SAP Lifecycle Flashcards
SAP Oversight Basics
- Oversight provided to DoD SAPs is much more significant than that given to collateral programs.
- SAP oversight is outlined in Section 119, Title 10 United States Code, and includes the requirement to report annually to Congress.
Section 119 of Title 10
Specifies the types of reports that are submitted to Congress as well as the frequency with which they are submitted.
Congressional Reporting
Existing SAPs must submit a report to Congress no later than March 1 of each year
Information in Reports:
Existing SAPs
- The estimated total budget requested for the current and next fiscal years
- A brief description of the program, including the numbers of individuals involved
- The actual cost of the program for each previous fiscal year
- A brief discussion of the major milestones for the SAP, such as current issues or significant changes
Reporting:
New or proposed SAPs
Submit a SAP Listing to Congress no later than February 1 of each year
Information in Reports:
New or proposed SAP
- Notice of the designation of the program as a SAP and the justification for such designation
- The current estimate of the total cost for the program
- Identification of existing programs or technologies that are similar to the new SAP’s technology or mission
- Submit a SAP Listing to Congress no later than February 1 of each year
Establishment Phase
- A SAP begins in the establishment phase.
- Determines whether or not extra protection is warranted to establish a Prospective SAP (PSAP).
- Phase begins when it is determined enhanced security measures are required.
- Program’s eligibility to become a SAP is evaluated through the approval process.
-Establishing SAPCO must notify the Director, DoD SAPCO, in writing of the decision to create a PSAP.
*Include documents that ensure the SAP’s
protection
Management and Administration Phase
- Starts once the SAP is approved.
- Entails the day-to-day operations of the SAP.
- Inspections, audits, and internal control.
- Work on the SAP is accomplished as long as there is a continued need for the SAP.
Disestablishment Phase
- Once the SAP is no longer needed, it is disestablished.
- May be due to the program transitioning to a collateral program or by being absorbed into another existing SAP.
- Disestablishment includes ensuring the SAP’s information and related SAPs are protected, a disestablishment plan is developed, a debrief of personnel, and a closeout inspection are conducted.
Three phases of the SAP lifecycle?
- Establishment
- Management and Administration
- Disestablishment
Steps of Establishment Phase
Verify that individual needs the information specifically to do their work, they have the appropriate clearance, and that someone in a position of authority has given them the permission to access the information. If you are unsure of someone’s need-to-k
Apportionment
- SAP or section of a SAP has been formally included in the Integrated Joint Special Technical Operations (IJSTO) process
- SAP is in use for Combatant Commands during deliberate planning, crisis action response, and operational employment.
Apportionment Phase
- SAP is deemed operational in capability (or no later than 18 months prior to plan IOC)
- DoD Component and PSA SAPCOs nominates SAP capabilities to be apportioned into IJSTO
Disestablishment Phase 2
Once the SAP is no longer needed, it is disestablished. This may be due to the program transitioning to a collateral program or by being absorbed into another existing SAP. Disestablishment includes ensuring the SAP’s information and related SAPs are protected, a disestablishment plan is developed, a debrief of personnel, and a closeout inspection are conducted.
SAP Approval Authorities
Authorized to approve SAPs:
Unless otherwise directed by the President of the United States only…
Secretary of State Secretary of Defense Secretary of Energy Secretary of Homeland Security Director of National Intelligence Attorney General
*Or their principal deputy
Other agency SAPs
- Agencies with SAPs do not always establish and operate SAPs in the same way as the Department of Defense
- Agencies do work together.
- In cases of joint programs, the host activity ensures regulatory requirements are met by the other involved agencies.
DOD SAP Approval Authority
The Deputy Secretary of Defense (DEPSECDEF) is designated primary and direct responsibility for SAPs.
Where does the initial need for a SAP come from?
Initial need for a SAP can be identified and initiated anywhere:
-Within the government
(civilians and warfighters)
- Within industry
- Whether identified by government or industry, each need is first assessed.
When does the SAP Establishment process begin?
When it is determined enhanced security measures are required
SAP Approval Process
Program referred to as prospective SAP (PSAP)
- Upon PSAP approval, enhanced security measures may be applied for a period not to exceed 210 days.
- During Establishment phase, all documents required for a program to be approved as a SAP are developed (aka the SAP Approval package).
- The Approval Package is sent to the SAP Oversight Committee (SAPOC) for concurrence or non-concurrence.
- If SAPOC concurs, then the SAP approval package goes to Congress for formal approval.
SAP Governance
- SAP governance structure is comprised of the SAPOC, the SRG, and the SSWG.
- Governance process relies upon personnel making the determination that the need for a SAP exists.
- Process relies upon the examination into and justification for the need for a SAP.
- If the need is justified, then it moves into the Establishment phase, also called a PSAP
Establishment Phase Again
all the required documents to identify how that widget or piece of technology is going to be protected are developed. Once all the documents are developed, they are packaged together and sent to the SAPOC for concurrence. Finally, once a SAP is approved by the SECDEF/DEPSECDEF, Congress needs to be notified.