Information Technology Risk & Portfolio Management Division, 84-21200
Julie DeNiro, Manager
The Information Technology Risk and Portfolio Management division is responsible for ensuring Bureau-wide compliance with the Clinger-Cohen Act of 1996, the Federal Information Security Management Act of 2002 (FISMA), OMB Circular A-130, and other Federal IT guidance, such as the National Institute of Standards and Technology. This division also has responsibility for IT policies and directives and standards, IT Capital Planning, Enterprise Architecture, IT Security, IT Portfolio/Project Management, and Telecommunications, as well as the IT liaison between Reclamation and the Department of the Interior and other organizations.
Risk Management Services
Ben Weinischke, Bureau Chief Information Security Officer
Enterprise Architecture
Jesse Caro, Enterprise Architecture IT Project Manager
Capital Planning
Jennifer Ford, Capital Planning Team Lead
Radio and Spectrum Management Office (RMSO)
Steve Trujillo, Radio
and Ivan Williams, Radio Liaison
The RMSO is responsible for providing governance, security, safety, guidance, education, and oversignt of Reclamaton's radio and spectrum systems. This includes all systems that contain equipment that can transmit radio waves and icludes but is not limited to pagers, 802.11, cellular devices, Bluetooth, and SCADA systems. The RSMO provides approval fo all equipemtn and systems that transmit radio waves to ensure cost effectiveness and safety to our employees and the public.
North American Electric Reliability Corporation - Critical Infrastructure Protection (NERC CIP)
Wendy Center, NERC CIP Program Manager
NERC CIP is responsible for 1) ensuring that all aspect of Reclamation's IT requirements comply with Reliability Standards, and other applicable Federal IT standards, policy, and legislation, 2) resolving conflicting differences between requirements outlined in Reliability Standards, and othe applicable Federal IT standards, policy, and legislation, including promulgation of such resoltuions as may be necessary, and 3) evaluation applicable IT systems to certify compliance with Reliability Standard IT requirements.

