Security and Hazardous MaterialsFiscal Year 2010 Business Plan

800 Independence Avenue, SWWashington, DC 20591

www.faa.gov

Federal Aviation Administration

2010 ASH Business Plan

The Security and Hazardous Materials (ASH) Mission is toprovide quality services to ensure and promote aviationsafety in support of national security and the nationalaerospace system. The ASH Vision is to be recognized asthe global leader having maximum impact on enhancingnational security and aviation safety. To succeed in ourMission, ASH believes in the following guiding principles.Mission, people, and their families come first. Loyalty is atwo-way street. Simple is good. Integrity is non-negotiable. Disagreement does not equal disrespect.Everyone will be treated with respect and dignity. We canlearn from our mistakes. Flexibility is the hallmark of a high-performing organization. All employees are accountable.We can overcome all challenges. Communication is criticalto success. We must define, measure, and analyze toachieve desired results.

ASH has the primary responsibility for critical infrastructureprotection, emergency operations, contingency planning,and the safe transportation of hazardous materials in aircommerce. ASH has four major program areas and staffoffices that assist in carrying out these functions which arevital to both its mission, and to the FAA's mission. Theseare the Office of Hazardous Materials, the Office ofSecurity, the Office of Field Operations, and the Office ofEmergency Operations, Communications andInvestigations.

The protection of FAA's critical infrastructure is a nationaland homeland security concern that continues to receive ahigh level of attention. In recognition of the impact that theNational Airspace System (NAS) has on our country'stransportation infrastructure, ASH develops andimplements policy to protect FAA employees, contractors,facilities, and assets. ASH conducts assessments andinspections at FAA facilities to determine compliance withfacility security, communications security, and classifiedinformation orders and directives. ASH manages the IDmedia program for the agency, conducts national securityand suitability investigations of employees and contractors,and investigations of employees, non-employees,contractors and airmen suspected of violating FAA ordersand regulations. Additionally, ASH is responsible fordeveloping and implementing national policy on hazardousmaterials through inspections, training, and outreach tothose involved in the hazardous materials industryworldwide. The Washington Operations Center Complex(WOCC) is located in ASH, as well as the EmergencyOperations Division, which provides crisis managementsupport, including fielding contingency communicationsand classified messaging equipment, and Continuity ofOperations (COOP) planning and implementation. ASHalso supports the national security responsibilities of theFAA through the National Security Coordination Division.

Increased SafetySecurity and Hazardous Materials is committed tosupporting the FAA's vision of continuously improving thesafety and efficiency of flight. We continue to work with allof our partners to focus our experience, expertise, andnew technology in order to ensure a safer and moresecure global airspace. A description of the activities andperformance targets ASH will complete in support of theFAA Flight Plan goal of Increased Safety is listed below.

Flight Plan Target: CommercialAir Carrier Fatality RateCut the rate of fatalities per 100 million persons onboard in half by FY 2025. FY 2010 Target: 8.1

Improve the safety of transporting hazardousmaterials by air.

Strategic Initiative: HazardousMaterials Safety

Strategic Activity: Strategic Plan withPHMSA

Activity Target 1:Continue to implement strategic safety initiativesfor the transport of hazardous materials inaviation by initiating studies, rulemakings andother documentation, to accomplish the followingpriorities: in partnership with PHMSA, assist withthe development of regulations for the safetransport of a) Lithium batteries (rulemaking); b)Flammable aerosols (data under review, futurerulemaking); c) Air-specific hazmat packaging(rulemaking); and d) Harmonization of theHazardous Materials (HMR) with internationalrequirements (rulemaking). Due September 30,2010

ASH will enforce the hazardous materialsregulations issued by the Department ofTransportation's (DOT) Pipeline and HazardousMaterials Safety Administration (PHMSA) andimplement strategic safety initiatives with PHMSA tostrengthen those regulations.

ASH will maintain a vigorous crisis managementprogram to support the FAA, by updating LOB changesto notification requirements within 10 days; conductingquarterly relocation exercises; ensuring WOCCpersonnel have 2 familiarization tours of area operationcenters; and conducting incident reviews withOperations Officers for quality assurance.

Core Business Target: CrisisManagement and ContingencyPlanning

Page 1 of 21 Fiscal Year 2010 ASH Business Plan10/15/09

The Office of Emergency Operations Communicationsand Investigations (AEO) consists of five divisions,each with specified major program areas:

1. Washington Operations Center Complex (WOCC).The WOCC maintains command, control andcommunications (C3) for the Administrator, DeputyAdministrator, senior FAA management, and theentire agency 24 hours a day/seven days per week.During emergency operations, the WOCC serves asan action center for concentrated and acceleratedagency efforts in response to national emergencies,natural disasters, and major incidents. The WOCCmaintains current information on the status of theNational Airspace System, and when significantincidents or events occur, the WOCC coordinatescommunication among key FAA and Department ofTransportation officials as well as other U.S.Government departments and agencies. The WOCCpossesses flexible operational capability andmaintains portable assets in order to maintaincontinuity of operations should events requireevacuation of the FAA Headquarters building.Additionally, the WOCC staff supplements theContinuity of Operations (COOP) Team, providesCOOP cadre management notifications, andparticipates for the agency in mandatory national levelclassified and unclassified communications exercises.

2. Emergency Operations Division. The EmergencyOperations Division provides emergency planning andcrisis management support by employing anintegrated system of policy, procedures, personnel,facilities, and communications, ensuring FAA seniorstaff have timely and adequate information to plan,direct, and control all aspects of FAA essentialoperations and functions during emergency situations.The division provides national-level policy guidanceregarding emergency preparedness and response.This is accomplished through the publication ofnational directives, to include FAA Orders 1900.1,1910.1, the Crisis Management Handbook, regulareducational and planning sessions with headquartersemergency planning personnel, participation inexercises simulating emergency conditions, agency-wide emergency operations seminars, and liaisonwith the emergency preparedness and responsecommunity outside the FAA. Additionally, the divisionprepares situation reports (SITREPS) to advisesenior management and emergency planningpersonnel of any significant events that may have anadverse impact on the National Airspace System(NAS). The division also provides support to theWashington Operations Center Complex and theRegional Emergency TransportationCoordinators/Regional Emergency Transportation

Core Business Initiative: CrisisManagement and ContingencyPlanning Function

Representatives (RETCOs/RETREPs). Also, theEmergency Operations Division is responsible forproviding national-level policy guidance regardingFAA Continuity of Operations (COOP) throughpublication of policies and procedures in nationaldirectives, provides COOP cadre management toinclude notifications and training in order to sustainoperations for over 30 days. The division supportsContinuity of Government (COG) activities anddevelops devolution planning. The EmergencyOperations Division facilitates Civil Reserve Air Fleet(CRAF) operations, leads the FAA-wide pandemicinfluenza planning to include interdepartmentalintegration, coordinates with other LOBs regardingMANPADS mitigation planning, manages the CrisisManagement Center (CMC) cadre, issuesGovernment Emergency Telephone Service (GETS)cards and the Wireless Priority Service (WPS). Thenational bi-monthly satellite exercise program is also aresponsibility of the division.

3. National Security and Intelligence CoordinationDivision. The National Security Intelligence andCoordination Division (NSICD) performs functionswhich directly support the national securityresponsibilities of the FAA. This office is given primaryresponsibility by the Administrator's office to serve asthe focal point for all federal, state and local agencyrequests for FAA support to National CommandAuthority (NCA) and counternarcotics missions. TheNSICD approves, coordinates and oversees FAAsupport of overt, covert and clandestinecounterterrorism, counternarcotics andcounterintelligence activities conducted by intelligencecommunity (IC), Department of Defense (DOD) andlaw enforcement (LE) agencies. This office overseasthe construction and certification of SensitiveCompartmented Information Facilities (SCIF) withinthe FAA, as well as the use, storage and handling ofSensitive Compartmented Information, otherintelligence products, and sensitive information overwhich special access controls are exercised.Additionally, the NSICD serves as the liaison fortechnical requests from IC and LE agencies for NASdata, as well as oversees the participation by FAA inthe El Paso Intelligence Center (EPIC) to insure thatFAA (Air Traffic and Flight Standards) supplied data isprovided efficiently and effectively to both LE and ICentities and other approved recipients. The NSICDalso provides SCIF space, logistical and classifiedtelecommunications systems support to theDepartment of Transportation's Office of Intelligence &Security.

4. Command and Control Communications (C3)Division. The C3 division is responsible for planning,purchasing, testing and fielding all contingencycommunications equipment and classified messagingequipment for use by FAA personnel. Additionally, theC3 Division is responsible for C3 COMSEC, includingestablishment of policy, providing training, and

Page 2 of 21 Fiscal Year 2010 ASH Business Plan10/15/09

ensuring continued maintenance on all securetelephone and secure facsimile equipment nation-wide. The C3 division has the overall responsibility forthe national Very High Frequency/FrequencyModulated (VHF/FM) radio network, the transitionfrom the Automatic Digital Network (AUTODIN) to theDefense Message System (DMS), upgrading thecurrent FAA Emergency Satellite Telephone Networkequipment, Command and Control cellulartelephones, the national High Frequency (HF) radionetwork, and the Communications Support Teams(CST), including technical training on these systems.C3 provides technical expertise to FAA's nationalCOOP facilities, and maintains response vehicles forthe Emergency Operations Division.

5. Investigations Division. Title 49, United StatesCode, Sections 106, 40113, 40114, 46101, and 46104confers to the FAA Administrator the administrativeand regulatory investigative functions, powers andduties of the Secretary, Department of Transportation(DOT) as they pertain to aviation safety. ASHperforms this function on behalf of the FAAAdministrator. ASN initiates and conductsinvestigations on FAA employees, contractors, non-employees and certificated airman suspected ofviolating various FAA orders and regulations. Thetypes of investigations include Administrative, Civil,Regulatory and other Special Inquiries. ASN developsand implements policy, as required, for the FAA'sInvestigations Program and serves as theinvestigative authority over agency employeemisconduct and applicable airmen revocations.

Core Activity: AEO - Planning,Preparation and Response for Incidentsof National Significance

Activity Target 1:Perform Emergency Event Coordinator duties asrequired in accordance with FAA Order 1900.1,as amended. Due September 30, 2010

ASH will ensure a national emergency operationsplan and structure exists to support national andregional operations during any Incidents of NationalSignificance (natural or technological disasters,terrorism incidents, wide-spread communicationsoutages, etc.) and to provide national levelmanagement, training, exercises and policyguidance regarding emergency preparedness andresponse.

Activity Target 2:Participate in interagency exercises as scheduledby DOD, DHS, or other governmental agencies.Due September 30, 2010Activity Target 3:Ensure Situation Reports are published duringsignificant events that actually or potentiallyimpact the NAS. Due September 30, 2010

Activity Target 4:Provide overall management and train cadremembers and provide adequate appropriatelycleared staffing for a 24/7 on-call schedule for theDepartment of Transportation's CrisisManagement Center. Begin notification of FAAcadre members within 30 minutes of initialrequest for deployment. Due September 30, 2010

Core Activity: AEO - Crisis Responseand Notification Requirements

Activity Target 1:Poll all LOBs quarterly for changes to notificationrequirements. All requested updates will bemade within 10 calendar days. Due September30, 2010

ASH will conduct a revalidation of the Lines ofBusiness (LOB) crises response and notificationrequirements and will support Agency LOBs inresponding to Incidents of National Significance andmajor events affecting the FAA and the NAS.

Core Activity: AEO - WashingtonOperations Center Complex (WOCC)

Activity Target 1:Conduct a relocation exercise each quarter toimprove response time and ensure continuity ofoperations in the WOCC functions at therelocation facilities. Exercises will include thetransfer of communications to the WOCC back upfacility. One exercise will include the transfer ofcommunications to a Cornerstone RegionalOperations Center (C-ROC) to act as the WOCCback-up facility. Due September 30, 2010

In support of the Administrator, DeputyAdministrator, senior FAA management, and theentire agency, 24 hours a day/seven days per weekand during emergency operations, the WOCC willconduct the following activities during FY 2010:

Activity Target 2:To maintain and improve working relationshipswith counterpart operations centers, WOCCpersonnel will visit at least two operations centersfor familiarization tours; and the WOCC willprovide briefings and tours to representatives oftwo operation centers. A visit or tour will beconducted each quarter. Due September 30,2010Activity Target 3:Conduct "Incident Reviews" with employees100% of the time in response to the mishandlingof an event; complaints from customers; or onunusual events requiring special handling, toensure operational readiness and operationalproficiency are maintained. Due September 30,2010

Page 3 of 21 Fiscal Year 2010 ASH Business Plan10/15/09

Core Activity: AEO - Command andControl Communications

Activity Target 1:Provide National Communications System (NCS)Government Emergency TelecommunicationsService (GETS) cards and training to FAAHeadquarters Senior Executives and to personsidentified with emergency essential functions.Process applications for GETS cards within 2business days of request. Due September 30,2010

ASH will ensure the availability of command andcontrol communications support to the WashingtonOperations Center Complex and regional entities,by planning, procuring, engineering, designing,testing, implementing/fielding command and controlcommunications, including classified messagingequipment, FAA-wide. Funding identified for theseactivities does not include non administrative C3operational budget. In FY10, this amount isestimated to be $___M.

Activity Target 2:Conduct national bi-monthly satellite exercises toensure continued system viability, and arrangefor maintenance and repair as required. DueSeptember 30, 2010Activity Target 3:Continue to maintain the NationalCommunications System (NCS) Wireless PriorityService (WPS) cellular system within FAA.Process applications for WPS within 2 businessdays. Due September 30, 2010Activity Target 4:Participate in secure communications testsmonthly, as scheduled by the Department ofTransportation (DOT). Due September 30, 2010

Core Activity: AEO - Continuity ofOperations

Activity Target 1:Verify and update contact information of COOPcadre members quarterly. Due September 30,2010

ASH will ensure that viable continuity of operationsfacilities and procedures, to includecommunications and logistics, are continuallyavailable and regularly exercised through readinessexercises and training, maintaining continual facilityoperational capability, and COOP Cadremanagement.

Activity Target 2:Conduct quarterly training meetings or exercisesat FAA Headquarters or at the relocation facility.Due September 30, 2010

Core Activity: AEO - CommunicationsSecurity and INFOSEC Management

Activity Target 1:Conduct quarterly national secure facsimileexercises, to ensure continued system viabilityand to identify maintenance issues. DueSeptember 30, 2010

ASH will ensure that Division and supportingpersonnel have adequate access to and training inthe operation of secure communications equipmentby providing national level management, trainingand policy guidance on the FAA-wide secure voiceand facsimile program, and support variousclassified programs.

Regional Inspections and Investigations -- ASH willmaintain a level of service commensurate with 100% ofthe targets of key hazmat and internal security work planactivities. These activities are defined as (1) shipperand repair station inspections, (2) air carrier inspections;(3) outreach efforts; (4) facility security inspections; (5)COMSEC inspections; (6) background investigations;and (7) investigation timelines.

Core Business Target: RegionalInspections and Investigations

Hazardous materials agents assigned to RegionalSecurity Divisions conduct inspections of shippers ofhazardous materials that were identified during routineair carrier inspections; shippers of hazardousmaterials by air that have been prioritized into risk-based categories using information shared with allDOT modal administrations; air carriers and repairstations that ship hazardous materials by air. Internalsecurity services including facility security inspections,assessments and liaison, personnel security suitabilityand background investigations, and administrativeinvestigations are provided to regional managementofficials.

Core Business Initiative: HazardousMaterials, Internal Security andInvestigations RegionalImplementation

Core Activity: Hazardous Materials -Inspection Efforts

Activity Target 1:Conduct shipper and repair station inspections tothe levels identified in the regional HazardousMaterials Workplan. Shipper inspections include

ASH will conduct inspections of:Shippers of Hazardous Materials that wereidentified during routine air carrier inspections;Shippers of hazardous materials by air that havebeen prioritized into risk-based categories usinginformation shared with all DOT modaladministrations;Air carriers that ship hazardous materials; and,Repair stations that ship hazardous materials by air.

Page 4 of 21 Fiscal Year 2010 ASH Business Plan10/15/09

those against prioritized shippers, airfreightforwarders, and indirect air carriers as well asthose identified based on actual cargo that hasbeen accepted and/or transported. Repair stationinspections are planned based on informationcollected from air carriers during acomprehensive inspection. This activity targetshall be measured against the completion of allshipper and repair stations by the target date.However, an evaluation will be conducted at theend of each quarter and compared againstinterim milestones published in the HazardousMaterials Workplan. Due September 30, 2010Activity Target 2:Conduct air carrier station inspections asidentified in the regional Hazardous MaterialsWorkplan. This also includes off-airportinspections where the 375 day file has beenreviewed. This activity target shall be measuredagainst the completion of all air carrier stationinspections by the target date. However, anevaluation will be conducted at the end of eachquarter and compared against interim milestonespublished in the Hazardous Materials Workplan.Due September 30, 2010

Core Activity: Hazardous Materials -Outreach Efforts - Critical Commodities

Activity Target 1:Each Regional Division Manager shall submit anoutreach plan. The plan will include regionaloutreach activities concerning the five nationaland two regional critical commodities. These are:Oxygen generators, flammable gastorches/lighters, all types of batteries, all types ofgasoline-powered devices, fireworks, and at leasttwo regionally selected commodities. DueNovember 15, 2009

ASH will better educate the public, industry, and aircarriers in the safe transportation of HazardousMaterials by air.

Activity Target 2:Conduct outreach activities to shippers of criticalhazmat commodities to the levels identified in theHazardous Materials Workplan and as requiredby the Region Outreach Plan. This activity targetshall be measured against the completion of allair carrier station inspections by the target date.However, an evaluation will be conducted at theend of each quarter and compared againstinterim milestones contained in the OutreachPlan. Due September 30, 2010

Core Activity: Field Operations - FacilitySecurity Management ProgramRegional and Center SSEs will conduct facilitysecurity assessments and inspections at FAAstaffed facilities to determine status of the facilitysecurity management program and compliance withFAA Order 1600.69.

Activity Target 1:Conduct facility security assessments at FAAfacilities as required by the Region/Centerworkplan. This activity target shall be measuredagainst the completion of all facility securityassessments by the target date. However, anevaluation will be conducted at the end of eachquarter and compared against interim milestonespublished in the workplan. Due September 30,2010Activity Target 2:Conduct facility security inspections at FAAfacilities as required by the Region/Centerworkplan. This activity target shall be measuredagainst the completion of all facility securityinspections by the target date. However, anevaluation will be conducted at the end of eachquarter and compared against interim milestonespublished in the workplan. Due September 30,2010

Core Activity: Internal Security -COMSEC and Classified ProgramInspections

Activity Target 1:Conduct COMSEC inspections at FAA facilitiesas required by the Region/Center workplan. Thisactivity target shall be measured against thecompletion of all COMSEC inspections by thetarget date. However, an evaluation will beconducted at the end of each quarter andcompared against interim milestones contained inthe workplan. Due September 30, 2010

AHS Regional Security Agents will conductCommunications Security (COMSEC) inspections atFAA facilities to determine their compliance withFAA Order 1600.8E, and National Security Agency(NSA)/United States Air Force (USAF) directives.AHS Regional Security Agents will also inspect allareas that store classified national securityinformation to determine compliance with FAAOrder 1600.2 and other applicable directives.

Activity Target 2:Conduct classified information inspections at FAAfacilities as required by the Region/Centerworkplan. This activity target shall be measuredagainst the completion of all ClassifiedInformation Program inspections by the targetdate. However, an evaluation will be conducted atthe end of each quarter and compared againstinterim milestones contained in the workplan.Due September 30, 2010

Core Activity: Investigations -Background InvestigationsAHS Regional Security Agents will conductbackground investigations on FAA employees andcontractors using the electronic Questionnaire forInvestigation Processes (e-QIP) for contractorinvestigations (SF 85P), which is the questionnaire

Page 5 of 21 Fiscal Year 2010 ASH Business Plan10/15/09

Activity Target 1:80% of contractor fingerprints will be adjudicatedwithin 10 days of receipt of the fingerprint results.Due September 30, 2010

for public trust positions.

Activity Target 2:Suitability investigations will be adjudicated, onaverage, within 60 days of the closing date of theOPM investigations. Due September 30, 2010Activity Target 3:80% of employee fingerprints will be adjudicatedwithin 10 days of receipt of the fingerprint results.Due September 30, 2010Activity Target 4:80% of employee national security backgroundinvestigations will be adjudicated within 30 daysof the closing date of OPM investigations. DueSeptember 30, 2010

Core Activity: Investigations -Allegations of Misconduct

Activity Target 1:Complete 95% of all Accountability Boardinvestigations within 30 work days, excludingthose prolonged for reasons beyond theinvestigator's control. Due September 30, 2010

ASH will investigate all allegations of misconduct byFAA employees and contractors.

Activity Target 2:Complete 95% of all investigations based uponSafety Hotline complaints and Administrator'sHotline complaints within 30 work days, andcomplete 95% of investigations based uponDepartment of Transportation, Office of InspectorGeneral (DOT/OIG) Hotline complaints withinDOT/OIG's various specified times of 30, 60, or90 days, excluding those prolonged for reasonsbeyond the investigator's control. Due September30, 2010

Core Activity: Investigations - Airmenand Aircraft Investigations

Activity Target 1:Initiate regulatory investigations on 95% of allairmen involved in sale or distribution of illegaldrugs within 30 days of knowledge of a convictionor notification by law enforcement. DueSeptember 30, 2010

ASH will conduct regulatory investigations on allairmen and aircraft involved in illegal drug activity orin threatening National Security by using theNational Airspace System to commit criminal acts.

Activity Target 2:Initiate regulatory investigations on 95% of allaircraft involved in illegal activity within 30 days ofknowledge of that activity. Due September 30,2010

The National Security and Intelligence CoordinationDivision (NSICD) supports US Government NationalSecurity initiatives and operations by reviewing andsending 99% of request packages within specifiedtimeframes; providing FAA Executives a minimum of 50threat briefings annually; providing operational support100% of the time to sensitive national defense andsensitive law enforcement operations requests andconducting quarterly liaison visits; and brokeringinformation from relevant counterintelligence sources tofacilitate security-related decision making withinspecified timeframes.

Core Business Target: NationalSecurity and IntelligenceCoordination

The National Security and Intelligence CoordinationDivision (NSICD) coordinates and supports USGovernment National Security initiatives andoperations as they pertain to the Federal AviationAdministration. NSICD conducts the following actionsto accomplish their mission: NSICD is the FAA focalpoint and responsible agent for providing operationalsupport to sensitive national defense and sensitivelaw enforcement operations. NSICD also works withthe Department of Transportation's Office ofIntelligence, Security and Emergency Response,receives and evaluates intelligence and aviationsecurity event information, provides intelligence andsecurity briefings to FAA senior leadership, lines ofbusiness, program offices, and overseasrepresentatives, brokers information from relevantcounterintelligence sources to facilitate security-related decision making, and provides defensive travelbriefings to FAA Sensitive CompartmentedInformation (SCI) indoctrinated personnel travellingabroad. NSICD is also responsible for theimplementation and management of FAA's SCIProgram, which includes the nomination, adjudication,and indoctrination of personnel for SCI access, andoversight for all construction, certification, andmanagement of SCI facilities within FAA. Lastly,NSICD is responsible for managing and protectingFAA's SCI programs, including networks, circuits,JWICS access, telecommunications and data.

Core Business Initiative: NationalSecurity Support and IntelligenceEvaluations

Core Activity: Sensitive CompartmentedInformation (SCI) Management

Activity Target 1:Review 99% of SCI request packages forsuitability determination within seven businessdays. Due September 30, 2010

Implement and manage FAA's SCI Program,through the nomination, adjudication, andindoctrination of personnel for SCI access.

Page 6 of 21 Fiscal Year 2010 ASH Business Plan10/15/09

Activity Target 2:Send 99% of SCI request packages meetingsuitability determinations to the relevant securityauthority within five business days. DueSeptember 30, 2010

Core Activity: Intelligence Analysis,Coordination and Facilitation

Activity Target 1:Support 100% of Crisis Response Working Group(CRWG) meetings and Crisis Response SteeringGroup (CRSG) meetings with relevant threatintelligence information. Due September 30, 2010

Evaluate intelligence and aviation security eventinformation, provide intelligence and securitybriefings to FAA senior leadership, lines ofbusiness, program offices, and overseasrepresentatives, and provide defensive travelbriefings to FAA Sensitive CompartmentedInformation (SCI) indoctrinated personnel travellingabroad.

Activity Target 2:Provide FAA Executives one threat briefingweekly for 50 weeks of the fiscal year, andprovide additional briefings as requested by FAAExecutives, or as required by developing events.Due September 30, 2010Activity Target 3:Represent FAA in six interagency intelligenceconferences or working groups during the fiscalyear. Due September 30, 2010

Core Activity: Support to SensitiveActivities

Activity Target 1:Respond to 100% of requests for operationalsupport from external customers within fourbusiness days. Due September 30, 2010

Provide operational support to sensitive nationaldefense and sensitive law enforcement operations.

Activity Target 2:Conduct quarterly liaison visits with relevantexternal customers or intelligence communitymembers. Due September 30, 2010

Core Activity: CounterintelligenceSupport

Activity Target 1:Within 60 days of Counterintelligence Supporthire reporting for duty, conduct liaison withCounterintelligence Community membersincluding Department of Homeland Security,Department of Defense agencies, and lawenforcement agencies on a bi-monthly basis. DueSeptember 30, 2010

Broker information from relevant counterintelligencesources to facilitate security-related decisionmaking.

Activity Target 2:Within 120 days of Counterintelligence Supporthire reporting for duty, report quarterly productsand services provided to relevant FAA LOBs.Due September 30, 2010Activity Target 3:Establish a program directive which willencompass reading requirements fromCounterintelligence Community, Department ofHomeland Security and law enforcementcommunity. Due September 30, 2010

Improve the Facility Security Assessment/Inspectionmethodology by reducing the number of new "OtherFindings" by 5%.

Core Business Target: Facilityand Information Security

The Internal Security Function is comprised of theFacility Security Management Program (FSMP), theCommunications Security (COMSEC) Program, theClassified and Sensitive Unclassified Information(C/SUI) Protection Program, the TechnicalSurveillance Countermeasures (TSCM) Program andthe Credentialing Program. The FSMP definessecurity processes and standards applicable to allFAA facilities. The program uses a threat-basedformula that uses the facility's population and criticalityto the National Airspace System (NAS) to assign asecurity level, which in turn defines baseline protectivemeasures at each facility. These protective measuresare then communicated, established, and verifiedthrough a system of assessments, inspections, andaccreditation. The results are sound securitypractices that enhance the security and safety of FAAemployees and assets, and by extension, the air-traveling public. The COMSEC program providessafeguarding procedures for U.S. classifiedcryptographic material and equipment used todispatch and receive classified information oversecure systems. The COMSEC program supports theFAA mission in maintaining a secure informationenvironment for the many sensitive missionstraversing the NAS that support the work of severalgovernment agencies, including the United States AirForce and National Security Agency. The C/SUIProtection program develops standards andprogrammatic controls over all aspects of securingclassified national security and sensitive unclassifiedinformation from inadvertent or unauthorizeddisclosure. It provides agency guidelines on thecreation, storage, accountability, dissemination anddestruction of classified and sensitive unclassifiedinformation. It directly supports the FAA mission byprotecting information that, if released to unauthorizedpersons, could damage the effectiveness and securityof FAA personnel and resources and jeopardize the

Core Business Initiative: Facilityand Information Security

Page 7 of 21 Fiscal Year 2010 ASH Business Plan10/15/09

safety of the traveling public dependent on the NAS.The TSCM program supports the Classified andSensitive Unclassified Information Protection Programby utilizing techniques and measures that detect andneutralize hostile technologies that surreptitiouslyattempt to gain access to this information throughoptical, electro-optical, electromagnetic, fluidic, andacoustic means as well as modification to equipmentor building components for direct transmission ofinformation. The TSCM program employs methodsthat protect telephones and telephone systems,equipment, conference rooms, and office areas thatare used for classified and sensitive informationprocessing. The Credentialing Program provides thenecessary standards and programmatic controls overall aspects of FAA special agent and job specificcredentials.

Core Activity: Facility SecurityManagement Program

Activity Target 1:Conduct three regional program evaluations offacility security programs. Due September 30,2010

ASH will conduct formal reviews of the ServicingSecurity Element's (SSE's) implementation of theirFacility Security Management Program (FSMP).ASH will work with ATO/AJW-2500 (formerly ATO-W) during the process of implementing protectivemeasures at FAA facilities. ASH will identify newsecurity measures for implementation as a result ofconducting trend analyses on FAA reportedincidents.

Activity Target 2:Update the web-based incident reporting systemto reflect results of trend analysis conducted onincidents. Due September 30, 2010Activity Target 3:Conduct trend analysis of incidents in the FacilitySecurity Reporting System (FSRS) database.Prepare recommendations for securityimprovements based on trend analysis andsubmit to ASH senior management for approval.Due June 30, 2010Activity Target 4:Conduct an Internal Security Conference. DueSeptember 30, 2010Activity Target 5:Develop a draft Technical Reference Manual(TRM) for the Servicing Security Elements toassist them in the performance of their jobs. DueAugust 30, 2010Activity Target 6:Develop an overt guard testing training program.Due June 30, 2010Activity Target 7:Conduct a working group comprised of ASHFacility Security Specialists to identify newrequirements and expanded functionality fo the

Internal Security Management InformationSystem ((ISMIS) FSRS Replacement System).Due December 31, 2009

Core Activity: Information Security -COMSEC and Classified/NationalSecurity Information/ControlledUnclassified Information (C/NSI/CUI)

Activity Target 1:Implement an enterprise-wide visitor controlsystem at FAA HQ to monitor access to FAAFacilities and release of information to FAAvisitors (both national and foreign national). DueSeptember 30, 2010

The needed security measures and oversight will beimplemented for the ever growing expansion withinthe FAA of processing C/NSI and CUI information inelectronic form and an electronic keyingenvironment for COMSEC. This also includes therequired certification and accreditation of NationalSecurity Systems.

Activity Target 2:Begin implementation of secure processingrooms at the FAA HQ SSE, and one at each SSEco-located at each ATO service area. DueSeptember 30, 2010Activity Target 3:Develop and begin implementation of therequired education, outreach and complianceauditing/inspection programs which will ensurethe protection of and help prevent/reduce theaccidental release/spillage of C/NSI and CUIinformation. Due September 30, 2010

Core Activity: TSCM Surveys andInspections

Activity Target 1:Conduct 8 TSCM surveys or inspections. DueSeptember 30, 2010

ASH will conduct Technical SurveillanceCountermeasures surveys and inspections todetermine compliance with FAA Order 1600.12.

Activity Target 2:Develop a revision to the FAA TSCM Policy. DueJuly 1, 2010

Core Activity: Credentialing

Activity Target 1:Conduct 2 inspections of current FAACredentialing Programs. Due July 31, 2010

ASH Headquarters will conduct programevaluations and inspections on the implementationof each credentialing program within the FAA todetermine their compliance with FAA Orders1600.25 and 1600.69, DOT Order 1680.3, andspecific credential program orders.

Activity Target 2:Develop a revision to FAA Order 1600.25. DueSeptember 30, 2010

Page 8 of 21 Fiscal Year 2010 ASH Business Plan10/15/09

Initiate and adjudicate background investigations, andreinvestigate employees and contractors for suitabilitybetween 5 days and 30 days depending oncircumstances, through the electronic questionnaireinvestigative process (eQIP), as outlined in PersonnelSecurity activities.

Core Business Target:Personnel Security

The Personnel Security program develops and/orimplements policy, as required, for the FAA'sPersonnel Security Program, Contractor and IndustrialSecurity Program, Foreign Visitor Program, and IDMedia Issuance Program. These programs supportthe agency by initiating and adjudicating all employeeand contractor suitability and security requests. AIN isresponsible for processing all requiredreinvestigations for persons occupying nationalsecurity and high risk positions and for providingnational security indoctrination briefings anddebriefings to employees approved for securityclearances and access to classified information. AINserves as the adjudicative authority over all agencysecurity clearance denials and revocations. AINensures visit requests received for foreign nationalsand other visitors are processed in accordance withcurrent agency policy. AIN serves as the technicaladvisor to the HSPD-12 program manager in leadingthe national PIV card issue deployment. AINdevelops updated policies and guidance on the use ofID media and penalties for loss and theft.

Core Business Initiative: PersonnelSecurity

Core Activity: BackgroundInvestigations

Activity Target 1:80% of contractor fingerprints will be adjudicatedwithin 10 days of receipt of the fingerprint results.Due September 30, 2010

AIN will conduct background investigations on FAAemployees and contractors using the electronicQuestionnaire for Investigation Processing (eQIP).

Activity Target 2:80% of contractor background investigations willbe adjudicated within 30 days of the closing dateof the OPM investigation. Due September 30,2010Activity Target 3:80% of employee fingerprints will be adjudicatedwithin 10 days of receipt of the fingerprint results.Due September 30, 2010Activity Target 4:Employee national security backgroundinvestigations will be adjudicated within 30 daysof the closing date of the OPM investigation. DueSeptember 30, 2010

Activity Target 5:Name checks on all foreign visitors will beinitiated by AIN, on average, within 5 days ofreceipt from API. Due September 30, 2010

Investigate individuals suspected of violating FAA ordersand regulations within 30 days 95% of the time, andconduct 2 program quality assurance reviews.

Core Business Target:Investigations

Title 49, United States Code, Sections 106, 40113,40114, 46101, and 46104 confers to the FAAAdministrator the administrative and regulatoryinvestigative functions, powers and duties of theSecretary, Department of Transportation (DOT) asthey pertain to aviation safety. ASH performs thisfunction on behalf of the FAA Administrator. SSEsinitiate and conduct investigations on FAA employees,contractors, non-employees and certificated airmansuspected of violating various FAA orders andregulations. The types of investigations includeAdministrative, Civil, Regulatory and other SpecialInquiries. AEO develops and implements policy, asrequired, for the FAA's Investigations Program andserves as the investigative authority over agencyemployee misconduct and applicable airmenrevocations. The Law Enforcement AssistanceProgram (LEAP consists of investigative andoperational activities which support Federal, State,and local agencies by denying access to the NationalAirspace System to any person(s) who would threatennational security by committing criminal acts. Thesupport provided involves taking regulatoryenforcement actions and, as appropriate, providingaviation related support to law enforcement agencies.Agents also provide training to law enforcementofficers in aviation smuggling techniques and FAAresources. The Driving Under the Influence andDriving While Intoxicated (DUI/DWI) InvestigationsProgram ensures the safety and security in aircommerce and, if necessary, removes from navigableairspace those pilots who demonstrate anunwillingness to comply with certain safetyregulations.

Core Business Initiative:Investigations

Core Activity: Allegations ofMisconduct

Activity Target 1:Complete 95% of investigations based uponDepartment of Transportation, Office of InspectorGeneral Hotline (DOT/OIG) complaints withinDOT/OIG's various specified times of 30, 60, or90 days, excluding those prolonged for reasonsbeyond the investigator's control. Due September30, 2010

ASH will investigate all allegations of misconduct byFAA employees and contractors.

Page 9 of 21 Fiscal Year 2010 ASH Business Plan10/15/09

Activity Target 2:95% of Accountability Board investigations within30 work days, excluding those prolonged forreasons beyond the investigator's control. DueSeptember 30, 2010Activity Target 3:Complete 95% of investigations based uponSafety Hotline complaints and Administrator'sHotline complaints within 30 work days, excludingthose prolonged for reasons beyond theinvestigator's control. Due September 30, 2010

Core Activity: Quality AssuranceReviews

Activity Target 1:Conduct two regional investigations programquality assurance reviews. Due September 30,2010

ASH will conduct investigations program qualityassurance reviews.

Issue PIV cards to at least 80% of the federalemployees and a substantial number of eligiblecontractor employees at 80% of the locations involvedby end of second quarter; issue cards to more than 80%of the remaining federal employees and to a substantialnumber of contractor employees at 80% or more of theduty stations in AEA, ANE, ASO, ATC by the end ofthird quarter. Issue cards to more than 80% of the FAAfederal employees and substantial number of contractoremployees by the end of fourth quarter.

Core Business Target: CommonIdentification Standard (CIS)

The Common Identification Standard (CIS) Programcovers the spectrum of activities to comply with andtake maximum advantage of the new federal CIS. ByPresidential Order (HSPD-12) the federal governmentis adopting a government-wide CIS. Implementingguidance from OMB and technical specificationsissued by the National Institute of Standards andTechnology (NIST), pursuant to the Presidential Orderrequire both the creation of new technical systemsand changes in business practice for all elements ofthe FAA with respect to: (1) Verifying employee andcontractor identity; (2) Increased and standardizedcriteria for background investigations on all employeesand contractor personnel; (3) A significantly greateremphasis on maintaining the integrity of the initialemployee identification and investigation process,requiring additional information being provided by theaffected individuals and more direct contact betweencontractors and employees, on one hand, andprofessional security specialists on the other; (4)Development and deployment of a system to createand deliver new standardized identification media

Core Business Initiative: CommonIdentification Standard (CIS)Program

(cards) embodying advanced "smart card" technologyto recipients; (5) Provisioning of these cards to makepossible improvements in protection of personalprivacy information, more effective and efficientphysical facility security and data system cybersecurity, and potentially to achieve cost savingsthrough automation of security control processes andefficiency gains through improved ability to use thenew cards to allow the authorized cardholders to moreeasily access required data systems while at thesame time restricting access to the facilities andsystems to which the individuals require access.

Core Activity: ID Media

Activity Target 1:Complete issuance of new PIV cards to 90% ofeligible federal employee and 80% of contractorcard holders at ten of the 12 enrollment andissuance sites under Phase I and II (i.e. allRegional Offices, Aeronautical Center, TechnicalCenter and Headquarters FAA). Due December31, 2009

ASH shall continue to deploy the new HSPD-12Personal Identity Verification (PIV) Card systemagency-wide. ASH shall provide guidance andoversight on the issuance and appropriate use of allFAA credentials to include the PIV card.

Activity Target 2:Conduct remote issuance and mobile enrollmentat small and geographically separated sites andproduce recommendation(s) for future servicemodel. Due March 31, 2010Activity Target 3:Initiate PIV service delivery to entire FAAworkforce. Due September 30, 2010

Ensure that hazmat priorities are current and relevant byconducting a quarterly evaluation of the Strategic Planwith PHMSA. Adjust plan within 90 days when thequarterly evaluation calls for changes.

Core Business Target: SafeTransport of HazardousMaterials

The Office of Hazardous Materials (ADG) has threemajor programs. a. Technical Leadership and NationalGuidance for Inspectional Workforce. The Office ofHazardous Materials (ADG) directs the operationaland regulatory work of subordinate headquarters staff.ADG develops the hazardous materials strategicgoals and annual work plan targets for the nation andserves as the principal technical liaison to theinspectional workforce. ADG also serves as theprincipal hazardous materials advisor to the Securityand Hazardous Materials Training Staff. b. HazardousMaterials Support and Coordination. ADG providessupport or coordination in the following areas:

Core Business Initiative: SafeTransport of Hazardous Materials

Page 10 of 21 Fiscal Year 2010 ASH Business Plan10/15/09

Certification, review, and approval of air carrierhazardous materials training programs; Certification,review, and approval of air carrier hazardousmaterials and operations manuals; Coordination ofnational surveillance efforts of airlines, shippers andaviation repair stations; Coordination and review ofairport emergency plans; Support of NationalTransportation Safety Board investigations andcoordination of recommendations; Coordination oflegal enforcement activities having national impact;Coordination of press release information; and, -Coordination of international dangerous goods issuesaffecting aviation. In addition, ADG provides supportto FAA's Office of Flight Standards, Office of AirportSafety and Standards, Office of Chief Counsel, Officeof International Aviation, the Office of AccidentInvestigations, the Department of Transportation, andthe National Transportation Safety Board in a numberof areas involving the safe transportation of hazardousmaterials. c. Regulatory and Policy Development. TheOffice of Hazardous Materials serves as the principalaviation policy advisor to the DOT Pipeline andHazardous Materials Safety Administration (PHMSA)and is responsible for managing FAA's hazmatrulemaking efforts. ADG represents FAA as anadvisor to the US delegation to the International CivilAviation Organization (ICAO) Dangerous GoodsPanel of experts. ADG also serves as the principalliaison to the International Air Transport Association'sDangerous Goods Committee. This office ensurespolicy coordination regarding air transportation issueswith the United States Postal Service and theDepartment of Defense and serves as a member ofthe Michigan State University's Packaging Consortiumand coordinates policy guidance with the AmericanSociety of Testing Materials.

Core Activity: Automated Outreach

Activity Target 1:Monitor regional compliance with goal ofresponding to 80% of actionable airlinepassenger hazmat discrepancy reports throughautomated outreach. Due September 30, 2010

Airlines provide to ADG information (actionableairline passenger hazmat discrepancy reports)about hazardous materials found in passengerbaggage. ADG then generates letters to thesepassengers found with non-critical (leastdangerous) hazmat informing and educating themabout the materials found.

Core Activity: Coordination withTransportation Security Administration(TSA)

Activity Target 1:Coordinate the approval of the MOA/MOUdeveloped with TSA in FY2009 that outlines

ADG will build a stronger relationship with the TSAto assist in gathering data for trend analysis in orderto target our activities for inspections, outreach andenforcement.

procedures and processes for informationexchange needs. Due March 31, 2010Activity Target 2:Continue collaboration with TSA throughout theyear in order to develop coordinated safety effortsand meet procedures established in theMOA/MOU. Due September 30, 2010Activity Target 3:Evaluate the mechanism for implementation ofenhanced procedures for dealing with undeclaredhazardous materials offered by passengers atairport screening checkpoints. Due December 31,2009

Core Activity: National Inspection andInvestigations Manual (NI2M)

Activity Target 1:Monitor the use of the NI2M on a quarterly basisto ensure consistency in conducting inspectionsand investigations. Due September 30, 2010

ADG will ensure the completion, currency,dissemination and use of the NI2M.

Activity Target 2:Work with the Training and Workforce Resourcesstaff to deliver refresher training, if necessary, onthe NI2M thus providing specific operationalguidance to all hazardous materials field agents.Due June 30, 2010Activity Target 3:Evaluate both documents twice a year andprovide updates as necessary. Due September30, 2010

Core Activity: Trend Analyses

Activity Target 1:Evaluate enforcement and inspection platformsquarterly and adjust as necessary, to ensure theneeded information is obtainable, and to makebetter use of information that is developed. DueSeptember 30, 2010

ADG will conduct qualitative and quantitativeanalyses of all hazardous materials beingtransported by air. This will enhance ADG's trendanalyses in identifying risk based commodities.Information developed will provide a baselineprediction for the identification of safety risks andenable more precise targeted enforcementinitiatives.

Activity Target 2:Use developed trend analyses to prioritizehazardous material field activities quarterly. DueSeptember 30, 2010

Core Activity: Public ServiceAnnouncementsADG will continue to pursue distribution ofdeveloped public service announcements for use atairports identifying the safety ramifications oftransporting undeclared hazardous materials in air

Page 11 of 21 Fiscal Year 2010 ASH Business Plan10/15/09

Activity Target 1:Continue to pursue previously developed publicservice announcements' use at all domesticairports, and update as necessary on a bi-annualbasis. Due September 1, 2010

transportation.

Activity Target 2:Continue to pursue previously developed signageplacement at strategic locations at all domesticairports, and update as necessary on a bi-annualbasis. Due September 1, 2010

Core Activity: National/InternationalOutreach Program

Activity Target 1:Conduct on a multimodal basis, a coordinatedoutreach activity to educate the public, industry,and air carriers in the safe transportation ofhazardous materials. Due March 31, 2010

ADG will develop and initiate an enhancedNational/International Outreach Program plan inorder to increase awareness of the dangers ofhazardous materials transported on domestic andinternational passenger and cargo aircraft. The planwill include outreach activities concerning criticalcommodities (Oxygen generators, flammable gastorches/lighters, gasoline-powered devices,fireworks, lithium batteries) and other selected highprofile commodities.

Activity Target 2:Conduct on a multimodal basis, a coordinatedoutreach activity to educate the public, industry,and air carriers in the safe transportation ofhazardous materials. Due September 30, 2010Activity Target 3:Provide five (5) National or International Outreachpresentations to aviation industry associations.Due September 30, 2010Activity Target 4:Through the National Workplan, ensure theinitiation and coordination of a Special EmphasisInspections (SEI) focusing on Lithium Batteries.This multimodal SEI will feature inspections,outreach and enforcement on a national scale.Due June 30, 2010

International LeadershipAs stated in the FAA Flight Plan, the FAA is the largestcontributor of technical and financial support to theInternational Civil Aviation Organization (ICAO), whichrepresents 188 of the world's civil aviation authorities. TheOffice of Security and Hazardous Materials is committed toproviding intellectual support in the form of technicalexpertise in the areas of safety and security. We arecommitted to working with our international partners tofocus our experience, expertise, and new technology inorder to create a safer and more secure global airspace.

A description of the activities and performance targetsASH will complete in support of the FAA Flight Plan goal ofInternational Leadership is listed below.

Flight Plan Target: CAST SafetyEnhancementsWork with the Chinese aviation authorities and industryto adopt 27 proven Commercial Aviation Safety Team(CAST) safety enhancements by FY 2011. Thissupports China's efforts to reduce commercial fatalaccidents to a rate of 0.030 fatal accidents per 100,000departures by FY 2012. FY 2010 Target: 4 CASTSafety Enhancements

Identify and provide technical assistance and trainingand strengthen mutually beneficial partnerships withkey civil aviation authorities in Africa, the Americas,Asia, Europe and the Middle East.

Strategic Initiative: Aviation SafetyOversight Relationships

Strategic Activity: InternationalDangerous Goods courses

Activity Target 1:Deliver international dangerous goods courseswhen requested by API and there is sufficientstudent enrollment 3 months prior to coursedelivery date. Due September 30, 2010

ASH will deliver international dangerous goodscourses on regulations of shipping hazardousmaterials by air transportation.

ADG will continue to assess its success in meetingsupport for the Hazardous Materials-relatedInternational Committees, Panels and Programs bysupporting DOT's participation in two United Nations(UN) subcommittee meetings; serving as aviationadvisor to one ICAO dangerous goods panel; andsupporting the Universal Safety Oversight Program(USOAP) as and when requested by the InternationalCivil Aviation Organization (ICAO).

Core Business Target: Supportfor International Committees,Panels and Programs onHazardous Materials

Support for International Committees and Panels

Core Business Initiative: Support forInternational Committees, Panelsand Programs

Core Activity: International Committees,Panels and ProgramsADG will support DOT's participation in two UnitedNations (UN) subcommittee meetings on thetransportation of dangerous goods, will serve asaviation advisor to one ICAO dangerous goodspanel, and will support the Universal Safety

Page 12 of 21 Fiscal Year 2010 ASH Business Plan10/15/09

Activity Target 1:Participate in two UN subcommittee meetings onthe transportation of dangerous goods. DueSeptember 30, 2010

Oversight Program (USOAP) as and whenrequested by the International Civil AviationOrganization (ICAO).

Activity Target 2:Participate in at least one ICAO dangerous goodspanel. Due September 30, 2010Activity Target 3:Support USOAP as and when requested byICAO. Due September 30, 2010

Core Activity: International CivilAviation Organization (ICAO) - Annex 6

Activity Target 1:Conduct the first of 3 phases of the Annex 6study based on the FY2009 procedures andguidelines. Due September 30, 2010

ADG will initiate an Annex 6 operationalspecification study. Annex 6 states that theoperation of aircraft engaged in international airtransport must be as standardized as possible toensure the highest levels of safety and efficiency.

Organizational ExcellenceTo achieve the ambitious goals outlined in the Flight Plan,the FAA must become nothing less than a world-classorganization. This will require strong leadership,performance-based management, and improved fiscalresponsibility.

As we accomplish our mission, providing quality servicethat is responsive to our customers within the FAA andindustry will be our standard. Our organization willcontinue to operate with integrity while being mission-focused, high-performing, and extremely dedicated. Weare proud to be a part of the FAA family and will strive toensure the FAA and the ASH organization are successfulin accomplishing its mission.

The Security and Hazardous Materials organization is thelead for the Security Measures initiative under theOrganizational Excellence goal. We also have supportingroles for several other initiatives. All of these aredescribed below.

Flight Plan Target: Leadershipand Accountability(Objective) Make the organization more effective withstronger leadership, a results-oriented, highperformance workforce, and a culture of accountability.

Develop and implement Corporate and LOB/SOOrganizational Excellence Action Plans that address

Strategic Initiative: OrganizationalExcellence Action Plans

employee feedback and engagement, and improveorganizational effectiveness, accountability andperformance.

Strategic Activity: ASH OrganizationalExcellence Plan

Activity Target 1:LOB/SOs will report to their workforce on theimplementation status and accomplishments oftheir OE Action Plans. Due December 30, 2009

Monitor and assess implementation of FAACorporate and LOB/SO Organizational Excellence(OE) Action Plans to address employee feedbackand engagement, and improve organizationaleffectiveness, accountability and performance.

Activity Target 2:LOB/SOs will monitor the implementation of theirOE Action Plans and use identified methods tocontinue soliciting feedback from their employeeson organizational/workforce issues to improveplanned or ongoing actions. Due March 30, 2010Activity Target 3:LOB/SOs will implement any necessary changesin their OE Action Plans based on employeefeedback and/or changes in organizationaldirection or requirements, and communicatethose changes to employees and continueimplementation. Due June 30, 2010Activity Target 4:LOB/SOs will document their accomplishmentsand lessons learned in implementing their OEAction Plans and communicate results to theiremployees. Due September 30, 2010

Each LOB/SO will track and report quarterly on theircompliance with corporate leadership developmentpolicies and initiatives.

Strategic Initiative: LeadershipDevelopment

Strategic Activity: ASH LeadershipDevelopment Compliance

Activity Target 1:Report quarterly on steps taken to improve orsustain timely completion of probationary trainingand certification. Due September 30, 2010

Each FAA organization will track and reportquarterly in pbviews on their compliance withleadership development policies and initiatives inthe areas of mandatory probationary managertraining, probationary manager certification,Continuing Management Education, and stepstaken to improve compliance rates.

Activity Target 2:Report quarterly on steps taken to meetContinuing Management Education requirementsfor incumbent managers. Due September 30,2010

Page 13 of 21 Fiscal Year 2010 ASH Business Plan10/15/09

Each FAA organization will track and report quarterlyon LOB/SO actions to foster a workplace free ofharassment, reprisal, and retaliation.

Strategic Initiative: Harassment,Reprisal, and Retaliation FreeWorkplace

Strategic Activity: ASH Harassment- andRetaliation-Free Workplace Training

Activity Target 1:Report quarterly the number of new managerswho have completed Frontline Managers training,eLMS Course #FAA30200099 - FrontlineManagers Course - Phase 1. Due September 30,2010

Each FAA organization will track and reportquarterly in pbviews on their compliance with thisinitiative in terms of the numbers of people trained.

Activity Target 2:Report quarterly the number of managers whohave completed eLMS course #FAA30200134 -Accountability Board Training for FAA Managers.Due September 30, 2010Activity Target 3:Report quarterly the number of employees whohave completed in-person training sessionsprovided by the Accountability Board or byAccountability Board Human Resources Points ofContact. (eLMS Course #FAA30200174 -Supervisory Skills Training, Accountability BoardTraining for FAA Managers; or eLMS Course#FAA30200177 - Instructor-Led AccountabilityBoard Training for All Employees. DueSeptember 30, 2010Activity Target 4:Report quarterly the number of employees whohave completed any other training sessions thataddressed harassment, retaliation, or reprisal inthe workplace. (Your training coordinator shouldenter this data into eLMS with the appropriatecourse number. Or if a course does not exist,have an eLMS Item created.) Due September 30,2010

Each FAA organization will track and report quarterlyon actions taken in support of the Secretary ofTransportation's fiscal year goal that 3 percent of allnew hires are individuals with targeted (severe)disabilities.

Strategic Initiative: New Hires withTargeted Disabilities

Strategic Activity: ASH actions insupport of DOT FY goal that 3% of allnew hires are individuals with targeteddisabilitiesASH will track and report quarterly on actions takento support the Secretary of Transportation's fiscalyear goal that 3 percent of all new hires are

Activity Target 1:ASH will provide to ACR a standard quarterlyreport outlining actions taken to increase theirworkforce percentage of individuals with targeteddisabilities. Due September 30, 2010

individuals with targeted (severe) disabilities.

Flight Plan Target: Cost ControlOrganizations throughout the agency will continue toimplement cost efficiency initiatives such as:10-15 percent savings for strategic sourcing for selectedproducts and services;By the end of FY 2009, reduce leased space forAutomated Flight Service Stations from approximately510,000 square feet to approximately 150,000 squarefeet;Annual reduction of $15 million in InformationTechnology operating costs;By FY 2010, reduce overhead costs 5-10 percentthrough automation of invoice processing. FY 2010Target: 90% of targeted savings

Each FAA organization will develop, track, and reportquarterly on a comprehensive measure of itsoperating efficiency or financial performance. Thesemeasures will include: Cost per flight controlled,Research, Engineering, and Development (RE&D)Management Staff Efficiency Measure, GrantAdministration Efficiency Measure, Direct labor costsof certification of foreign and domestic repair stations,Direct labor costs of surveillance of foreign anddomestic repair stations.

Strategic Initiative: Productivity andFinancial Metrics

Strategic Activity: ASH EfficiencyMeasure: Time to Process EnforcementInvestigation Reports

Activity Target 1:Continue to report quarterly to ABA the averagetime to process EIRs for all regions combined.Due January 31, 2010

ASH will continue to track and monitor acomprehensive efficiency measure that is indicativeof ASH mission requirements. The efficiencymeasure for FY10 includes the average number ofdays to process Enforcement Investigation Reports(EIR).Target: 90 days.Those regions that failed to meet the 90-day goal inFY2009 will improve their efficiency by 10 percentor to the 90-day goal, as applicable.

Activity Target 2:Continue to report quarterly to ABA the averagetime to process EIRs for all regions combined.Due April 30, 2010Activity Target 3:Continue to report quarterly to ABA the averagetime to process EIRs for all regions combined.

Page 14 of 21 Fiscal Year 2010 ASH Business Plan10/15/09

Due July 31, 2010Activity Target 4:Report FY09 4th quarter results to ABA theaverage time to process EIRs for all regionscombined. Due October 31, 2009Activity Target 5:Provide updated FY 2011 template for review andapproval in time to be included in the FY 2011Business Plan. Due September 30, 2010Activity Target 6:Combined efficiency measures must account for75% of operating resources. Any additionalmeasures needed to meet the 75% requirementmust be approved by the end of the calendaryear. Due December 31, 2009

Strategic Activity: ASH EfficiencyMeasure: Completion of Inspection andInvestigation Activities

Activity Target 1:Report FY 2009 4th quarter results to ABA for thecompletion of inspections and investigations. DueOctober 31, 2009

ASH will report to ABA quarterly on the percentageof inspections and investigations completed withinthe required timeframes as identified by RegionalWorkplans. These activities include hazmatinspections, facility inspections, communicationssecurity inspections and tracked investigations. FY2010 target: 90%

Activity Target 2:Report FY 2009 1st quarter results to ABA for thecompletion of inspections and investigations. DueFebruary 28, 2010Activity Target 3:Report FY 2009 2nd quarter results to ABA forthe completion of inspections and investigations.Due April 30, 2010Activity Target 4:Report FY 2009 3rd quarter results to ABA for thecompletion of inspections and investigations. DueJuly 31, 2010Activity Target 5:Provide updated FY 2011 measure template forreview and approval, allowing sufficient time to beincluded in the FY 2011 Business Plan. DueSeptember 30, 2010Activity Target 6:Combined efficiency measures must account for75% of operating resources. Any additionalmeasures needed to meet the 75% requirementmust be approved by the end of the calendaryear. Due December 31, 2009

Strategic Initiative: ReduceInformation Technology OperatingCosts

Achieve an annual reduction of $15 million inInformation Technology operating costs.

Strategic Activity: AutomatedApplication of ID Cards

Activity Target 1:Achieve 90% projected year end savings of$399,488. Due September 30, 2010

ASH established the ID Media Program forenrollment and issuance of the new PersonalIdentity Verification (PIV) cards for FAA employees(federal and contractors). This new programeliminates data entry, scanning, storage, anddestruction of paper copies of the ID application.Also, the PIV card saves time in the ID issuanceprocess.

Flight Plan Target: InformationSecurity ProgramAchieve zero cyber security events that disable orsignificantly degrade FAA services. FY 2010 Target: 0

Enable enterprise-wide conformance to informationtechnology enterprise architecture.

Strategic Initiative: EnterpriseArchitecture Conformance

Strategic Activity: Enable Enterprise-wide Conformance to IT EnterpriseArchitecture.

Activity Target 1:ASH will update its infrastructure and applicationinventory. Due June 30, 2010

ASH will work with AIO to update the infrastructureand application inventories and coordinate technicalstandards for non-NAS hardware and softwarewhere there are commonrequirements.

Protect FAA-sensitive and individual privacyinformation from unauthorized disclosure.

Strategic Initiative: UnauthorizedDisclosure

Strategic Activity: Stabilize InformationAssurance/Privacy Operations.

Activity Target 1:Complete PTAs and PIAs as required by the C&Aanniversary date. Due September 30, 2010

Protect FAA-sensitive and individual privacyinformation from unauthorized disclosure.

Activity Target 2:Participate in the Privacy Compliance activitiesand implement compliance review checklists.Due June 30, 2010Activity Target 3:Coordinate and implement agency privacyguidance. Due September 30, 2010

Page 15 of 21 Fiscal Year 2010 ASH Business Plan10/15/09

Activity Target 4:Identify key personnel with significant privacyresponsibilities by November 30, 2009, andensure privacy training is taken and documentedfor FISMA compliance. Due May 31, 2010Activity Target 5:Report privacy breaches (as defined in FAApolicy and guidelines) to the CSMC as theyoccur. Due September 30, 2010Activity Target 6:Work with Records Officer to schedule allelectronic records in accordance with the EGOVAct Section 207. Due September 30, 2010

Strategic Activity: Privacy InformationGovernance.

Activity Target 1:Maintain and monitor physical security standardscommensurate with privacy information risks.Due September 30, 2010

Implement Converged Physical Security & PrivacyInformation Governance.

Activity Target 2:Participate in one privacy compliance review toensure planned policy and guidance documentsare completed and comply with FAA PrivacyPolicy. Due September 30, 2010

Flight Plan Target: CustomerSatisfactionMaintain the annual average of FAA surveys on theAmerican Customer Satisfaction Index at or above theaverage Federal Regulatory Agency score. FY 2010Target: Government Regulatory Average

Standardize FAA websites making them more usefulfor exchanging information and conducting business.

Strategic Initiative: Standardize FAAWebsites

Strategic Activity: ASH Standardizationof Web Site

Activity Target 1:Update ASH web strategies and action plans inwriting to the FAA Web Manager and brief FAAWeb Council on ASH office plans. Due January29, 2010

Standardize FAA websites making it more useful forexchanging information and conducting businessand make FAAs websites for the public andemployees useful and have a consistent look andnavigation.

Activity Target 2:Submit ASH Web progress report to the FAAWeb Managers. Due March 31, 2010Activity Target 3:Submit ASH Web progress report to the FAAWeb Managers. Due June 30, 2010

Activity Target 4:Certify to the Administrator on or beforeSeptember 30, 2010 that 95 percent or more ofASH web pages comply with FAA web standards,policies, and requirements including thoseoutlined in the FY-2010 Web Strategy and ActionPlan. Due September 30, 2010

Flight Plan Target: OPM HiringStandardBy FY 2010, 80 percent of FAA external hires will befilled within OPM's 45-day standard for government-wide hiring. FY 2010 Target 80%

In external recruitment efforts, implement corporatestrategies that expand the applicant pool to ensureequal opportunity to all applicants and result inattracting high quality candidates to the FAA.

Strategic Initiative: ExternalRecruiting

Strategic Activity: ASH Mission-CriticalHiring

Activity Target 1:Update and submit mission-critical external hiringgoals/plans for FY10, and FY11 hiringprojections. Due February 28, 2010

Identify mission-critical external hires.

Flight Plan Target: ReduceWorkplace InjuriesReduce the total workplace injury and illness case rateto no more than 2.44 per 100 employees by the end ofFY 2011, and maintain through FY 2013. FY 2010Target: 2.52 per 100 employees

Reduce workplace injuries through employee safetyprogram evaluations and OSHA Voluntary ProtectionProgram measures.

Strategic Initiative: ReduceWorkplace Injuries

Strategic Activity: ASH Employee Safety

Activity Target 1:ASH will continue to focus on safety training,accountability for unsafe actions, unsatisfactorycondition report (UCR), timely reporting of

ASH managers will continue to distribute anddiscuss with employees information prepared andprovided by AHP concerning the importance ofsafety in the workplace. To the degree that theinformation provided by AHP mentions opportunitiesfor safety training, managers will continue toencourage employees to participate. To the degreethat the information provided by AHP mentions theneed to report all mishaps in the SafetyManagement Information System (SMIS),managers will fully acquaint themselves with therequirements of SMIS and take future actioncommensurate with those requirements.

Page 16 of 21 Fiscal Year 2010 ASH Business Plan10/15/09

mishaps/incidents in SMIS, timely and accuratefiling of injury and illness claim forms to HR, andworkplace safety inspections. Due July 31, 2010Activity Target 2:ASH managers and employees will completeassigned safety tasks within 60 days of ASHreceipt of AHL notification. Due September 30,2010Activity Target 3:ASH OSH POC will participate in at least oneOSHECCOM workgroup and one UCR meeting.Due September 30, 2010

Flight Plan Target: ATCPositions Workforce PlanMaintain the air traffic controller workforce at, or up to 2percent above, the projected annual totals in the AirTraffic Controller Workforce Plan. FY 2010 Target: ator up to 2% above annual target

Implement the hiring, training, staffing analysis, andmanagement recommendations of the Air TrafficController Workforce Plan to support FAA's safetymission and meet external stakeholder requirements.Update and report annually on agency progress.

Strategic Initiative: ATC WorkforcePlan

Strategic Activity: ASH Support of ATCWorkforce Plan

Activity Target 1:Initiate background investigations on ATCSapplicants 90% of the time within 10 workingdays of submission by applicant of E-QIP andother pertinent information. Due September 30,2010

Initiate suitability and background investigations asrequired.

Flight Plan Target: Continuity ofOperationsExceed Federal Emergency Management Agencycontinuity readiness levels by 5 percent. FY 2010Target: exceed FEMA targets by 5%

Provide our employees with a secure environment byidentifying measures to protect our employees, ourfacilities, and our critical infrastructure.

Strategic Initiative: SecurityMeasures

Strategic Activity: Facility SecurityAccreditation

Activity Target 1:Validate the implementation of security measures

ASH will issue accreditation certification to facilitiesthat have met the security requirements containedin FAA Order 1600.69, Facility ManagementProgram.

at FAA facilities and accredit 90% of facilitieswithin 15 days of all findings being verified asclosed. Due September 30, 2010

Develop web-based emergency operation information-sharing tools that create a common operationalpicture and support effective decision making.

The 9/11 attacks, recent natural disasters (e.g.,Hurricane Katrina in 2005), and security events inNational Airspace System (NAS) have providedlessons-learned that continue to drive the FAA'sefforts to further strengthen its crisis managementcapabilities. Core areas of focus include:

- The need to develop and implement improvedautomation tools, which support enhanced real-timeoperational coordination; real-time, integrated use ofsensor and flight data, as well as other pertinent datasources; and establishment of a common operationalpicture useful for crisis management.

- The need to develop and implement improvedautomation tools, which leverage web portal andenterprise caliber database technologies, to enableimproved sharing and analysis of data needed tomaintain situational awareness and support effective,rapid decision-making.

Strategic Initiative: Web-BasedEmergency Operations Tools

Strategic Activity: ASH Efforts toDevelop Emergency OperationInformation Sharing

Activity Target 1:Fully integrate the remaining ROC's and providereal time data sharing and backup after receivingtechnical and logistical enhancements funded byARC. Due September 30, 2010

ASH will continue to integrate the ARC (RegionalOperations Centers (ROC's)) and ATO (NASstatus, ATO situation room reporting from theservice centers and COOP requirements into theEmergency Operations Network (EON). EON willcontinue to create and build backup sites andplatforms in order for EON to survive during a majordisaster, threat or security activity.

Activity Target 2:Design, implement and test failsafe sites andequipment to determine the impact to EON duringvarious types of outages. Due September 30,2010Activity Target 3:Design and integrate the capability to have realtime reporting of NAS equipment status incollaboration with ATO-W. Due September 30,2010

Page 17 of 21 Fiscal Year 2010 ASH Business Plan10/15/09

Activity Target 4:Develop a beta EON dashboard system toprovide integrated communications during acrisis. Due September 30, 2010

Improve the use and functionality of operational andcorporate crises response structures such asspecialized hurricane coordination cells and continuityof operations programs.

Strategic Initiative: ImproveOperational and Corporate CrisisResponse Structures

Strategic Activity: ASH Improvement ofCorporate Crisis Response Structures

Activity Target 1:ASH will monitor the FAA's corporate crisisresponse structure and continuity of operationsprogram during the 2009-2010 H1N1 pandemicand update FAA pandemic plans to reflect bestpractices/lessons learned. Due September 30,2010

ASH will demonstrate FAA's ability to performessential functions during an influenza pandemic.

Integrate agency-wide emergency operations andcrisis management by improving information flowamong FAA Lines of Business and staff offices.

Strategic Initiative: EmergencyOperations and Crisis ManagementIntegration

Strategic Activity: EmergencyOperations Conferences and Exercises

Activity Target 1:Conduct semiannual HQ/Regional exercises. DueSeptember 30, 2010

ASH will begin annual emergency operationsconferences with emergency planners andCROC/ROC managers, and begin a semiannualRegional Exercise Program.

Activity Target 2:Conduct an annual emergency operationsconference with emergency planners andCROC/ROC managers. Due September 30, 2010

ASH will ensure that skilled staff are available to supportthe mission by updating organizational workforce plansfor mission critical positions by May 27, 2010, inaccordance with the schedule established by AHR.

Core Business Target: ASHHuman Resources Management

The Training and Workforce Resources Staff provideshuman resource guidance and procedures specific toSecurity and Hazardous Materials. Our goal is to

Core Business Initiative: ASHHuman Resources ManagementFunction

ensure that the right people are in the right place atthe right time with the skill and knowledge to supportthe ASH mission. The staff oversees implementationof human resources policies within ASH, conductsworkforce planning, and consults on reorganizations,recruitment and selection, pay administration,performance management, awards and recognition,conduct and discipline issues, work schedules, andleave management. The staff is also liaison with theOffice of Civil Rights (ACR) for implementation ofmodel EEO programs within ASH.

Core Activity: Human ResourceManagement - Workforce Plans

Activity Target 1:Complete the assessment of the FY 2010 plan.Due June 30, 2010

ASH will assess and update organization workforceplans for mission critical positions in accordancewith the schedule established by AHR.

Activity Target 2:Update organizational workforce plans formission critical positions. Due May 27, 2010Activity Target 3:Update policy guidance on Superior ContributionIncrease (SCI) and Organizational SuperiorIncrease (OSI) as needed to reflect corporatechanges. Due September 30, 2010Activity Target 4:Complete, review and update ASH jobdocumentation as necessary. Due September 30,2010

ASH will ensure that skilled staff are available to supportthe mission by informing the ASH workforce ofprofessional development training opportunities as theybecome available.

Core Business Target: ASHTraining

The Training and Workforce Resources Staff isresponsible for providing training and development forthe ASH workforce, including technical training,professional development, and managementdevelopment to supplement FAA corporate trainingprograms from managers. Our goal is to ensure thatthe right people are in the right place at the right timewith the skill and knowledge to support the ASHmission. The staff designs, develops, and deliverstechnical training, provides access to trainingopportunities from non-FAA sources, manages theASH training budget, and is responsible formanagement development programs within ASH.ASH-20 also provides training to all FAA organizationsin Communications Security (COMSEC) and SecureTelephone Equipment (STE). Technical coursesmaintained for ASH employees include personnelsecurity, facility security, investigations, and regulation

Core Business Initiative: ASHTraining Function

Page 18 of 21 Fiscal Year 2010 ASH Business Plan10/15/09

of transportation of hazardous materials by air.

Core Activity: Training - OrganizationDevelopment

Activity Target 1:Develop non-managerial employees for futuremanagement positions in accordance with theAHR Program for Emerging Leaders. DueSeptember 30, 2010

ASH will provide professional development for theASH workforce.

Activity Target 2:Develop training guidance based onorganizational needs to ensure consistenttraining implementation throughout theorganization. Due September 30, 2010

Core Activity: Training - ManagementDevelopment

Activity Target 1:Monitor the status and provide a quarterlyreminder to managers regarding AHR's 40-hourrequirement for continuing managementeducation. Due June 30, 2010

ASH Training and Workforce Resources will providetraining opportunities to enhance managerialworkforce skills.

Activity Target 2:Design and deliver ASH managementdevelopment training which includes modules toaddress issues identified in the Federal HumanCapital Survey. Due September 30, 2010

Core Activity: Training - TechnicalTraining

Activity Target 1:Provide technical training as needed to developASH workforce knowledge and skills. DueSeptember 30, 2010

ASH Training and Workforce Resources will delivertechnical training for the ASH safety and securityworkforce.

Activity Target 2:Deliver COMSEC and STE training for FAAbased on program office requirements. DueSeptember 30, 2010Activity Target 3:Prototype an advanced Statement Analysiscourse for the ASH workforce involved ininvestigations. Due September 30, 2010Activity Target 4:Analyze Levels 1 and 3 training evaluations toassess the effectiveness of technical training.Due September 30, 2010Activity Target 5:Provide access to FAA/ATO or NTSB courses forAEO Specialists. Due September 30, 2010

Activity Target 6:Provide access to Federal Law enforcementTraining Center (FLETC) courses. DueSeptember 30, 2010

Core Activity: CIS Training (HSPD 12Training Support)

Activity Target 1:Provide training support for implementation ofHSPD 12 training requirements. Due September30, 2010

The Common Identification Standard, CIS, is theprogram named to support development anddeployment of the HSPD-12 federal ID cardmandate. As this program is implemented throughFY08 and beyond (see Compliance Core BusinessTarget under the Increased Safety Goal), trainingproducts must be designed and deployed to matchthe implementation schedule.

ASH will maintain an average of 90% "Good" or"Excellent" ratings on ASH Help Desk CustomerSatisfaction Surveys received.

Core Business Target: ASHInformation ResourceManagement (IRM)

The main objective of the IRM staff is to provide costeffective, secure enabling technology to support theASH mission. AIN-500 has developed a state of theart web-based platform for hosting all of its data drivenapplications, effectively capturing, disseminating, andanalyzing safety and security data. Programmanagers, hazmat inspectors, security investigators,facility inspectors, and support personnel are usingintegrated systems for planning, scheduling, capturingand tracking work programs, investigation results, andsafety and security information. The ASH platformdelivers anytime, anywhere access for all of its agentsand employees whether they are at their desks, athome or on travel. This access is entirely secure frompoint to point and delivers data and reports in real-time. This platform has enabled ASH to become muchmore efficient in its operations as work loads can bespread around and it allows the individual employeesto become more productive.

Core Business Initiative: ASHInformation Resource Management(IRM) Function

Core Activity: IRM - Desktop Support

Activity Target 1:Replace 100% of outdated equipment that fallswithin the 4-year life cycle. Due September 30,2010

ASH will establish standard base of performance fordesktop support based on industry best practices.

Activity Target 2:Adopt and distribute via policy memo all

Page 19 of 21 Fiscal Year 2010 ASH Business Plan10/15/09

standards established by the Office of the ChiefInformation Officer (AIO). Due September 30,2010

Core Activity: IRM - RequirementsGathering

Activity Target 1:Ensure 100% of requirements accepted aretechnically feasible and within budget. DueSeptember 30, 2010

ASH will determine the requirements and feasibilityof systems.

Activity Target 2:Ensure 100% of accepted requirements aredocumented in the required tracking system. DueSeptember 30, 2010Activity Target 3:Conduct a review with applications customers.Due December 31, 2009Activity Target 4:Conduct a review with applications customers.Due March 31, 2010Activity Target 5:Conduct a review with applications customers.Due June 30, 2010Activity Target 6:Conduct a review with applications customers.Due September 30, 2010

Core Activity: IRM - NetworkingFunction

Activity Target 1:Maintain 99% availability of network andresources during regular business hours. DueSeptember 30, 2010

AIN-500 will provide external connectivity to theASH desktop.

Core Activity: IRM - IT AssetManagement

Activity Target 1:ASH will complete a cost effectiveness vs. returnon investment analysis on all major acquisitions.Due September 30, 2010

AIN-500 will work to maximize the return on ITinvestments.

Core Activity: IRM - Computer/DigitalForensics

Activity Target 1:Complete all cases accepted for computer/digitalforensics support within 20 days except thoseprolonged for reasons beyond the computerforensics specialist's control. Due September 30,2010

AIN-500 will administer a computer/digital forensicsprogram.

Activity Target 2:Provide monthly reporting to the Investigations

Division on the status of computer/digitalforensics requests. Due September 30, 2010

Core Activity: IRM - DevelopingApplications

Activity Target 1:Ensure that all operational applications have a99% or higher availability. Due September 30,2010

The Information Resource Management Divisionwill support the ASH mission requirements andprovide application development services.

Activity Target 2:Ensure all new web applications are developed inthe ".net" environment. Due September 30, 2010Activity Target 3:Ensure consolidated lists of requirements forapplications are shared with customers. DueDecember 31, 2009Activity Target 4:Ensure consolidated lists of requirements forapplications are shared with customers. DueMarch 31, 2010Activity Target 5:Ensure consolidated lists of requirements forapplications are shared with customers. DueJune 30, 2010Activity Target 6:Ensure consolidated lists of requirements forapplications are shared with customers. DueSeptember 30, 2010

Core Activity: IRM - Host NationalApplications

Activity Target 1:ASH will provide system availability report tosystem owners. Due December 31, 2009

ASH will provide a secure hosting platform fornational systems.

Activity Target 2:ASH will provide system availability report tosystem owners. Due March 31, 2010Activity Target 3:ASH will provide system availability report tosystem owners. Due June 30, 2010Activity Target 4:ASH will provide system availability report tosystem owners. Due September 30, 2010

ASH will conduct a complete evaluation of one majorprogram area to better align our products and services.

Core Business Target: ASHStrategic Planning andEvaluations

Page 20 of 21 Fiscal Year 2010 ASH Business Plan10/15/09

Evaluation of the progress and effectiveness ofsecurity activities within Security & HazardousMaterials has become increasingly important tostakeholders and decision makers who need to knowhow funded activities are contributing to the agency'scritical mission and also to employees and managerswho seek to continually improve processes to obtainbetter results. The Strategic Planning and EvaluationStaff conducts evaluations of ASH programs and theresults are used to develop and enhance strategicplanning efforts to assure the highest quality ofservice and commitment FAA makes to achievingresults.

Core Business Initiative: ASHStrategic Planning and EvaluationsFunction

Core Activity: Evaluations - NationalAssessment and Strategic PlanningStaff

Activity Target 1:Conduct a complete evaluation of one majorprogram area to better align our products andservices. Due September 30, 2010

ASH will annually review our customers'requirements to better align products and services.

Page 21 of 21 Fiscal Year 2010 ASH Business Plan10/15/09