OIG
        OFFICE OF INSPECTOR GENERAL
                          Ca talyst for Improving the Environment
Memorandum Report
        EPA Should Take Further Steps to
        Address Funding Shortfalls and
        Time Slippages in Permit Compliance
        System Modernization Effort
        Report No. 2003-M-00014
        May 20, 2003

-------
Report Contributors:            Dan Cox
                               Ira Brass
Abbreviations

EPA         Environmental Protection Agency
OECA       Office of Enforcement and Compliance Assurance
OIG         Office of Inspector General
NPDES      National Pollutant Discharge Elimination System
PCS         Permit Compliance System

-------
                     UNITED STATES ENVIRONMENTAL PROTECTION AGENCY
                                   WASHINGTON, D.C. 20460
                                                                           OFFICE OF
                                                                       INSPECTOR GENERAL
                                     May 20, 2003

MEMORANDUM

SUBJECT:     EPA Should Take Further Steps to Address Funding Shortfalls and
              Time Slippages in Permit Compliance System Modernization Effort
              Memorandum Report No. 2003-M-000014
FROM:       Dan Engelberg /s/
              Director for Program Evaluation, Water Issues

TO:           John Peter Suarez
              Assistant Administrator for Enforcement and Compliance Assurance

This is our final report on the subject review conducted by the Office of Inspector General (OIG)
of the U.S. Environmental Protection Agency (EPA).  This memorandum report contains findings
that describe the problems the OIG has identified and corrective actions the OIG recommends.
Due to your failure to sufficiently respond to the draft report, the final report we are sending is
unchanged from the draft. Changes that have occurred since then (specifically, a worsening of
the fiscal situation) are addressed in a separate section at the end of the report. This report
represents the opinion of the OIG, and the findings contained in this report do not necessarily
represent the final EPA position.  Final determinations on matters in this report will be made by
EPA managers in accordance with established resolution procedures.

This memorandum report notes significant risks that we have identified regarding your
long-standing program to modernize the Permit Compliance System (PCS). It is essential that
this system, used by the EPA and many States to administer permits for water discharges and
ensure enforcement, be modernized.  However, the modernization program is facing a large cost
escalation and a consequent funding shortfall and slippage in time frames. In addition,
consideration is being given to reducing the intended functionality of the system to save money.
As a result, the future viability of PCS may be endangered.

Purpose

The OIG issued an audit report in August 2001, State Enforcement of Clean Water Act
Discharges Can Be More Effective (Report No. 2001-P-00013), that identified weaknesses in the

-------
 PCS modernization effort. We made recommendations and suggestions in that report to
improve the modernization effort, and the Office of Enforcement and Compliance Assurance
(OECA) generally agreed with them. Among other things, we suggested that OECA complete a
systems requirements document, cost benefit analysis, system charter, and system management
plan.

Subsequent to our August 2001 report, we have been monitoring the progress of the PCS
modernization project, to help ensure it ultimately meets user needs. The purpose of this
memorandum is to bring to your attention our concerns regarding funding shortfalls, timeframe
slippages, and OECA's failure to complete needed planning documents that might have
improved management decisions for this project.

Background

EPA uses PCS, a national data system, to support the National Pollutant Discharge Elimination
System (NPDES) program. PCS, which is managed by OECA, is a critical information system
for EPA's Office of Water. PCS tracks NPDES permit issuance, permit limits, self monitoring
data, and enforcement and inspection activity for more than 64,000 facilities regulated under the
Clean Water Act.  Eighteen States currently use PCS as their major system for managing the
NPDES program and two additional States have expressed an interest in using the modernized
system.

There have been fundamental changes to the NPDES program since the current system was
developed in 1982, including new categories of dischargers for storm water, pretreatment, and
concentrated animal feeding operations. As a result, the Office of Water is planning to bring large
numbers of additional facilities into NPDES, with a consequent need to dramatically expand the
capabilities of PCS.  The Office of Water also envisions that PCS will play a central role in
managing its program of watershed-based source controls.

PCS had its last major revision in 1982. It has been identified as an Agency weakness since 1999.
Reasons include its reported unreliability due to missing data and data quality problems.
Moreover, compliance data from hundreds of thousands of smaller dischargers are not captured
by the system.

To improve PCS's ease of use, as well as allow it to catch up to regulatory changes that have
taken place since it was last revised more than 20 years ago, EPA is in the process of modernizing
PCS through a contract with a major consulting company. We noted in our August 2001 report
that the estimated cost for the entire PCS modernization at that time was $12 million to $14
million. The effort started in 1997 and is in the detailed design phase. This phase, which is
currently planned to be completed in May 2003,l is the third of six phases in the modernization
project as shown in the following chart. The detailed design develops the technical
       lrThe estimated completion date for detailed design has been extended to September 30, 2003. See
"Developments Since Issuance of Draft Report" on page 9 for more details.

-------
specifications for the system, and includes developing standards, creating the physical data
model, and developing flow charts and screen mock-ups. Detailed design will be followed by the
system development phase when contractors will construct the data model and build and test the
application software. These two phases are the most resource intensive.  After several delays,
implementation of the modernized PCS is now planned by the end of fiscal year 2005.2
                  6. Operations & Maintenance          1 • Concept Definition
                  (i.e. Administration & Enhancement)        (i-e- Reconnaissance)
                                     System
 5. System Implementation^                                         •   2- General Design
 (i.e. Install & Acceptance)   ^              LlfeCVCle                  (i.e. Requirements Analysis)
                                     Phases
                   4. System Development             3- Detailed Design
                    (i.e. Programming)                   (i-e Technical Specifications)
                       Source: NPDES Requirements Document, OECA


Scope and Methodology

Findings from OIG's August 2001 report led to a decision to conduct a followup review of the
PCS modernization effort's project planning and project and contract management. However, in
May 2002, based on a request by OECA, we agreed to monitor the progress of the PCS
modernization process rather than conduct a full review. OECA officials had expressed concerns
about their tight time schedule.  We reserved the option to conduct a full review should we
identify material concerns or recognize a situation where the project is in jeopardy.

Our participation consisted of having a representative of our office attend meetings of the PCS
Steering Committee and PCS Executive Council, and provide advice. The PCS Steering
Committee, composed of branch chiefs or equivalent from EPA Headquarters and regions as well
as from States, reviewed the data requirements work groups' recommendations on what data
elements were necessary for effectively managing the NPDES program.  The Executive Council,
       2The implementation date has now been estimated to be September 30, 2006. See "Developments Since
Issuance of Draft Report" on page 9 for more details.

-------
composed of seven senior EPA managers, reviewed the Steering Committee recommendations
from a broader programmatic perspective.  They also compared the requirements for
implementing the recommendations to availability of funding and resources. Based on
information that we gathered through January 2003, we decided to report our concerns in this
memorandum.  Since we did not do an audit or evaluation, we did not develop the causes for the
cost increases and time schedule slippage. We complied with all appropriate Government
Auditing Standards. Since we did not conduct an audit or evaluation, we did not comply with
those standards, such as those for planning, compliance with laws and regulations, and
management controls, that apply to those types of products.

Issues of Concern

We identified three issues of concern with respect to the PCS modernization project: (1) cost
estimates recently increased dramatically; (2) the implementation date slipped significantly; and
(3) OECA failed to prepare certain critical project planning  documents, and one document
contained inaccurate information.

Funding Shortages

Estimated costs for the PCS modernization project have recently significantly increased. In
November 2002, OECA reported to the PCS Executive Council that the contractor's cost
estimates to finish the detailed design and to design the software had increased by 71 percent.3
The proprietary nature of the current cost estimate means that we are unable to report  on the
specific amount of the gap, but we are able to report that it is significant.

Further, in addition to the significant increase in the cost estimate, this estimate still did not
include the cost to conduct certain tasks, including:

•   Costs for new functionality approved by the Executive Council, including permit application
    and daily monitoring data.

•   Costs for the new requirements from the detailed design effort.

•   Costs associated with the PCS modernization cost assessment.

•  Potential increase in cost estimates for data migration, testing, training, and implementation.

Based on the new cost estimates, which do not include the costs for the above four items, OECA
only has 60 percent of the funding needed to complete the project.
       3The cost proposal, submitted in response to OECA's Request for Quote for work to be performed in fiscal
2003, is the contractor's proprietary information, and we are not allowed to report those costs in this memorandum.
The findings reflect internal project cost estimates, but not cost estimates produced in the project's Cost Benefit
Analysis, which are discussed elsewhere in this report.

-------
OECA has several planned approaches for addressing the shortfall, including:

       Requesting Additional Funds: OECA plans on funding some of the shortfall from the
       Agency's System Modernization Fund.  As of February 12, 2003, these funds had not
       been distributed for fiscal 2003.  The funding shortfall is over half the amount available
       from the fund.  Members of the council said it was unlikely PCS would receive enough to
       fully fund the project. Therefore, the funding level from the fund is uncertain. This is the
       last year for the fund.4

       Assessing Software Development Costs:  OECA plans on conducting a cost assessment
       on software development when the detailed design phase is completed in May 2003 to
       ensure those increased costs are  reasonable. We agree such an assessment should be
       conducted, as well as cost estimates for other phases of the project, such as the remainder
       of the system development phase and the implementation phase. It is important to
       conduct a cost assessment for the remainder of the project because we believe it is likely
       that those costs will rise in the future as they have for fiscal 2003. Accurate cost estimates
       are needed to signal EPA management of the magnitude of the resources needed as well,
       so they can make knowledgeable decisions  about funding.

       Considering Cost Reductions:  Although it has not made any decisions, OECA has
       offered several options for reducing costs, including:

       •  Eliminating some of the new system's functionality.
       •  Not moving all historical data from the legacy (current) system to the modernized one.
       •  Using other contractors to perform some of the work.

We have concerns about reducing the functionality of the modernized system and continue to
believe OECA should develop a plan to  fully fund the system. Before any functionality,
including transferring all historical data,  is eliminated, OECA needs to ensure user needs are still
being met. This includes information from all of
the point sources in a watershed.  Information from  I  „__„   ~~  ~~  ~~~„   ,„    ~~  '
           ..,,..                   .        EPA and the states believe that the original user
sources not included in the current system, such as        ,     ,  ,,  ,    «, t  •  ,«, n^o
                             , „  ,.               requirements that were the basis of the PCS
storm water, concentrated animal feeding
                                                  need reconsideration in light of fundamental
                                                  changes to the NPDESprogram."
                                                        -OECA's Fiscal 2002 Integrity Act Report
operations, and biosolids, is needed. The major
changes in what is reported in the modernized PCS
are from these areas, and if any of these areas are
not included user needs may not be met.  If these
new areas are not included in the modernized
system, information for hundreds of thousands of permittees will not be included. OECA needs
to be very careful before eliminating these areas.  Exercising the cost reduction options may
result in a new system that fails to address the basic system requirements that OECA arrived at
       4EPA distributed the fiscal 2003 System Modernization Fund subsequent to the issuance of the draft report.
See "Developments Since Issuance of Draft Report" on page 9 for more details.

-------
through consultation with stakeholders.  Therefore, before OECA decides to reduce the
functionality of the modernized PCS, it is important that OECA consider the views of the
stakeholders.  Also, using other contractors for portions of the work could increase the risk of
further delay in implementation without providing any assurance that it will significantly reduce
costs.

PCS Implementation Date Slips

In addition to the recent cost increases, the PCS implementation date has slipped by about 2
years. OECA's Integrity Act Annual Assurance Letters for fiscal 2000 and 2001 both indicated
the implementation date for the modernized PCS was the fourth quarter of fiscal 2003.  OECA's
fiscal 2002 Assurance Letter changed the implementation date to the first quarter of fiscal 2005,
and it is clear based on recent developments that even this date will not be made. OECA officials
most recently said they are planning to implement the system sometime in 2005.5

OECA needs to determine an implementation date that can be met.  The goal should include time
to complete cost assessments.  OECA should determine different implementation dates for
different funding levels, so the  officials who make the funding decisions know the effect their
decisions will have on completing the system.

Required Documents Not Completed and Contain Inaccurate Information

Our third concern is that OECA has directed insufficient attention to conducting accurate and
timely planning and analysis for this project. OECA has not completed certain required planning
documents whose preparation might have improved the management of the program. Further,
another document appears to present significantly inaccurate information.

In our August 2001 audit, we noted that a cost benefit analysis, system charter, and system
management plan for the PCS modernization project had not been prepared. These documents
are used to help managers make informed planning and funding decisions, and are important
elements of quality control for  large system acquisition projects, although we cannot say for
certain that completion of these documents would have prevented the funding shortfalls and
delays noted.  In its response to our August 2001 audit, OECA agreed to complete these
documents. However, more than 1.5 years after we completed our audit, OECA has prepared
only one of three missing documents - the cost-benefit analysis.

In our prior report, we had identified the following as not being completed:

       System Charter and System Management Plan: Although the modernized system was
       estimated to cost more than $10 million, the required system charter and system
       management plan decision papers had not been prepared or approved. EPA's Information
       5 The implementation date has been estimated to be September 30, 2006. See "Developments Since Issuance
of Draft Report" on page 9 for more details.

-------
       Resources Management Policy indicates the system charter should have been developed
       during project initiation, and it should have identified life cycle cost estimates and
       appropriate management levels for approval  of decision papers. Further, the decision
       paper for the system management plan should have been produced at the conclusion of
       the analysis stage and subsequently updated. The system charter becomes a part of the
       system management plan.  The system management plan includes the items in the system
       charter and also includes such items as an acquisition strategy, cost-benefit analysis of the
       technical alternatives, and the system's architecture. OECA had indicated it would
       establish and approve a system management plan by December 2001, but still has not
       done so.

       Cost-Benefit Analysis: The detailed design phase for PCS system modernization had
       begun without the life cycle cost-benefit analysis required by  Office of Management and
       Budget Circulars No. A-l 1 and A-130. Such an analysis is necessary to identify the most
       cost-effective solution for the new system and expected benefits. OECA had indicated it
       would complete the analysis by September 2001. OECA completed the cost-benefit
       analysis almost a year later, in August 2002.  Although we did not conduct a thorough
       review of the analysis, our brief review suggests that this important analysis greatly
       understated the costs to finish the project. [Again, the proprietary nature of the current
       cost estimate means that we are unable to report on the specific amount of the increase
       in cost.] Specifically, we noted:

       •   In September 2002,  1 month after the analysis was  completed, OECA developed an
          internal cost estimate 171 percent higher than had  been published in the analysis.

       •   In November 2002,  2 months later, OECA prepared another internal cost estimate that
          projected costs to increase even more.  This cost estimate, 3 months after the August
          estimate, was 255percent higher than that contained in the cost-benefit analysis.

       Performing the analysis utilizing the November 2002 cost data as an input would have
       resulted in a very different cost-benefit ratio. As a result, inaccurate information was
       provided to Agency managers and made available to the public, which may have delayed
       the enhanced attention and management assistance needed for this project.
Conclusion

Without a modernized PCS, EPA's Office of
Water cannot effectively manage its Clean Water
NPDES program. Having a modernized system
is vital for EPA to effectively manage NPDES
permitting and enforcement under current
requirements. The current system is incomplete,
obsolete, and difficult to use. The glaring
weaknesses in the current PCS system have
created a presumption in EPA that it will
"We find ourselves in the Age of Information with a
dearth of essential, scientifically defensible data and
information to manage our programs. It is imperative
that we close these information gaps as quickly as
possible: they may lead to market and regulatory
failures, thwart our ability to document progress, and
limit our ability to effectively target our scarce
resources."
 -Office of Water's Fiscal 2004 Priorities for Regions

-------
be modernized.  We agree with EPA's view of the importance of this project, and believe delaying
the project's rollout or reducing its functionality will hamper EPA's ability to achieve its goal of
managing pollution sources on a watershed basis. The growth, variety, and complexity of the
regulated community has greatly outstripped the system's capabilities.

However, costs are dramatically escalating, and timeframes repeatedly pushed back, in part due to
the failure to adequately plan, prepare, and manage the work.  The critical role of the modernized
PCS system does not make project management unimportant. On the contrary, management risks
may be greater when a project is perceived as being vital. For this reason, it is imperative that EPA
immediately conduct necessary analyses and develop realistic estimates of funding and schedules
in order to place this project on a secure footing.

Recommendations

We recommend that the Assistant Administrator for Enforcement and Compliance Assurance:

    1. Develop a realistic cost estimate and cost-benefit analysis that includes all of the projected
      costs for PCS modernization and develop a plan for fully funding PCS within 30 days of
      the date of this report.

   2. Consult with the PCS  Steering Committee before eliminating any functionality of
      modernized PCS and conduct a cost-benefit analysis to determine what is lost, what is still
      gained through the modernized system, and whether the modernization effort still meets
      the needs of the users  and is worthwhile to continue.

   3. Develop realistic implementation dates for different funding levels within 30 days of the
      date of this report.

   4. Complete the system management plan within 30 days of the date of this report.

Agency Comments

We received an interim response to our draft report from OECA. In its response, OECA did not
respond directly to our recommendations, but indicated it is beginning to take steps that it believes
will begin to address our concerns.  OECA stated that it did not have time to fully respond to our
draft report, since it is focusing its efforts on completing the draft PCS Modernization Detail
Design Document by the end  of May 2003. After that, OECA said it will fully respond to our
report. OECA stated it has started addressing our recommendations, and provided three examples
of how it has started to address the funding shortfall.

OECA's full comments are in Appendix A.

-------
Developments Since Issuance of Draft Report

We are adding this section of the report because actions have taken place since we issued the draft
report. OECA did not address them in its interim response and we are not waiting for its final
response to issue the report.

EPA has distributed the fiscal 2003 System Modernization Fund, and OECA received significantly
less from the fund than anticipated. There was also a significant decrease in fiscal 2003 OECA
funding. OECA had hoped that the distribution from the fund would have significantly decreased
the 40 percent funding shortfall discussed in the draft report. Instead, it only decreased the
shortfall to 33 percent.

A large portion of the planned funding is in EPA's fiscal 2004 budget that was submitted to
Congress but has not been approved.  If it is  not approved, OECA's funding shortfall increases to
62 percent from the 33 percent shortfall discussed in the previous paragraph.

OECA is developing plans to request funds from the fiscal 2005 budget to fund much of the
shortfall. If the funding is approved, the new date for implementing the modernized system will
slip one additional year to September 30, 2006. This is 3 years after the original implementation
date.

Also, the detailed design completion date has slipped from May 31, 2003, to September 30, 2003,
a full 2 years after what OECA reported in its fiscal 2000 Integrity Act Annual Assurance Letter.

Required Actions

In accordance with EPA Manual 2750, you are required to provide a written response to this
report within 90 calendar days of the date of this report. You should include a corrective actions
plan for agreed upon actions, including milestone dates. We have no objections to the further
release of this report to the public.  For your convenience, this report will be available at
http://www.epa.gov/oig/eroom.htm.

If you or your staff have any questions, please call me at (202)  566-0830, or Dan Cox, Project
Manager, at (916) 498-6592.

-------
10

-------
                                                                       Appendix A

                          Agency's Response
                 UNITED STATES ENVIRONMENTAL PROTECTION AGENCY
                               WASHINGTON, D.C. 20460
                                    May 8, 2003
                                                                      OFFICE OF
                                                             ENFORCEMENT AND
                                                          COMPLIANCE ASSURANCE
MEMORANDUM
SUBJECT:    EPA Should Take Further Steps to Address Funding Shortfalls and Time Slippages
             in Permit Compliance System Modernization Effort
             DRAFT: Memorandum Report No. 2003-M-OOOOXX

FROM:       Phyllis P. Harris  /s/
             Principal Deputy Assistant Administrator

TO:          Dan Engelberg
             Director for Program Evaluation, Water Issues
             Office of the Inspector General

   We are working to  respond to your April 2, 2003 draft memorandum report titled, "EPA
Should Take Further Steps to Address Funding Shortfalls and Time Slippages in Permit
Compliance System Modernization Effort." Your office identified three issues of concern
regarding PCS modernization and provided four recommendations for addressing those concerns.
We intend to fully respond to your draft report, but at this time we are focusing our efforts on
completing the draft PCS Modernization Detail Design Document. As you know, the critical path
for the PCS modernization effort is to complete the draft Design Document by the end of May
2003. If we took the time now to fully respond to your draft report, we  would endanger our ability
to deliver the Detail Design.

   We have started to  address your recommendations. For example, we are developing revised
scenarios  for implementing a modernized PCS within certain time frames based on different
funding levels. We are also reviewing whether the modernized PCS could be phased in over

                                         11

-------
time, perhaps with two versions, and how this could be done with regards to functionality,
schedules and budget.  In addition, we are developing plans for obtaining the necessary funding,
including developing OECA's FY2005 Integrated Compliance Information System (ICIS) Capital
Planning and Investment Control (CPIC) proposal (includes PCS modernization).

   We anticipate providing a full response to your concerns and recommendations by mid-June
2003. This will allow staff who are now focused on completing the Design Document to finish
that work and then focus on responding fully to your report.  Please call me if you have
any questions or contact David Hindin, Acting Director, Enforcement Planning, Targeting and
Data Division, at (202) 564-1300.

cc: Michael Stahl, OECA/OC
   Jim Hanlon, OW/OWM
   Mark Luttner, OEI/OIC
   David Hindin, OECA/OC
   Greg Marion, OECA/ARMSS
                                          12

-------
                                                                       Appendix B

                                Distribution
Headquarters Offices

      Assistant Administrator for Enforcement and Compliance Assurance
      Assistant Administrator for Water
      Comptroller (2731 A)
      Agency Followup Official (2710A)
      Agency Audit Followup Coordinator (2724A)
      Office of Enforcement and Compliance Assurance Audit Liaison (2201 A)
      Associate Administrator for Congressional and Intergovernmental Relations (1301A)
      Associate Administrator for Communications, Education, and Media Relations (1101 A)

Office of Inspector General

      Inspector General
                                        13

-------

-------