eMerge Status Report COIT September 18, 2008

2 Description Deploy a Human Resources Information System using a secure and robust technical platform for mission critical systems that: Integrates core business systems Eliminates manual and redundant business processes Provides enhanced services to active, retired and potential workforce

3 Accomplishments Awarded implementation partner contract – Ciber, Inc. Acquired PeopleSoft HCM and non-production environment Hired 24 FTE – actively recruiting 5 technical positions Launched project website – Completed high-level business process analysis Commenced implementation Phase I Created CCSF / Ciber Project Charter Completed first round functional training

4 Project Health Summary Project Attribute Deliverable PlannedActual Status StartEndStartEnd Schedule Infrastructure Build Out - Pre- Production Environments 01/01/0805/15/0801/01/08 Schedule Fit Gap Sessions 05/01/0807/31/0808/18/08 Schedule Policy Analysis - Charter, Admin Code, Civil Service Rules, MOUs 06/23/0810/31/0806/23/08 Schedule Department Head Meetings - Project Goals & Alignment 9/22/0810/31/08 Schedule Determine Operational Support Structure 6/30/089/30/086/30/08 Schedule Plan Showcase Event 04/14/08 07/01/08 Schedule Conduct remote time entry device analysis 08/26/0812/31/088/26/08 G G G G R Y R

5 Project Health Summary cont’d Project Attribute StatusComments Overall Schedule Projected Phase I go-live – 10/31/2009; evaluation of included functionality for Phase I will be necessary ScopeIncrease in scope due to Disaster Service Work Program requirements CostFY2007–2008 expenditures within approved budget Overall Y G Y Y

6 Issues & Risks Risk DescriptionTriggersHigh Level Mitigation Plan Impact - Cost, Scope, Time City Computer Hosting Center relocation from OMP to an undetermined location Timing of move conflicts with planned project go- live Adjust project schedule Time, Cost Potential inability to maintain enterprise level infrastructure – i.e. network inter-connectivity, application security, control and standardization Central IT develops operational support plan that exposes vulnerabilities in network and data security, interconnectivity and business continuity Develop a strong partnership with IT and partner in developing standards, i.e. Service Level Agreements, training Scope, Time, Cost City leadership are unable to define and agree to a viable operational support structure for the PeopleSoft system Politics Layoffs Budget deficit Union resistance Work with Executive Steering Committee to define and agree on an operational structure Scope, Time, Cost

7 Issues & Risks cont’d Risk DescriptionTriggersHigh Level Mitigation Plan Impact - Cost, Scope, Time May not be able to implement functionality that requires electronic signatures, i.e. employment applications City does not have a sanction or precedent that defines use of electronic signatures Work with Executive Steering Committee, Civil Service Commission, and City Attorney to define City policy Scope, Time End user concerns about security and confidentiality Media and external events Data breach Union resistance Encrypt sensitive data, limit access to info on reports, limit use of SSN, work with COIT to create a City wide policy stopping the use of SSN Scope