40 U.S.C. § 11313

In fulfilling the responsibilities under section 3506(h) of title 44 , the head of an executive agency shall— (1) establish goals for improving the efficiency and effectiveness of agency operations and, as appropriate, the delivery of services to the public through the effective use of information technology; (2) prepare an annual report, to be included in the executive agency’s budget submission to Congress, on the progress in achieving the goals; (3) ensure that performance measurements— (A) are prescribed for information technology used by, or to be acquired for, the executive agency; and (B) measure how well the information technology supports programs of the executive agency; (4) where comparable processes and organizations in the public or private sectors exist, quantitatively benchmark agency process performance against those processes in terms of cost, speed, productivity, and quality of outputs and outcomes; (5) analyze the missions of the executive agency and, based on the analysis, revise the executive agency’s mission-related processes and administrative processes as appropriate before making significant investments in information technology to be used in support of the performance of those missions; and (6) ensure that the information security policies, procedures, and practices of the executive agency are adequate.