission is to develop and apply technology, measurement science, and standards to enhance productivity, facilitate trade, and improve the quality of life for U.S. citizens. As artificial intelligence (AI) technologies become increasingly prevalent, the agency is tasked with developing risk-management guidance and evaluating AI models to ensure the safe and responsible adoption of AI across the federal government. The lack of these standards threaten U.S. government operations and public safety, and the absence of a centralized resource for AI testing and evaluation is estimated to cost the federal government billions of dollars and the U.S. economy even more.

Approach: With TMF funding and support, NIST aims to accelerate the growth of its U.S. AI Safety Institute (AISI) that is charged with creating evaluation tools, testing AI models and safeguards, issuing guidance on AI safety and risk management, and conducting technical research. This work will help the federal government:

• Modernize faster by adopting AI responsibly
• Improve public-facing services
• Enhance the understanding and management of AI-related risks
  

---

Delivering critical weather, water, and climate updates to underserved groups, in the right format and language

U.S. DEPARTMENT OF COMMERCE, NATIONAL WEATHER SERVICE (DOC-NWS): Modernizing Weather.gov

Investment start: May 2024.

Challenge: NWS uses Weather.gov to provide life-saving forecasts and warnings for natural disasters. Today, the site has an infrastructure that is unreliable and difficult to maintain, does not support many languages, and is not mobile friendly. The Application Programming Interface (API) also has challenges, creating unreliable content and hurdles for weather professionals and the public to navigate.

Approach: With TMF support, NWS will redevelop Weather.gov and its API to:

• Provide language translation to underserved groups
• Comply with 508 and accessibility best practices
• Provide data reliability
  

This investment will:

• Transform operations in over 150 NWS offices worldwide
• Help forecasters and their partners make life saving weather-related decisions

---

Modernizing operational technology to protect Army organic industrial bases

U.S. DEPARTMENT OF DEFENSE, DEPARTMENT OF THE ARMY (DOD-Army): Critical infrastructure cyber protection

Investment start: October 2022.

Challenge: The U.S. Army operates manufacturing arsenals, maintenance depots, and ammunition plants, known as Organic Industrial Bases (OIB). With 26 OIB locations operated by 28,000 employees and an estimated 500,000 devices, the bases represent a significant attack surface area. Any insecurities in the operational technology that support these OIB locations could pose grave national security risks, including disrupted production, destroyed equipment, injured workers, and impacted coordination with partner agencies.

Approach: With TMF support, Army is modernizing OIB operational technology to:

• Enable Attack Sensing and Warning and Vulnerability Assessment cyber capabilities
• Establish a Security Operations Center as a Service framework to ensure cyber defenders can monitor, respond to, and remediate cyber threats

---

Improving employee access and data integrity for HR functions

U.S. DEPARTMENT OF ENERGY (DOE): Human resources information technology modernization

Investment start: June 2024.

Challenge: DOE plays a pivotal role in ensuring America’s security and prosperity by addressing its energy, environmental, and nuclear challenges, but its outdated HR infrastructure does not meet the agency’s current business needs. With the last significant investment occurring over two decades ago, DOE’s HR technology struggles to support its workforce and poses security risks due to numerous interconnections with internal and external systems. Furthermore, the system’s reliance on customization rather than configuration hinders operations.

Approach: With TMF support, DOE will:

• Transition to a Software as a Service platform, integrating multiple HR systems into one cohesive solution
• Streamline HR operations and automate processes, driving cost savings for the agency
• Improve the experience for nearly 40,000 users, providing easier access to the modernized HR system, improved data integrity, and reduced time and effort to manage HR functions

---

Improving public health and safety concerning nuclear and radiological threats, incidents, and accidents

U.S. DEPARTMENT OF ENERGY (DOE): Modernizing nuclear emergency response

Investment start: July 2024.

Challenge: The Nuclear Emergency Support Team of DOE’s National Nuclear Security Administration (NNSA) is at the forefront of ensuring the safety and security of U.S. citizens during large-scale nuclear threats, incidents and accidents, and orchestrating the response of many federal agencies during a nuclear emergency. The Radiological Response Data Portal (R2DP) serves as the backbone of NNSA’s ability to collect, analyze, integrate, and visualize sensor data feeds in real-time. The system is over 15 years old and faces significant challenges.

Approach: With TMF support, DOE will modernize R2DP and associated applications, enabling the system to combine advanced detection readings from several agencies and contextualize it in a map while improving its cybersecurity posture. By enhancing data integrity and enabling secure data sharing with mission partners, the modernized R2DP will:

• Increase response capabilities
• Reduce response times
• Allow individual agencies to tailor data needed for their response faster
  

This investment allows DOE to streamline decision-making in response to nuclear emergencies. R2DP system users include:

• The U.S. Department of Homeland Security
• The U.S. Department of Justice
• The U.S. Environmental Protection Agency
• The U.S. Food and Drug Administration
• Decision authorities in the White House and Congress
• State, local, tribal, and territorial officials

---

Improving communication and access to essential education services for Tribal communities and schools

U.S. DEPARTMENT OF THE INTERIOR, BUREAU OF INDIAN EDUCATION (DOI-BIE): Improving services for Tribal communities through modernized school websites

Investment start: June 2024.

Challenge: DOI’s Bureau of Indian Education is dedicated to improving communication and access to essential education and related support services for Tribal communities and schools. Many of the schools funded by the BIE, including BIE-operated and Tribally controlled schools, either lack websites or operate with an outdated online presence. This hinders effective communication with parents, families, and community members.

Approach: With TMF support, DOI-BIE will:

• Accelerate the modernization of up to 183 BIE-funded school websites, allowing students and their families reliable, accessible, and straightforward access to crucial information such as school events, schedule changes, bus routes, lunch menus, and school applications
• Expand BIE’s website hosting environment with enhanced security and increased support for website maintenance and content development
• Address educational disparities, increase engagement in the surrounding community, and bridge the digital divide between BIE schools and other educational institutions

---

Helping the public, industry, and government access historical land records

U.S. DEPARTMENT OF THE INTERIOR, BUREAU OF LAND MANAGEMENT (DOI-BLM): Digitizing records for easier public access

Investment start: July 2023.

Challenge: Land records are in demand, with 80,000 unique monthly visitors accessing BLM’s General Land Office (GLO) website. Many records are distributed across multiple websites or have yet to be digitized. The current GLO Automation System is outdated, delaying record publication. If unable to access records electronically, users must call or visit a BLM public room, creating a frustrating experience for the American public and industry and government officials who need to make decisions related to public lands.

Approach: With TMF support, BLM is taking an agile approach to:

• Increase the number of land records available online
• Enhance search functionality on the GLO website
• Redesign the public-facing web application to improve efficiency and accuracy of retrieved data and improve document images

Across three phases, BLM is working to:

• Decrease staff processing time by 80% by applying machine learning to records indexing, including optical character recognition and natural language processing
• Create a land records ecosystem by integrating GLO with other BLM applications
• Operationalize GLO on BLM’s Mission Services Platform, which includes enterprise software for secure and streamlined processes for the public

---

Enforcing the nation’s antitrust laws, protecting competition across the economy

U.S. DEPARTMENT OF JUSTICE-ANTITRUST DIVISION (DOJ-ATR): Improving antitrust enforcement with modern technology

Investment start: January 2024.

Challenge: The Antitrust Division of the U.S. Department of Justice enforces the laws that prevent and prohibit practices that deprive American consumers, taxpayers, and workers of the benefits of a free market system. As a result, their cases are essential to our economy and our democracy. The size and complexity of corporate communication has grown considerably since the COVID-19 pandemic, and much of communication shifted from email to chat-based applications. ATR’s current tooling and methods will not be able to keep up with these changes without improving the speed, convenience, and efficiency of working with datasets that extend beyond email.

Approach: With TMF support, ATR will:

• Rapidly acquire and deploy updated review platforms with artificial intelligence (AI) enabled
• Expand their data ingestion and analysis pipelines to leverage AI tools
• Improve their internal IT service management, increasing the capability of their case management systems
• Simplify the public complaints process, and hire technologists to maintain and grow these solutions

---

Better access to critical DOL data for developers, journalists, researchers, and agencies

U.S. DEPARTMENT OF LABOR (DOL): Data modernization

Investment start: March 2021.

Challenge: DOL provides commonly requested data on mission support, enforcement, benefits, employment, and training to developers, journalists, researchers, and other federal agencies. Currently, DOL faces issues with availability and accessibility of this critical data and needs to modernize its enterprise data infrastructure accordingly. Doing so will also enable an evidence-based decision-making approach and more efficient distribution of resources across mission areas.

Approach: With TMF support, DOL is working to:

• Add enterprise-standard predictive analytics and reporting capabilities to its IT platform
• Implement enterprise data management capabilities
• Enhance the application programming interface and public-facing data portal to ensure timely, secure delivery of information to the right DOL staff and customers
• Integrate duplicative data services to reduce associated operations, maintenance, and human capital expenses

---

Securing economic reports and worker protections against cyber threats

U.S. DEPARTMENT OF LABOR (DOL): Enhancing security of DOL data and applications

Investment start: July 2023.

Challenge: DOL users currently access critical services and data, such as economic reports, retirement plan violation complaints, and worker protections, through a traditional “castle and moat” approach that focuses on external threats. DOL recognizes the critical role of a trust-based modern architecture in protecting its millions of stakeholders, securing its digital assets against cyber threats, and allowing access only to authorized users—in the office, on the road, or at home.

Approach: DOL is currently enhancing the security of its data and applications through the implementation of an enterprise zero trust architecture. With TMF support, DOL is accelerating the implementation and deployment of a secure access service edge solution to provide connectivity, consistent security, and optimized user experience to its employees, partners, and the public.

---

Faster permanent labor certifications and smoother immigrant visa processing

U.S. DEPARTMENT OF LABOR (DOL): PERM visa modernization

Investment start: August 2022.

Challenge: Annually, DOL processes nearly 120,000 requests for permanent labor certifications (PERM) across 73,000 unique employers. Processing delays can affect the worker’s ability to remain in the U.S. and the employer’s ability to retain skilled talent. Employers face a fragmented sign-in and verification process that requires manual staff workarounds and mailed documents. This system causes inconsistent case processing times, unnecessary administrative costs, and fraud and security risks.

Approach: With TMF support, DOL is transforming three processes:

• For PERM filers to submit applications
• For PERM analysts to review applications
• To submit PERM labor certification decisions to the U.S. Citizenship and Immigration Services and the Department of State

To do this, DOL is working to:

• Eliminate manual and paper-based processes, reducing the adjudication cycle time by about 45 days, with an annual cost savings of $1.5 million for PERM filers and an annual cost avoidance of $2.2 million
• Integrate a new PERM labor certification process into DOL’s Foreign Labor Application Gateway digital platform, which uses Login.gov and enables secure and efficient sharing of labor certification data between agencies
• Enable DOL PERM analysts to create and issue correspondence to filers, automate the audit selection process for integrity reviews, and access data that protects job seekers

---

Streamlining support for injured workers

U.S. DEPARTMENT OF LABOR (DOL): Ensuring injured and ill workers receive services and benefits faster

Investment start: April 2024.

Challenge: The Integrated Federal Employee Compensation System (iFECS) allows all federal agencies to file claims. iFECs, operated by DOL’s Office of Workers’ Compensation Programs (OWCP), is the backbone and system of record for the Disability Management Portal (DMP) and Employees’ Compensation Operations and Management Portal (ECOMP). The system provides services to more than 2.5 million workers, with over 200,000 new cases processed in FY23. It was built nearly 20 years ago and consists of 98 applications running on legacy architecture, with elaborate and archaic workflows. This adds significant friction to case management which can overwhelm claims examiners, delay processing, and interrupt tasks. This project will mitigate the cybersecurity, operational, and financial risks of processing sensitive federal employee health records and annual claims.

Approach: With TMF support, DOL will:

• Reduce claim adjudication time and improve customer interactions to enable beneficiaries to receive proper services and return to work faster
• Provide robust modern cybersecurity controls that increase the security of beneficiary health data
• Adopt a modern cloud-based architecture and incrementally deploy automated features and workflows

---

Helping employees obtain benefits they’ve earned

U.S. DEPARTMENT OF LABOR, EMPLOYEE BENEFITS SECURITY ADMINISTRATION (DOL-EBSA): Improving ability of America’s workers to find lost retirement benefits

Investment start: November 2023.

Challenge: EBSA helps over 153 million workers, retirees, and their families who are covered by private employment retirement plans, group health plans, and other welfare benefit plans that together hold approximately $12.8 trillion in assets. Balancing proactive enforcement and compliance assistance, EBSA helps plan participants and beneficiaries understand their benefits and rights under the law and connects them to lost or forgotten retirement benefits. Since 2021, EBSA has recovered more than $4.2 billion for such “missing” participants. In addition to EBSA’s existing efforts, Congress enacted the Setting Every Community Up for Retirement Enhancement (SECURE) Act 2.0 in 2022. It requires EBSA to establish an online public “lost and found” registry, which would allow individuals to search for unclaimed retirement savings and benefits.

Approach: With TMF support, EBSA will establish an online public “lost and found” registry, which will:

• Serve as a centralized location for workers and their beneficiaries to search for their unclaimed, lost, or forgotten retirement savings and benefits and get information on how to obtain them
• Enable EBSA to meet the Congressional deadline to make the portal available to the public by January 1, 2025

---

Safer identity management for engaging foreign partners

U.S. DEPARTMENT OF STATE (DOS): Increasing capacity to safeguard identity data

Investment start: May 2024.

Challenge: DOS relies on maintaining trust for diplomatic interactions with foreign governments and partners. DOS leadership and IT system users face significant challenges with the current environment of multiple, unsynchronized Identity, Credential, and Access Management (ICAM) systems. User management occurs at the system level which has led to disjointed identity management efforts across the State enterprise. Many of the systems do not use phishing-resistant multifactor authentication, which helps prevent unauthorized use by adding an additional layer of user authentication. From an enterprise perspective, this decentralized environment creates a significant vulnerability that advanced, persistent threat actors seek to exploit.

Approach: With TMF support, DOS will use zero trust architecture to:

• Create a consolidated identity trust that manages identity and access in one place
• Automate onboarding and off-boarding workflows
  

This investment will:

• Provide agency users with a consistent credential management experience
• Strengthen DOS’ ability to uphold information security standards
• Ensure compliance with federal mandates for ICAM

---

Empowering staff to better serve global diplomacy with GenAI

U.S. DEPARTMENT OF STATE (DOS): Increasing diplomacy through generative AI

Investment start: May 2024.

Challenge: In the fast-paced realm of global diplomacy, every moment counts. DOS operates more than 270 diplomatic posts worldwide. In 2023 alone, DOS produced an average of 6,300 diplomatic cables daily, alongside countless media summaries and structured reports. To achieve this, DOS’ staff sift through high volumes of data, including news reports, trade analyses, diplomatic communications, and more.

Approach: With TMF support, DOS will scale safe, secure, and responsible generative AI (GenAI) to allow its staff to rapidly filter insights from the DOS data environment. DOS will use human-centered design principles to:

• Modernize existing processes for seamless integration
• Create responsible GenAI guidance and training
• Develop enterprise-wide and targeted GenAI communications
• Prepare an interagency playbook on implementing responsible GenAI across a government organization
  

This investment will:

• Empower DOS’ global staff to work faster and easier, with better information
• Allow diplomats to focus more on face-to-face engagements in support of American interests

---

Better service and consumer protection for air travelers

U.S. DEPARTMENT OF TRANSPORTATION (DOT): Protecting aviation consumers and streamlining regulated entity interactions through human-centered design

Investment start: September 2023.

Challenge: During COVID-19, the number of aviation consumer complaints increased dramatically, with 400% more complaints in 2022 than the average number of complaints received in each of the five years prior to the pandemic. This highlights the urgent need for a system that better serves consumers, automates processing tasks, streamlines operations, and provides staff with better tools. DOT’s Office of Aviation Consumer Protection (OACP) needs an updated consumer complaint and case tracking application that collects, analyzes, and stores data received from airlines, ticket agents, and airports.

Approach: This investment will allow for better support for air travelers and better enforce aviation consumer protection requirements, like tarmac delays, non-discrimination, denied boarding due to oversale, baggage issues, refunds, and reimbursements due to flight delays and cancellations.

With TMF support, OACP is working to:

• Streamline and personalize consumer complaint submission and increase automation
• Create intuitive tools for the aviation industry that reduce manual steps, increase analyst efficiency, and expedite data publication
• Ensure security and privacy protection of aviation consumer data

---

Updated legacy technology to better assist aviation services

U.S. DEPARTMENT OF TRANSPORTATION, FEDERAL AVIATION ADMINISTRATION (DOT-FAA): Improving mission support with modernized applications

Investment start: April 2023.

Challenge: FAA seeks to modernize its legacy applications used to deliver mission support, which rely on outdated technologies and frameworks. To reduce their security risk, which could result in higher costs to sustain these legacy applications, FAA needs to migrate these applications to an advanced cloud-based platform.

Approach: With TMF support, FAA is focusing on an initial 22 critical services to:

• Migrate critical business applications to an advanced cloud-based platform
• Make applications zero trust ready, running on a modern set of programming tools with automated build, test, and deployment capabilities
• Use operational cost savings to modernize its remaining legacy services
• Create an operational playbook to repeat this work across remaining legacy services

---

Centralizing loan information for student loan borrowers

U.S. DEPARTMENT OF EDUCATION (ED): Improving federal student loan borrower experience

Investment start: May 2024.

Challenge: ED’s office of Federal Student Aid (FSA) provides $112 billion each year in grants, work-study funds, and federal student loans to help students pay for college or career school. It also manages a portfolio for over 43 million existing borrowers. Using StudentAid.gov, FSA borrowers learn about, apply for, and manage their federal student aid. Currently, borrowers cannot review all activities –including form submissions and status– in a single location, and their loan information is spread across FSA and federal loan servicer sites. As a result, borrowers are unsure where to find their loan information and next steps. In one year alone, FSA’s contact centers received 700,000 calls about applications or case status.

Approach: With TMF support, FSA will:

• Centralize and merge loan information under the My Activity feature on StudentAid.gov
• Implement data and software technology that will lower agency costs over time
  

This investment will:

• Increase the borrowers’ ability to manage their federal student aid
• Lower customer care calls, wait times, emails, and chats
• Save FSA customer care costs each year

---

Securing student and borrower data

U.S. DEPARTMENT OF EDUCATION (ED): Zero trust architecture

Investment start: September 2021.

Challenge: An increasingly hostile cyber threat environment makes it crucial for the Department of Education to update its security approach.

Approach: With TMF support, ED is working to:

• Stand up an enterprise-wide program management office dedicated to zero trust
• Enable a zero trust program that includes strategy, architecture, design, and an implementation roadmap
• Establish a catalog of services with secure access service edge and security orchestration, automation, and response technologies
• Adopt an advanced architecture across cloud-computing environments

---

Enabling faster review of cases of employment discrimination

EQUAL EMPLOYMENT OPPORTUNITY COMMISSION (EEOC): Charge and case management system modernization

Investment start: October 2019.

Challenge: EEOC investigates charges of job discrimination. Currently, its charge and case management program runs on an outdated backbone system that relies on expensive proprietary technologies. It requires use of manually entered alphanumeric activity codes, rather than plain language automated workflow, to record case information for the over 200,000 inquiries reviewed by the agency each year. The legacy system also supports state and local government agencies and EEO federal sector operations. EEOC needs to modernize its system to more efficiently process cases, improve accessibility and security, and reduce operating costs.

Approach: With TMF support, EEOC is developing a cloud-based core charge and case management system. This investment will:

• Improve overall functionality of its system, increasing efficiency of EEOC’s private and public sector operations and benefiting the Fair Employment Practices Agencies that use the system
• Provide end-to-end digital processing of charges to applicants and employees seeking assistance
• Improve accessibility and reduce security risk from legacy technologies
• Decrease software licensing expenses and reduce development and maintenance costs

---

Protecting EPA radiation data to inform decisions on public health and the environment

ENVIRONMENTAL PROTECTION AGENCY (EPA): Securing data availability and integrity

Investment start: July 2023.

Challenge: EPA’s Analytical Radiation Data System (ARadDS) supports the continuous monitoring and near real-time measurement of gamma radiation, which allows EPA scientists to detect any unusual changes. This data helps leaders make informed decisions related to public health and the environment. As EPA manages and remediates over 3,000 cybersecurity vulnerabilities, ARadDS needs significant IT infrastructure modernization and security posture stabilization to minimize risk to the availability and integrity of this radiation data.

Approach: With TMF support, EPA is working to:

• Add contractor personnel and resources to fill IT skill gaps, modernize an aging infrastructure, and bring the program into agency compliance
• Use new cybersecurity, network, and monitoring tools to increase automation
• Upgrade system hardware and fix network vulnerabilities
• Migrate to a vendor-supported commercial Laboratory Information Management System for efficient software support

---

Creating intuitive software for campaign filers

FEDERAL ELECTION COMMISSION (FEC): Modernizing FECFile

Challenge: FEC protects the integrity of the federal campaign finance process by providing transparency and fairly enforcing and administering federal campaign finance laws. Currently, per statutory mandate, FEC provides free software that allows filers—individuals running for office and more than 9,000 political committees—to meet their campaign finance disclosure requirements. This software was originally released in 1997 and operates exclusively on Windows-based PCs, restricting accessibility, security, and functionality on non-Windows-based computers and causing compatibility issues and inconvenience for filers.

Approach: With TMF support, FEC will:

• Modernize FECFile Online, a cloud-based, web-accessible, intuitive software for filers that improves data quality and enhances security
• Create an open-source product for vendors and state agencies to use in their own development efforts

---

Protecting sensitive law enforcement, corporate competition filing, and consumer data

FEDERAL TRADE COMMISSION (FTC): Multi-cloud security operations center

Investment start: June 2022.

Challenge: Annually, FTC collects data from millions of consumer fraud complaints and thousands of corporate merger filings, which it uses to promote competition and protect consumers. This data is under increasingly sophisticated attacks from adversaries. As FTC transitions from an on-premise data center approach with manual approaches to a cloud-first strategy, it needs to enhance its security operations center capabilities.

Approach: FTC is procuring a Security Operations Center as a Service (SOCaaS) that:

• Allows for faster decision-making
• Reduces vulnerability attack surface
• Creates a repeatable foundation for future government-wide implementations of SOCaaS

With TMF support, FTC is expediting its SOCaaS implementation using security services and trusted cloud service providers to host sensitive FTC data. This approach will:

• Reduce the risk of bad actors executing a ransomware or other cyber attack
• Reduce the number of person hours to respond to indicators of cyber incidents
• Allow repurposing of these hours to improve operational systems for merger filing review and fraud reporting

FTC is collaborating with other federal cyber security leaders, including the Department of Homeland Security, to share best practices.

---

Safeguarding a database that protects the textile industry and its consumers

FEDERAL TRADE COMMISSION (FTC): Securing and modernizing the Registered Identification Number System

Investment start: September 2023.

Challenge: FTC’s critical public-facing database, the Registered Identification Number (RN) system, issues RNs to U.S.-based businesses to identify who manufactured, imported, distributed, or sold a covered textile, fur, or wool product, enabling smooth functioning of trade pathways. The current legacy technology does not conform to FTC’s zero trust architecture and other cybersecurity best practices, making the FTC network more vulnerable to hackers, with risk of data integrity interference and leakages.

Approach: With TMF support, FTC is modernizing its RN system, ultimately decommissioning its current system. To advance FTC’s zero trust architecture, FTC is working to:

• Develop a user-friendly cloud application that uses FTC’s low-code, cloud-based Platform as a Service to eliminate all vulnerabilities identified in the current system
• Integrate the new system with a modern identity and access management platform to enforce multi-factor authentication
• Migrate all data and deploy the new system into production

---

Improving cybersecurity and enabling real-time response to threats

GENERAL SERVICES ADMINISTRATION (GSA): Advancing zero trust

Investment start: September 2021.

Challenge: GSA must improve its cybersecurity capabilities to continually verify the security of users, devices, applications, and data by maturing its zero trust architecture. This will also help achieve broad-based visibility across the GSA ecosystem, with enhanced automation to enable real-time response to threats.

Approach: With TMF support, GSA is focused on three areas:

• Users and devices: modernize directory designs to better support GSA’s multi-domain hybrid cloud architectures and develop a modern enterprise authentication solution
• Networks: leverage a secure access service edge solution and enhance the security of its public buildings’ security network
• Security operations: adopt increased machine learning and artificial intelligence-driven algorithms that connect diverse data sources and highlight threats, provide security oversight for cyber supply chain risk management, and enhance core security operations centers to include government-wide public-facing digital services

---

Expanding the usage of Login.gov, especially in underserved populations

GENERAL SERVICES ADMINISTRATION (GSA): Login.gov

Investment start: September 2021.

Challenge: Login.gov enables members of the public to create a single digital account that provides access to their benefits and services at over 40 federal and state agencies. This “one account for government” saves users time, saves taxpayers money, reduces complexity for agencies, and ensures consistent security and anti-fraud practices across government.

The initial launch and adoption of Login.gov has been successful, with 70 million members of the public accessing over 450 government services to date. Additional support is required to achieve its mission and ensure that all Americans are served in an equitable and privacy-preserving way. This includes investing in capabilities for underserved and vulnerable populations that historically have experienced barriers to online services and building robust security and anti-fraud controls.

Approach: With TMF support, GSA is working to:

• Strengthen cybersecurity and anti-fraud protection for users
• Address identity verification barriers for underserved groups
• Make it easier for agencies to adopt Login.gov, so the public can realize the benefits of a single digital account

This investment will expand access to digital services for millions of citizens, while reducing fraud and government costs at scale.

---

Facilitating public participation in the federal rulemaking process

GENERAL SERVICES ADMINISTRATION (GSA): Modernizing regulatory services for the public and the federal government

Investment start: January 2024.

Challenge: The GSA eRulemaking Program was established in 2002 to provide shared services for rulemaking as a federal-wide line of business. The public relies on Regulations.gov to review and comment on proposed regulatory and non-regulatory actions. Federal agencies rely on the Federal Docket Management System (FDMS) to publish information on the proposed actions to Regulations.gov and to review and consider public comments. However, the eRulemaking Program needs significant upgrades, without which there is a risk to continuity of service. Longer term, the current services will not support the needs of agency staff who must respond to high and likely increasing volumes of public comments.

Approach: With TMF support, GSA will:

• Implement cost-effective and improved regulatory services that benefit public and federal government users while eliminating the risk of system failure
• Address near-term security vulnerabilities and risks in the current rulemaking system
• Begin a multi-year effort to transition to a modernized architecture that will better meet the needs of public and government users

---

Solutions to protect confidential treatment, investigation, and operations data

U.S. DEPARTMENT OF HEALTH AND HUMAN SERVICES, OFFICE OF INSPECTOR GENERAL (HHS-OIG): Securing public health information with mature zero trust

Investment start: April 2023.

Challenge: HHS-OIG handles and analyzes large amounts of public health data and personally identifiable information, including grants and Medicare and Medicaid claims. The analysis of these millions of data points supports recommendations for COVID Provider Relief Fund operations, treatments for opioid overdose, investigations of healthcare fraud, and more. These data, program information, and analyses must be protected from sophisticated cyber attacks.

Approach: With TMF support, HHS-OIG is modernizing its cybersecurity infrastructure with zero trust solutions, including:

• Architecting a zero trust network by updating to a secure, cloud-based model aligned with the secure access service edge requirements from the Cybersecurity and Infrastructure Security Agency and national executive orders
• Enabling applications to determine the level of access a user should be given through an enterprise identity management solution

---

Improving user experience and raising security posture to federal standards

U.S. DEPARTMENT OF HOUSING AND URBAN DEVELOPMENT (HUD): Identity credential access management modernization for Federal Housing Administration Connection

Investment start: October 2022.

Challenge: The Federal Housing Administration Connection (FHAC) provides FHA-approved lenders and business partners with access to HUD’s computer systems, supporting 15 high-value systems including the Single Family and Multifamily Housing Programs, Public and Indian Housing, and the Chief Financial Officer. FHA’s legacy systems are overextended, costly to maintain, and do not meet Federal Identity Credential Access Management requirements. These systems have differing solutions for identity management that scale poorly and harm user experience.

Approach: With TMF support, HUD is working to:

• Seamlessly integrate with Login.gov
• Improve customer experience by creating self-service registration capabilities for users, organizations, and application administrators
• Leverage existing solutions, such as Login.gov, Okta, and SailPoint, to migrate legacy authentication and authorization tools to a zero trust compatible solution
• Serve as a reference architecture for other agencies looking to meet zero trust goals

This modernization effort is projected to:

• Improve detection of internal and external threats to FHAC systems
• Allow HUD to begin retiring legacy solutions
• Generate an estimated $7 million in total savings

---

Strengthening access and security governance across agency network

U.S. Department of Housing and Urban Development (HUD): Transforming identity and access management

Investment start: October 2024.

Challenge: HUD is dedicated to creating strong, sustainable, inclusive communities and quality affordable homes for all Americans. To better fulfill this mission, HUD needs to modernize its digital infrastructure that includes over 230 system applications accessed by approximately 10,000 internal users and 540,000 external users. The current system is fragmented, outdated, inefficient, and struggles to keep pace with evolving security threats and user needs. And the absence of a comprehensive Enterprise Identity, Credential, and Access Management (EICAM) solution has led to limited security measures, compliance gaps, inefficient access management, challenges with auditing and monitoring, and the absence of enterprise-wide standardized controls.

Approach: With TMF support, HUD plans to implement a comprehensive and robust EICAM solution that aligns with modern best practices and federal mandates. By enhancing security, efficiency, and user experience across the agency’s vast network of systems and applications, HUD is expected to yield significant benefits that include:

• Strengthened security governance
• Enhanced system access controls
• Increased productivity efficiencies
• Improved customer satisfaction
• Operational cost savings through the decommissioning of legacy systems

---

An electronic way for veterans and their families to request records and for federal agencies to recall records to provide services

NATIONAL ARCHIVES AND RECORDS ADMINISTRATION (NARA): High value asset mission essential systems

Investment start: May 2022.

Challenge: NARA serves as the nation’s record keeper, holding federal records dating back to the American Revolution. Each year, NARA receives about 1.1 million records requests from veterans and families in order to access benefits and nearly eight million records requests from over 400 federal agencies that need to recall records to provide other citizen services. Nearly all records are available only on paper and stored in facilities across the country. COVID-19 put significant pressure on operations, limiting onsite processing capacity and creating a backlog of hundreds of thousands of requests.

Approach: With TMF support, NARA is enabling rapid retrieval and electronic delivery of records through secure, accessible web portals. To do so, NARA is replacing its legacy information systems with cloud-based platforms.

This investment will:

• Allow veterans and their families to electronically request and receive their records
• Allow NARA staff to fulfill records requests remotely, digitally, and securely, decreasing processing time
• Support agency customers with greater responsiveness as they transition to digital recordkeeping

---

Accelerating critical cybersecurity and operational upgrades two years earlier

NATIONAL AERONAUTICS AND SPACE ADMINISTRATION (NASA): Accelerating network cybersecurity and performance improvements in benefit to agency missions

Investment start: April 2024.

Challenge: NASA’s IT infrastructure plays a critical role in all aspects of NASA’s mission, from enabling collaboration to controlling spacecraft to processing scientific data. The nature of NASA’s mission and the technical and intellectual capital produced makes the agency’s information a valuable target for hackers, criminals, and foreign enterprises. Therefore, NASA must continue to strengthen technical and procedural capabilities to defend agency IT systems and data.

Approach: With TMF support, NASA will:

• Increase network management automation, standardize configurations, and collect additional telemetry to help meet requirements of federal mandates on cybersecurity
• Accelerate vital work that will improve effectiveness and introduce efficiencies through the standardization of network configurations across all NASA locations

---

A safer and more efficient way to process unfair labor practice cases

NATIONAL LABOR RELATIONS BOARD (NLRB): Case management system modernization

Investment start: September 2024.

Challenge: NLRB protects the rights of U.S. employees to join together, with or without a union, to improve their wages and working conditions. In 2023 alone, the agency took in over 22,000 unfair labor practice cases and recovered more than $56 million in make-whole relief. To process these cases and union election petitions, NLRB relies on its electronic case management system (CMS) to collect, retrieve, and store information. However, NLRB’s legacy CMS is outdated at 17 years old-resulting in case processing delays, reduced data reliability, greater cybersecurity risk, and less adaptability to evolving technological standards.

Approach: With TMF support, NLRB intends to implement a modern, cloud-based CMS, centered on:

• Automation
• Streamlined business processes
• Data integrity
• Increased security posture

This will allow for critical improvements in agency processes, data quality, and the accessibility of services on NLRB’s public website, such as e-filing documents and obtaining public information. The project’s focus on these areas contributes to the agency’s commitment to staying current with technological advancements and meeting or exceeding federal standards for efficiency, productivity, and transparency.

---

Better access to transportation accident investigations for public safety

NATIONAL TRANSPORTATION SAFETY BOARD (NTSB): Improving customer experience with digital content delivery

Investment start: July 2023.

Challenge: NTSB investigates civil aviation and other transportation accidents, conducts safety studies, provides safety recommendations, and makes results publicly available on NTSB.gov. With data stored in multiple systems, it is challenging for regulators, advocates, families of accident victims, and Congress to find, understand, and use this information.

Approach: With TMF support, NTSB is streamlining its systems and ensuring users can find investigation information through:

• Centralized accident data to improve search capabilities
• A reimagined process for report publishing and document management
• Near real-time sharing of datasets, including investigation progress
• Customer notifications

---

Improving OPM.gov for federal workforce and job seekers

OFFICE OF PERSONNEL MANAGEMENT (OPM): Website and digital modernization

Investment start: October 2022.

Challenge: OPM.gov helps the federal government recruit job seekers, supplies the federal workforce with career-related information, and makes it easier for public servants to manage their benefits. Currently, 22 million annual visitors have difficulty navigating the site, using the tools effectively, and finding the information they need. The nearly 20,000 pages on OPM.gov contain 3,600 dead links, creating a confusing user experience for federal employees, job seekers, and HR professionals who visit the site expecting updated and accessible information.

Approach: With TMF support, OPM is updating technology and content while working to:

• Implement a modern and secure content management system hosted in OPM’s enterprise cloud environment, to enable intuitive and accessible web tools
• Develop processes for publishing updated information
• Create an intranet environment that houses historical information
• Apply oversight from a digital governance board that ensures technology, design, and process changes are customer-centric

---

Protecting HR data of current and retired federal employees

OFFICE OF PERSONNEL MANAGEMENT (OPM): Zero trust networking

Investment start: September 2021.

Challenge: As the human resources (HR) provider for the federal government, OPM manages extremely sensitive personal data for millions of current and retired federal employees. OPM must reduce its attack surface and increase cybersecurity protections, visibility, and resiliency of its services.

Approach: With TMF support, OPM is implementing zero trust solutions across five main pillars: identity, devices and endpoint, network and environment, application workload, and data.

This investment will:

• Achieve an “optimal” level in the Cybersecurity and Infrastructure Security Agency’s Zero Trust Maturity Model
• Enable compliance with mandates established by executive orders
• Reduce the number of security tools required, leading to cost savings
• Provide additional identity management options for enhanced collaboration with agency partners

---

Enabling capacity for the agency that oversees the U.S. Postal Service

POSTAL REGULATORY COMMISSION (PRC): IT modernization

Investment start: March 2022.

Challenge: PRC oversees the U.S. Postal Service (USPS), which operates over 34,000 post offices. The pandemic, workforce shortages, and supply chain disruptions challenged the postal system’s ability to provide efficient mail delivery. These factors, alongside a surge in public interest in participating in PRC’s proceedings, put pressure on its public-facing website and docket system, which is over 20 years old and at imminent risk of failure. PRC’s ability to swiftly scale up oversight efforts is also hindered by an outdated data environment, which requires PRC economists to analyze large volumes of data manually.

Approach: With TMF support, PRC is replacing its systems with cloud-based applications and developing a user-friendly public-facing website, modern docket system, and new data management system. This investment will:

• Ensure that PRC remains effective and responsive to the public in the face of unprecedented challenges for USPS
• Enable faster and more thorough data analysis
• Reduce operations and maintenance costs

---

An easier way for railroad employees and retirees to manage their accounts and apply for benefits

RAILROAD RETIREMENT BOARD (RRB): Citizen-centric online self-services

Investment start: December 2022.

Challenge: For over 675,000 railroad retirees, annuitants, and active employees, changing personal information such as address or direct deposit or applying for sickness benefits is a time-consuming process. To make a request, users face long wait call times, inconvenient office visits, or mail delays, with no way to check the status of their request online. RRB aims to move major services for railroad retirees from phone and paper to the internet, reducing staff and customer time spent accessing finances and benefits.

Approach: With TMF support, RRB is working to:

• Engage a focus group of current and former railroad employees to understand their needs and create an intuitive user interface
• Digitize the sickness benefits application process
• Enable users to get sickness application status updates online

RRB will redirect a projected 12,400 hours annually of frontline customer representatives’ time towards handling more complex beneficiary requests, faster.

---

A faster and more convenient way for retirees, people with disabilities, and survivor beneficiaries to submit forms and documents

Social Security Administration (SSA): Digitizing forms and enhancing customer experience

Investment start: October 2024.

Challenge: For nearly 90 years, SSA has supported financial security for millions of Americans, including retirees, people with disabilities, and others. SSA ensures people who have contributed to the system receive the support they’ve earned when they need it most. The agency’s reliance on paper-based processes for receiving and processing forms and documents has led to high-volume queues, strained resources, and burdens on claimants, beneficiaries and people applying on their behalf. Customers often need to mail sensitive information or make in-person visits to SSA offices, which can be particularly challenging for seniors or people with disabilities.

Approach: With TMF support, SSA aims to accelerate their transition to a more efficient, user-friendly service featuring electronic signature capabilities and a robust online document upload platform.

This effort is expected to:

• Reduce paper mail volume by roughly half, saving over 600 staff work years annually by 2028
• Allow employees to redirect their efforts to other critical services, potentially reducing wait times and improving overall customer experience
• Minimize the need for in-person document submission, potentially saving customers up to 1.3 million hours in travel time

By making electronic options available, SSA intends to create a simpler, faster, and more accessible experience for the millions of Americans who depend on social security services.

---

Clearer and more accessible notices for retirees, people with disabilities, and survivor beneficiaries

Social Security Administration (SSA): Modernizing beneficiary notifications

Investment start: October 2024.

Challenge: SSA sends hundreds of millions of notices each year to inform people about their retirement, disability, and survivor benefits and any actions they need to take. However, many notices are hard to understand and poorly designed, leading to confusion and increased calls to SSA. Furthermore, most notices are sent by mail, which is expensive and increasingly not preferred by customers.

Approach: With TMF support, SSA intends to create user-centered design guidance, build new digital tools, and modernize current backend systems for an enhanced customer experience.

This modernization effort aims to:

• Simplify notice language and create more digital options for receiving notices, making it easier for people to take action
• Transform how SSA connects with applicants and beneficiaries, making interactions more straightforward, efficient, and user-friendly
• Reduce SSA printing and mailing costs, decrease call volumes related to confusing notices, and improve customer satisfaction

---

Multi-factor authentication to protect retirement and disability beneficiaries

SOCIAL SECURITY ADMINISTRATION (SSA): Personal data security for public benefits processing

Investment start: February 2023.

Challenge: SSA pays benefits to over 70 million people, including retirement and disability beneficiaries and their families. Daily, SSA’s frontline employees serve hundreds of thousands in the American public, using internal services for virtual, phone, and in-office support. To improve its cybersecurity posture and reduce risks from compromised credentials, SSA needs to accelerate its phishing-resistant multi-factor authentication (MFA).

Approach: With TMF support, SSA is working to:

• Onboard noncompliant systems to the agency’s MFA solution, a single-sign-on with Homeland Security Presidential Directive-12 approved personal identity verification credentials
• Address applications that use legacy authentication protocols, eliminating long-standing technical debt to maintain these services
• Establish continuous monitoring and governance to ensure services remain compliant with federal security mandates

---

Timely and accurate decisions for Americans with a disability benefits claim

Social Security Administration (SSA): Using artificial intelligence to support disability claim processing

Investment start: October 2024.

Challenge: SSA provides timely support to millions of Americans with disabilities. As medical records grow increasingly complex and staff resources remain limited, SSA faces challenges in processing disability claims efficiently. As a result, the agency is seeking innovative technology solutions to help address these issues.

Approach: With TMF support, SSA intends to improve their disability determination process by enhancing several key systems, including the National Case Processing System and the Intelligent Medical-Language Analysis Generation tool. Through the responsible and ethical use of artificial intelligence, SSA plans to tackle a growing backlog of cases.

This effort is expected to:

• Reduce processing times by flagging potential issues in decision rationales and providing timely occupational information
• Provide adjudicators real-time feedback and decision support, potentially saving thousands of work hours annually
• Improve the accuracy of determinations
• Improve service delivery to vulnerable populations

---

Enabling readiness and rapid scaling for national defense

SELECTIVE SERVICE SYSTEM (SSS): Registration and verification modernization

Investment start: March 2022.

Challenge: SSS registers all male American citizens and male immigrants residing in the U.S. between the ages of 18 and 25, in the event of a national emergency that requires a mobilization for national defense. Annually, SSS manages over two million selective service registrations and about six million enrollment verification checks. This data provides eligibility verification for student aid, government jobs, free job training, and a potential streamlined process for citizenship.

Approach: With TMF support, SSS will migrate its registration, compliance, and verification software to a cloud-first software and data architecture. This will enable a steady state of readiness and for operations to scale up rapidly when activated by Congress and the President. Benefits include:

• Continuous availability from redundant geographic locations
• Enhanced protection of personally identifiable information
• Advanced data analytics to inform decisions on any future mobilization
• Enhanced cybersecurity protection and performance capabilities
• Improvements to the application’s public-facing user experience

---

A modernized Treasury network to identify overseas threats to economy

U.S. DEPARTMENT OF THE TREASURY (Treasury): Secure cloud national intelligence sharing

Investment start: February 2023.

Challenge: Treasury’s Treasury Foreign Intelligence Network (TFIN) is used to share classified information with other agencies. Treasury’s bureaus and subagencies rely on the network to identify overseas threats to America’s economy and evaluate the impact of foreign sanctions. TFIN has suffered service disruptions, which often occur when the system is most used or under threat. Currently, the network is vulnerable to major power disruptions from the local power grid, maintaining the hardware-intensive system is cost-ineffective, and hosting TFIN locally is not aligned with performance and security best practices.

Approach: With TMF support, Treasury is transitioning to a hybrid cloud solution for a robust IT infrastructure and secure, decentralized network. Treasury is working to:

• Establish a contract with an enterprise cloud service accredited for classified workloads
• Migrate critical applications to a cloud provider for enhanced stability, processing, analytics, storage, and network cloud services
• Adopt a Software as a Service virtual desktop solution
• Be the first in the intelligence community to implement a cloud email productivity software solution
• Share lessons learned to inform other agencies in subsequent adoptions

---

Protecting journalists and safeguarding targeted news content

U.S. AGENCY FOR GLOBAL MEDIA (USAGM): Improving IT security with zero trust architecture

Investment start: February 2023.

Challenge: With reporters stationed in global high-risk areas, USAGM provides objective news to audiences overseas who are often subject to censorship, strict media controls, or extremist influences. About 4,300 global media affiliates and counting are accessing the agency’s network to receive USAGM content. USAGM’s legacy solutions lack the ability to adequately correlate devices to individuals, implement identities protected by multi-factor authentication across all agency applications, and defend cloud applications.

Approach: With TMF support, USAGM is working to:

• Implement a zero trust architecture approach that eliminates implicit trust and continuously validates each stage of a digital interaction
• Introduce a master user record as an identity governance workflow that tailors access based on individual needs
• Implement a secure access service edge framework to protect its remote workforce and agency cloud applications

---

Expediting foreign aid with customer relationship management

U.S. AGENCY FOR INTERNATIONAL DEVELOPMENT (USAID): CRM system

Investment start: December 2022.

Challenge: From food security to access to life-saving medication, USAID helps millions worldwide who benefit from U.S. foreign assistance. To do so, USAID manages relationships with global partners and mobilizes their capabilities and resources. The agency lacks a singular, searchable database to initiate and leverage these relationships, instead relying on a patchwork of disconnected systems that burdens staff and partners with redundancies and leads to delays in aid.

Approach: With TMF support, USAID is working to:

• Develop and implement its first enterprise-wide customer relationship management platform, to streamline relationships with critical strategic partners, including businesses, foundations, philanthropies, academic and research institutions, and public interest organizations
• Accelerate implementation, beginning deployment a year ahead of initial estimates

For a deep dive on this investment, read our case study.

---

Accelerated multi-factor authentication and identity management

U.S. AGENCY FOR INTERNATIONAL DEVELOPMENT (USAID): USAID zero trust architecture

Investment start: August 2022.

Challenge: As USAID focuses on global development and humanitarian assistance, its thousands of users require “anywhere, anytime” access. Coupled with an increased need for remote work due to the COVID-19 pandemic, the USAID network was pushed beyond traditional perimeter boundary controls. This left gaps in security areas such as remote identity proofing, privileged access management, and authentication assurance levels.

Approach: With TMF support, USAID is accelerating funding of its zero trust initiatives, advancing the development timeline from FY 2025 to FY 2024. USAID is working to:

• Complete next-generation multi-factor authentication and automation and dynamic access control pilots in FY 2022, completing design and implementation in FY 2023
• Allow USAID cybersecurity teams to uniformly govern user access to systems, applications, and networks regardless of user location, through a modern identity management system with enhanced identity controls and sufficient artifacts for federal compliance
• By 2025, transition an estimated 50% of Agency Federal Information Security Modernization Act-Reportable Systems to the new identity management system

---

Securing a network that supports food safety, farmer assistance, and beyond

U.S. DEPARTMENT OF AGRICULTURE (USDA): Network modernization

Investment start: June 2022.

Challenge: USDA’s mission areas include programs that provide assistance to America’s farmers, improve health, work to end hunger, and ensure food safety. Its current network faces challenges in keeping up with expanded program needs for throughput and security. USDA’sFood Safety and Inspection Service, for example, must deliver critical food safety data to industry, academia, and the public through its Public Health Information System. In another example, Forest Services must communicate effectively with the Federal Aviation Administration and state forestry departments to monitor and respond to wildfires. USDA needs an updated, secure, and reliable network that protects these operations from cyber attacks and enables improvements to better meet its mission.

Approach: With TMF support, USDA is implementing USDANet, an upgraded network that will:

• Enhance the Supplemental Nutrition Assistance Program’s (SNAP) fraud prevention capabilities, curbing recipient and retail fraud and mitigating risks from scams
• Provide real-time data that improves the Forest Service’s ability to manage wildfires and anticipate threats
• Allow integration of technology such as 5G and Internet of Things, enabling participation in digital farming research with leading universities
• Generate significant savings, enabling investments in public-facing mobile applications like LandPKS, which helps farmers monitor changing soil health and vegetation conditions
• Improve bandwidth at lower cost, allowing implementation of new processes and cloud-based applications for inspection operations that protect public health and prevent foodborne illness

---

Securing USDA’s sensitive information and shared services

U.S. DEPARTMENT OF AGRICULTURE (USDA): Network monitoring, detection, and response

Investment start: May 2022.

Challenge: USDA’s nearly 100,000 employees are spread across more than 4,500 locations in the U.S. and abroad. Its 29 agencies and bureaus work in areas ranging from rural development and forest management to nutrition programs, agricultural research, and international trade. USDA also houses the National Finance Center, which provides payroll services for over 600,000 employees and financial services for over 40 agencies. These vital functions generate large volumes of sensitive information that need safeguarding.

Approach: With TMF support, USDA is implementing new software tools to improve its cybersecurity posture, including applications that will enhance automated threat hunting and detection, improve visibility of encrypted network traffic, and reduce risks to data and continuity of service.

This investment will:

• Improve USDA’s ability to prevent, detect, and remediate network intrusions
• Move USDA towards a zero trust architecture and meet requirements of national executive orders
• Deploy security tools to protect its public-facing websites, which are used to access information and services on farm loans, food safety inspections, nutrition assistance, and beyond

---

A unified, modern way for veterans to access benefits across VA

U.S. DEPARTMENT OF VETERANS AFFAIRS (VA): Digitizing forms and personalizing experiences for better veterans benefits management and customer support

Investment start: July 2023.

Challenge: Veterans and their families use VA.gov to access benefits like health care, disability, education, and pension. Many of these services are accessed via forms that are collectively used or downloaded over two million times per month. These services often require veterans to use paper forms and input the same data repeatedly across various platforms. With multiple VA staff needed to process each paper form, a cost of $500k to digitize each form, and hundreds of forms left undigitized, veterans face delayed access to the benefits they’ve earned.

Approach: With TMF support, VA is digitizing and centralizing forms at scale to:

• Improve personalization of forms and eliminate repetition
• Improve data visualization in tools used by medical staff, to aid clinical decisions
• Reduce the cost of digitizing a form by at least 50% and reduce custom code by at least 20%
• Save VA customers 2.5 days per form in effort required by paper forms

VA is partnering with U.S. Web Design System (USWDS) to:

• Create low- to no-code form building capabilities
• Contribute reusable code and research findings back to USWDS in a format that can be readily scaled and deployed by other agencies

---

A faster, easier sign-in experience for veterans accessing VA services

U.S. DEPARTMENT OF VETERANS AFFAIRS (VA): Veteran identity modernization

Investment start: April 2022.

Challenge: VA digital services are used by millions of veterans every month. To access VA services, veterans face a confusing sign-in process, with multiple sign-in pathways and credential options that vary in compliance, security, and usability. This results in poor user experience, high costs to license duplicative credentials, and increased fraud and security risks.

Approach: With TMF support, VA is taking steps towards a single, modern, and easy sign-in service, allowing seamless digital access to benefits and services through Login.gov. VA is working to:

• Support the seamless transition of existing users to Login.gov
• Create an in-person identity verification option for veterans unable to sign up online
• Pilot physical security keys for multi-factor authentication to improve accessibility and security

---

Inactive investments

---

Upgrading systems for customs enforcement and trade protections

U.S. DEPARTMENT OF HOMELAND SECURITY, CUSTOMS AND BORDER PROTECTION (DHS-CBP): Automated commercial environment collections module

Investment start: October 2020. Final update to TMF Board: September 2022.

Challenge: CBP’s mission includes customs enforcement, revenue collections, and trade protections. CBP’s 30-year-old collection tool, the Automated Commercial System (ACS), was housed on the agency’s last remaining mainframe solution. CBP required an updated system and a flexible, secure platform to meet the growing complexities of global trade facilitation and enforcement.

Approach: With TMF support, CBP developed the Automated Commercial Environment Collections module, retiring ACS and decommissioning its last remaining mainframe solution.

This investment:

• Helped CBP improve customs enforcement, revenue collections, trade protections, and user experience through improved features and business capabilities
• Saves CBP’s workforce time and ensures customers get their refunds as quickly as possible, eliminating the need to stuff and send envelopes by postal mail
• Saves the agency over $30 million annually in legacy system operations and maintenance costs
• Enabled electronic processing of over 92% of revenue in FY21 and automated posting of about 4,000 consolidated deferred tax bills, replacing labor-intensive manual posting

For a deep dive on this investment, read our case study.

---

Moving DOE employees to a better email platform

U.S. DEPARTMENT OF ENERGY (DOE): Enterprise cloud email

Investment start: July 2018. Final update to TMF Board: July 2022.

Challenge: Previously, DOE operated 64 separate email systems, 45 of which were on premises, that serviced 184,387 email addresses. Maintaining multiple on-premise email environments not only drove up agency costs, but increased the enterprise’s threat vector. DOE needed to migrate its email infrastructure to the cloud to provide employees with a more robust email platform, enhance its cybersecurity posture, and reduce IT maintenance costs.

Approach & Outcomes: DOE successfully completed the migration in a single accelerated effort. With TMF support, DOE:

• Moved 14 on-premise systems to cloud email
• Migrated all 15,951 mailboxes to the cloud
• Decommissioned one system
• Established internally-funded migration plans for 12 additional systems
• Identified 2,201 mailboxes that could be decommissioned after eliminating secondary email systems and other inefficiencies

Due to project success and additional internal investment, DOE completed the project with a reduced TMF funding amount.

---

A faster, electronic path for employers to hire guestworkers

U.S. DEPARTMENT OF LABOR (DOL): Labor certificate processing modernization

Investment start: January 2019. Final update to TMF Board: May 2021.

Challenge: Previously, DOL used an outdated paper-based process to issue labor certifications to employer applicants for specific work visas. This process required specialized printing on costly security paper and for employer applicants and representatives to manually mail labor certifications and other documents to the Department of Homeland Security U.S. Citizenship and Immigration Services (USCIS) for visa applications.

Approach & Outcomes: With TMF support, and using an agile approach, DOL:

• Successfully transitioned the labor certification process for all visa types from paper to digital e-certification
• Created a data hub to securely transmit labor certification and other documentation to USCIS, giving agencies direct access to case files and improving data accessibility and reporting

This investment:

• Eliminated the need for DOL and employer applicants to mail forms back and forth and to USCIS, improving user experience
• Gave farmers and other employers immediate access to certifications, saving costly trips away from the farm
• Eliminated an artificial barrier to the number of certifications that could be issued daily, enabling daily issuance of 176% more H-2A certifications and 109% more H-2B certifications
• Produced an estimated annual cost avoidance of $2,000,000 in supplies and labor

For a deep dive on this investment, read our case study.

---

Faster transformation of IT applications

GENERAL SERVICES ADMINISTRATION (GSA): Application modernization integrating flexible architectures

Investment start: October 2018. Final update to TMF Board: June 2023.

Challenge: In 2018, GSA had 88 IT applications in need of modernization. These applications had cumbersome, outdated user interfaces and were difficult to connect to other systems. GSA would have had to modernize these legacy systems in piecemeal fashion, as funding became available in annual budgets.

Approach & Outcomes: With TMF support, the team pursued a full and faster transformation, including at the hardware, database, and application layers. Across three years, a cross-functional team at GSA employed agile methodologies. GSA:

• Created a set of standard target technologies for all future application migrations
• Generated various playbooks that guided the modernization of ten additional GSA applications and remain accessible to all agencies

This investment:

• Allowed GSA greater flexibility in recruiting talent
• Is expected to lower operations costs, improve quality of applications, and establish a repeatable process for modernizing legacy applications that can be used across government

---

Exploring cloud-based authentication and collaboration products

GENERAL SERVICES ADMINISTRATION (GSA): MAX.gov transition

Investment start: September 2021. Final update to TMF Board: April 2023.

Challenge: MAX.gov is a suite of tools that facilitates collaboration, information sharing, data collection, business intelligence, and authentication tools and services. MAX.gov was at a critical juncture in which dozens of agencies relied on the system for mission critical operations, but its outdated technology affected scalability.

Approach & Outcomes: The MAX.gov Transition Project Management Office within GSA’s Technology Transformation Services was charged with creating modern cloud-based authentication and collaboration products for government organizations on a fee-for-service basis.

With TMF support, GSA reexamined its approach and came to an agreement with the Office of Management and Budget (OMB) to stop the MAX.gov transition efforts due to unviability as a cost-recoverable service, low desirability in the agency customer marketplace, and infeasibility to build and maintain a custom environment for agency partners. OMB has since worked with the U.S. Department of Agriculture (USDA) to take over the transition effort, and USDA is now hosting MAX.gov for agency partners.

---

Laying the foundation for human resource functions across government

GENERAL SERVICES ADMINISTRATION (GSA): NewPay payroll and work schedule and leave management Software as a Service

Investment start: February 2019. Final update to TMF Board: July 2021.

Challenge: Federal payroll operations commonly rely on decades-old legacy software, which is costly and difficult to maintain.

Approach & Outcomes: With TMF support, GSA created a minimum viable product using Software as a Service (SaaS). The goal was to lay a new foundation for an enterprise solution for human resource (HR) functions across government, including payroll and work schedule and leave management.

Given uncertain timing of agency migrations to the new tool and lack of appropriations for planning and migration activities in FY19 and FY20, GSA reduced the scope and funding required for their TMF investment.

By the end of the project, GSA:

• Designed and configured the NewPay payroll solution for 65 pay plans
• Completed verification testing for 12 of the most common plans, at a reduced cost of less than $8M
• Stood up initial payroll capabilities for Title 5 employees
• Provided a tool that demonstrates how federal HR standards and regulations can be applied for a commercial SaaS solution in a federal environment

---

Modernizing systems that support grant, subsidy, and loan programs

U.S. DEPARTMENT OF HOUSING AND URBAN DEVELOPMENT (HUD): UNISYS mainframe migration

Investment start: August 2018. Final update to TMF Board: August 2022.

Challenge: Previously, HUD’s mainframe and five most critical business systems were on premises in an antiquated mainframe environment, with COBOL applications that were expensive to maintain. These systems support 30,000 users for over 100 HUD grant, subsidy, and loan programs.

Approach & Outcomes: With TMF support, HUD modernized the codebase to Java and accelerated the migration of these five business systems to the cloud. This investment:

• Improved security, reduced infrastructure, and increased shared services with other agencies
• Enabled faster completion of functional and technical enhancements due to reduced costs of maintaining and updating the platform
• Saves $8 million annually, allowing funds to transform additional legacy systems

Securing this investment led HUD leadership to allocate additional internal funds to accelerate the project and reduce the amount needed from TMF, while achieving the full outcomes of the original proposal.

---

Supporting efficient inspection and certification of fruits and vegetables

U.S. DEPARTMENT OF AGRICULTURE (USDA): Agricultural marketing service specialty crops system modernization

Investment start: January 2020. Final update to TMF Board: March 2023.

Challenge: USDA’s Agricultural Marketing Service (AMS) Specialty Crops Inspection Division has billing, inspection, and certificate generation and issuance processes that support inspection and certification of over 10.7 billion pounds of processed fruit and vegetable products and 49.9 billion pounds of fresh fruits and vegetables. This includes fruit and vegetables for school lunches and military combat rations. AMS was managed through a combination of inefficient manual, paper-based processes and outdated legacy IT systems.

Approach & Outcomes: With TMF support, USDA moved to a cloud-based solution that uses existing commercial products and offerings. This system enables AMS Specialty Crops inspectors, frontline managers, and others to securely gather and store field evaluation data, interface with business applications, and process customer order and billing information.

This investment:

• Ensured that perishable agricultural items move more efficiently through the inspection process, for consumers to receive the freshest commodities possible
• Facilitated a cultural transformation in the Specialty Crops Inspection program, streamlining, standardizing, and modernizing underlying processes

TMF funding accelerated the project into a single effort, reducing project development and implementation time by an estimated two years.

For a deep dive on this investment, read our case study.

---

A shared enrollment process for assistance to farmers and ranchers

U.S. DEPARTMENT OF AGRICULTURE (USDA): Farmers.gov customer experience portal

Investment start: July 2018. Final update to TMF Board: May 2021.

Challenge: USDA’s farm production and conservation mission area includes the work of the Farm Service Agency (FSA) and the Natural Resources Conservation Service (NRCS). Both FSA and NRCS provide financial and technical assistance to farmers and ranchers through related conservation programs. In an effort to consolidate systems and improve user experience, USDA aimed to update and modernize conservation financial assistance and payment operations systems across FSA and NRCS.

Approach & Outcomes: With TMF support, USDA:

• Developed a proof of concept that integrated disparate enrollment processes into a consolidated Farmers.gov citizen experience portal
• Documented both current and proposed processes
• Identified and developed four robotics process operations demonstration tools

---

Moving USDA’s mission critical applications to the cloud

U.S. DEPARTMENT OF AGRICULTURE (USDA): Infrastructure optimization and cloud adoption

Investment start: November 2018. Final update to TMF Board: April 2020.

Challenge: In 2018, USDA had mission critical applications with performance issues and security challenges, alongside a decentralized IT infrastructure that was costly to maintain and upgrade. Ten applications were hosted on costly mission area-specific data centers, resulting in poor enterprise adoption of cloud services and lack of expertise to maintain them.

Approach & Outcomes: With TMF support, USDA worked with the GSA Cloud Centers of Excellence, marking the beginning of continuous cloud-enablement across USDA.

This investment:

• Migrated the Emergency Watershed Protection application to the cloud, improving functionality and generating cost savings
• Conducted application rationalization efforts and set an example of how cloud migration could be tackled across the agency
• Generated buy-in, leading the Food and Nutrition Service to secure internal funding to migrate five applications
• Enabled USDA to consolidate and leverage its cloud expertise across the enterprise

---

Definitions

Project status:

• Active: agency is working toward completing TMF project milestones
  
• Inactive: agency has completed their TMF project milestones or ended the project early, and given a final presentation to the Board
  

Transfer status: percentage of total investment dollars transferred from TMF to the agency

Repayment status: percentage of total expected repayment transferred from the agency to TMF

Schedule delay: whether there is an overall delay in expected final project completion date

Cost overruns: whether the project incurred unexpected costs beyond the TMF investment amount

ARP funding: whether the investment is made, partially or in full, with American Rescue Plan funding

Total TMF investment amount: total dollar amount of TMF funds expected to be transferred to the agency incrementally, as project milestones are completed

TMF spend to date (obligated): amount of TMF funds obligated by the receiving agency on the project to date

Commercial product: whether the agency will purchase a commercial off-the-shelf software or hardware product available on the open market