United States Department of Transportation - Federal Highway Administration FHWA HomeFeedback
FHWA and the Year 2000 Computer Problem

Federal Highway Administration
Business Continuity and Contingency Plan (BCCP)
for the Year 2000 (Y2K)

June, 1999

Table of Contents

Purpose

Background

References

Methodology

Organization

Status of FHWA Y2K Activities

DOT Crisis Management Center

Y2K Outreach Program

Contingency Planning


Purpose

The purpose of the Business Continuity and Contingency Plan (BCCP) for the Year 2000 (Y2K) is to ensure the continuation of operations of Federal Highway (FHWA) systems over the millennium change and minimize the impact of any adverse situations that may arise.

Table of Contents

Background

In the past, when data storage on computers was more expensive, it was standard practice to store only the last two digits of the year. For example, instructions embedded in many existing programs automatically join the century digits, i.e., "19" and the year digits, e.g., "99" together in on-screen displays and printouts. This will cause many systems to treat the year 2000 (stored as "00") as the year 1900 unless appropriate changes are made to these information systems. This means that in systems using only the two digit format, the year 2000 (stored as "00") would be sorted ahead of 1999 (stored as "99") when sorting dates in ascending sequence, unless appropriate modifications to the system are made.

The FHWA has been working for the past 10 years to ensure that all of the Agency's information systems will accommodate four digit dates. For example, in 1989 when the Agency developed the current version of its Fiscal Management Information System (FMIS), which contains data related to all highway projects financed by the Federal Government, it included 4-digit date fields in the database.

Another potential Year 2000 problem lies in operational transportation systems, such as traffic signal systems operated and managed by State and local governments throughout the country. These systems may also have embedded programs in their hardware and/or software that cannot adequately deal with the Year 2000. As an example, data dependent signal timing patterns could be incorrectly implemented at highway intersections if the State or local government's traffic control software does not properly process four digit years or intersections could go to flashing yellow/red.

FHWA has conducted an extensive outreach program with the broader transportation community to minimize any adverse impacts of the Y2K problem on the Nation's highway system.

Table of Contents

References

Table of Contents

Methodology

A team composed of representatives from the Office of Information and Management Services and each office responsible for one of the Agency's mission critical computer systems was convened for the purpose of formulating a Business Continuity and Contingency Plan for the FHWA. The team considered actions taken to date by the Agency to address the potential Y2K problem and evaluated each of the mission critical systems to determine what action(s) would be necessary to maintain a minimal acceptable level of operations.

The contingency plans outlined later in this plan, describe the steps the FHWA would take in the event of a Y2K caused system or systems failure. We have generally assumed that electricity, the phone system/FAX's, and the United States Postal Service mail system are working. The contingency plans developed to date will be continuously evaluated and revised, as necessary, to reflect any changes in the operating environment which may occur between now and December 31, 1999.

This BCCP was developed by the FHWA's Office of Information and Management Systems in coordination with the Office of Transportation Operations which is responsible for emergency preparedness and the Continuity of Operations Plan (COOP).

Table of Contents

Organization

The FHWA has 5 core business functions:

In addition to its five core business units described above, the FHWA also has 8 cross-cutting service business units.

Table of Contents

Status of FHWA's Y2K Activities

Implementation of Y2K Compliant Systems

After extensive planning and work, on March 27-28, 1999, the FHWA successfully migrated all of its Agencywide mainframe-based information systems (both mission critical and non-mission critical) hosted on the Department's Transportation Administrative Service Center (TASC) Computer Center (TCC) mainframe to: (1) the Y2K compliant versions of the Agency's applications software previously developed and tested by the FHWA; (2) the new Y2K compliant mainframe operating system (OS/390), and (3) the new Y2K compliant version of the Computer Associates Integrated Database Management System (CA-IDMS) software (release 14.0). All other third party software packages used for FHWA systems was also migrated to a Y2K compliant version in this new, completely Y2K compliant environment on the mainframe.

All of the FHWA's processing at the TCC is running under Y2K compliant software as of March 29, 1999, and all FHWA mainframe applications have been fully renovated and validated, and are currently Y2K compliant.

FHWA's mission critical information systems were Y2K compliant by OMB's March 31, 1999, deadline.

End-to-End Test Plan

On March 12, 1999, the FHWA's "End-to-End Test Plan" was transmitted to the Deputy Secretary. The FHWA has identified the State DOTs of Oklahoma, Kansas, and Iowa as willing to conduct "end-to-end tests." The FHWA systems to be tested are the Financial Management Information System (FMIS), The Motor Carrier Management Information System (MCMIS) and the Federal-Aid Payments System (PR-20). The FHWA is currently working with these States to plan and conduct these tests.

Y2K Independent Verification and Validation (IV&V)

An Independent Validation and Verification (IV&V) of the Agency's Y2K compliance is currently being conducted by Science Applications International Corporation (SAIC). SAIC personnel have completed their preliminary analysis and planning and have worked on-site on their independent assessment of the FHWA's overall Y2K program, which includes running more than 3 million lines of FHWA's code through SAIC's Y2K evaluator tool to ensure Y2K compliance. The reports from SAIC indicate that FHWA's code is much better than average and is in very good shape for Y2K.

FHWA Y2K Compliance Schedule for Mission Critical(1) Systems
as of 03/31/1999

(By OMB Phase(2) with % Completed)

Mission Critical System Awareness
(12/31/1996)
Assessment
(08/31/1997)
Renovation
(09/30/1998)
Validation
(01/31/1999)
Implementation
(03/31/1999)
1) Accounts/Pay-roll Cost System 12/31/1996
(100%)
04/30/1997
(100%)
09/30/1998
(100%)
11/30/1998
(100%)
03/31/1999
(100%)
2) Budget Reporting System 12/31/1996
(100%)
05/31/1997
(100%)
09/30/1997
(100%)
06/10/1998
(100%)
06/15/1998
(100%)
3) Communications & Office Automation
(Comm/OA)
12/31/1996
(100%)
08/31/1997
(100%)
09/30/1998
(100%)
01/31/1999
(100%)
03/31/1999
(100%)
4) Contracts and Procurement Information System (CPIS) 12/31/1996
(100%)
08/31/1997
(100%)
09/30/1998
(100%)
01/31/1999
(100%)
03/31/1999
(100%)
5) Fiscal Management Information System (FMIS) 12/31/1996
(100%)
05/31/1997
(100%)
09/30/1998
(100%)
01/31/1999
(100%)
03/31/1999
(100%)
6) Highway Performance Monitoring System (HPMS) 12/31/1996
(100%)
08/31/1997
(100%)
09/30/1998
(100%)
10/30/1998
(100%)
03/31/1999
(100%)
7) Motor Carrier Management Information System (MCMIS) 12/31/1996
(100%)
06/30/1997
(100%)
09/30/1998
(100%)
01/31/1999
(100%)
03/31/1999
(100%)
8) National Bridge Inventory System (NBIS) 12/31/1996
(100%)
06/30/1997
(100%)
04/30/1998
(100%)
04/30/1998
(100%)
07/01/1998
(100%)
9) Personnel Management Information System (PMIS) 12/31/1996
(100%)
05/31/1997
(100%)
11/30/1997
(100%)
06/30/1998
(100%)
07/31/1998
(100%)

(1) Any automated system or application that directly supports the performance of a core mission function or requirement within your organization. (Definition per DOT CIO e-mail of 6/13/1997.)

(2) OMB adopted the phases as recommended in the Federal CIO Council Subcommittee's Year 2000 "Best Practices" Document.

Table of Contents

DOT Crisis Management Center (CMC)

The DOT Crisis Management Center will be operational corresponding with the Federal Emergency Management Agency's activation, which is now planned for 7:00 a.m. -- 7:00 p.m. on December 28, 29, 30 and January 2, 3, 4, and 24 hours on December 31 and January 1.

Staffing Pattern: Headquarters and Field

Plans for Communicating with Industry Partners and International Groups

Table of Contents .

Y2K Outreach Program with Partners and Customers

The FHWA has had an extensive Y2K outreach program in action for several years. Actions taken include the following:

Table of Contents

Contingency Planning

Since FHWA's major business processes have been automated for 2 to 3 decades, there is no practical manual business process to use as a full function alternative to the automated system for our mission critical applications. For this reason, FHWA has conducted an extensive and comprehensive program of Y2K assessment, testing, and validation.

Based on the results of our comprehensive Y2K program and the information collected from FHWA system owners for the BCCP, we do not expect our mission critical systems to malfunction on or after January 1, 2000.

Our approach to the Y2K focus of the BCCP was outlined in our Y2K quarterly report to OMB dated May 15. FHWA has evaluated the Y2K vulnerability of its mission-critical systems and has determined that should a Y2K related problem occur, there is no likely scenario that will cause any function to be down over 2 weeks. We currently have sufficient resources available to correct any likely problem. Further, our mission critical systems are not so time dependent that a 2 week downtime could not be permitted. However, FHWA system owners have developed reduced function manual processes that will be used until the automated system is corrected regardless of how long the system is inoperable. The backup manual process to be used will vary depending on the duration of the outage. In all cases our reporting capability will be significantly reduced.

The normal on-call staff will be supplemented to handle any problems that occur during the December 28, 1999, to January 7, 2000, time period as well as on February 29, 2000. All support staff will be alerted to the special potential for problems and will be either on-site or on-call.

FHWA Mission Critical Systems

System Name: Accounts/Payroll Cost System

Description:

Internal/External Interfaces:

  1. DAFIS Batch Control Files (BCF) - Two files are received daily from DAFIS; one file containing the latest DAFIS table changes and the other file contains all data processed on the DAFIS system for the previous day. OST reports that the format for the DAFIS BCF file will not be changed, dates will remain 2 digits.

  2. DAFIS Format 3 - The Format 3 files are created from both the Federal-Aid Billing System and the Payroll Cost system. OST reports that the format for the DAFIS Format 3 will not be changed, dates will remain 2 digits.

  3. Accounts reporting creates a file that is used in the Fiscal Management Information System. This file contains all the information that was received on the daily BCF data file. The format of the file will not change.

  4. FHWA uses the Federal On-Line Exchange (FOX) payment system to wire State DOT's reimbursements for Highway Projects. FOX is an on-line system where users manually key data. There is no electronic file interface. FHWA has spoken with the system contact from the Treasury Department. Treasury has provided FHWA with a copy of the letter from the Federal Reserve that states that the FOX system is being updated to be year 2000 compliant.

Y2K Risk Assessment:

Status of Y2K Compliance Efforts:

Contingency Plan:

System Name: Budget Reporting System

Description:

Internal/External Interfaces:

  1. Payroll Data file - This file is from the Consolidated Uniform Payroll System (CUPS). OST reports that the file format has not needed to be changed for Y2K compliance.

  2. Personnel Master and History file - These files come from the Consolidated Personnel Management Information System (CPMIS). OST reports that the file format will not change.

Y2K Risk Assessment:

Status of Y2K Compliance Efforts:

Contingency Plan:

System Name: Communications and Office Automation

Description:

  1. Enterprise Architecture

    Elements of this section are being identified and addressed directly by the system owners in conjunction with the Information Technology Division and its contractors. They are discussed in the appropriate sections of the overall FHWA Year 2000 Plan.

    As a brief summary these elements include:

      1.A the networking, desktop computer, and baseline software discussed in sections 2-4 below;

      1.B the USDOT TASC Computer Center (TCC) where legacy mainframe applications reside, and the ICEMAN Center where departmental applications managed by FAA are hosted; and

      1.C external computer and telecommunications networks, including the USDOT Intermodal Data Network (IDN); FAA ADTN 2000 data network; the AT&T FTS data network; and AAMVA-Net, a re-seller of AT&T Global Network Services providing systems network architecture (SNA) connectivity between the States and TCC.

    The physical components of the networks supporting item 1 are external to the FHWA and will be covered by the contingency plans of those organizations. Software components of FAA's Enterprise Systems are covered under specific plans prepared with the cooperation of each system owner and are documented elsewhere.

  2. Networking: the physical internal and external communications structure of the Agency.

      2A. FHWA WAN

        FHWA operates a nationwide data communications network utilizing the AT&T FTS 2000 system. At the present time, there are 80 remote locations connected to Headquarters through frame-relay circuits. The network provides connectivity for e-mail, enterprise applications access to both NT and mainframe based systems. Internet access, and other basic digital communication.

        Y2K Risk Assessment:

        Occurrence probability: Low

        Severity assessment: Low/moderate: Some disruption to Agency operations; Little or no impact on the safety of the public or Agency personnel.

        Status of Y2K Compliance Efforts:

        The FHWA maintained hardware and software have been vendor certified as Y2K compliant.

        FHWA updated its nationwide data infrastructure in 1997 with new dedicated routers (3Com Model 227) in all field offices. The hardware and software have been certified as Y2K compliant by the vendors. At Headquarters, the connections between the AT&T FTS frame relay network is via two Netbuilder II routers. The hardware and software for these systems have also been vendor certified as Y2K compliant.

        Contingency Plan:

        In the event of a failure of one or more of these components, the following actions would be initiated:

        Day 1 (January 1, 2000) Plus 13 - within first 2 weeks:

        2.A.1) All offices would be instructed to send vital inter- and intra-agency communications via facsimile. Transmission of routine inter-office communications would be suspended until the situation was rectified.

        2.A.2) Access to mainframe-based agency and departmental systems (FMIS, IPPS, DAFIS, etc.) would be via modem direct dial-in to TCC rather than over the Wide Area Network.

        2.A.3) An E-Mail account for each field office would be set up on a central Headquarters GroupWise 5.5. e-mail server accessible over the Internet via browser. Remote offices would be authorized to set up an account with a local Internet Service Provide (ISP) for this purpose.

        2 weeks to 90 days:

        Same as above.

        91 days and over.

        Failed equipment would be replaced by compliant equipment. In the eventof an external network failure; new service would be obtained from another source, MCI under the FTS 2001 contract.

      2B. Headquarters Backbone Network

        In the FHWA Washington Headquarters (Nassif Building), the Agency operates a backbone network, tying the various office workgroup systems (LANs) to each other, the WAN, and to the U.S. DOT Intermodal Data Network.

        The elements of this network include network hubs which are unintelligent and contain no date-sensitive components; 3COM model 1100 and 3300 switches installed in 1999 that are Y2K compliant and which contain some intelligence and management functions; Netbuilder routers such as those used on the WAN; and a number of intelligent 3COM chassis-based hubs which connect peripherals and routers to the network. The "core" router and chassis hubs were installed in 1998 when the backbone was updated to asynchronous transfer mode (ATM).

        Y2K Risk Assessment:

        Occurance probability: Low

        Severity assessment: Low/moderate: some disruption to Agency operations; little or no impact on the safety of the public or Agency personnel.

        Status of Y2K Compliance Efforts:

        All of these systems have been checked for Year 2000 hardware and software compliance.

        Contingency Plan:

        Day 1 (January 1, 2000) Plus 13 - within first 2 weeks:

        Since a failure of the Headquarters backbone would isolate the field offices in a fashion similar to a WAN failure, the first three steps would be the same.

        2.B.1) All offices would be instructed to send vital inter- and intra-agency communications via facsimile. Transmission of routine inter-office communications would be suspended until the situation was rectified.

        2.B.2) Access to mainframe-based Agency and departmental systems (FMIS, IPPS, DAFIS, etc.) would be via modem direct dial-in to TCC rather than over the WAN.

        2.B.3) An E-Mail account for each field office would be set up on a central Headquarters GroupWise 5.5. e-mail server accessible over the Internet via browser. Remote offices would be authorized to set up an account with a local Internet Service Provide (ISP) for this purpose.

        2.B.4) The GroupWise server identified in step 2.B.3. above would be moved to the DOT IDN network. Dial-in access and accounts would be provided for Headquarters offices.

        2 weeks to 90 days:

        Critical users would be migrated back to the older backbone fiber distributed data interface (FDDI) network utilizing un-intelligent equipment that has no date sensitivity. If the FHWA segment of this network were to be unavailable, the hubs would be directly connected to the IDN backbone.

        91 days & after:

        All failed equipment would be replaced by compliant equipment.

      2C. Network Operating System

        The primary network environment used in FHWA is Novell Netware. Version 3.12 was the standard Network OS used on all servers through 1998. The Agency obtained a Master License in FY 1997 for IntraNetware 4.11 and began migration planning and testing; formal implementation commenced in FY 1999 and is scheduled to be completed by the end of calendar year 1999. Novell has stated that Intranetware 4.11 is Year 2000 compliant.

        Y2K Risk Assessment:

        Occurance probability: Low

        Severity assessment: Low/moderate: some disruption to Agency operations; little or no impact on the safety of the public or Agency personnel.

        Status of Y2K Compliance Efforts:

        Both versions of the software (3.12 and 4.11) have been patched in accordance with Novell's instructions and tested internally by setting dates forward.

        Contingency Plan:

        (Assuming isolated failures at particular servers)

        Day 1 (January 1, 2000) Plus 13 - within first 2 weeks:

        Users would operate as standalone desktops with locally installed software. The Corel 8 Suite (including Wordperfect) is installed on each PCs hard drive and therefore could continue to be used without the LAN file server being operational. Printers would be connected to individual workstations. As the Wide Area Network would be operable, connectivity to enterprise Agency systems would be maintained. E-mail accounts would be set up on a central Headquarters Web-accessible server.

        2 weeks to 90 days:

        Equipment and software would be updated and/or replaced, if necessary by re-configuring an existing workstation as a server.

        91 days & after:

        Same as above.

        NOTE: In case of a system failure of the Novell Networking Operating System, the Agency would transition to a Windows NT Server; however, the probability of such an occurrence is minute.

  3. Desktop Environment: underlying base hardware and operating systems for personal computing

      3A. Desktop Operating System

        The basic Agency PC operating system is Windows NT 4.0. NT 4.0 software is itself Year-2000 compliant (with exceptions) and offers additional safeguards that can offset deficiencies in the underlying hardware BIOS and real-time clock.

      3B. Standard PC Workstations

        Based on internal requirements, such as the common software baseline, industry innovations and standards, current market conditions and the strategic direction set by the ITSC, the Information Technology Division periodically issues revised standard workstation specification. This specification is used as a baseline by program offices (with any necessary additions and revisions required to fulfill individual mission requirements) to purchase computer workstations in compliance with each office's approved annual IRM Plan. Beginning in FY 1997, the base specification included a requirement for Year 2000 compliance in BIOS and operating software supplied with new PC's purchased for FHWA.

        In addition, the Agency has periodically specified a minimum standard for all PC workstations in order to support it software base. Typically the minimum specification includes acceptable processor chips and speed, minimum memory (RAM), and hard disk size. This minimum hardware specification was last updated in 1998 to support Windows NT 32bit-based applications and specified a Pentium Intel processor with 32M of RAM and 500 Mbytes of hard disk space.

        Y2K Risk Assessment:

        Occurrence probability: Moderate in isolated cases; very low as a system-wide problem.

        Severity assessment: Low: Some disruption to Agency operations; no foreseeable impact on the safety of the public or Agency personnel.

        Status of Y2K Compliance Efforts:

        FHWA has migrated its standard desktops to the Y2K compliant version of Windows NT and will continue to monitor the Y2K status of the software and apply any future patches as they are released by the software vendor. For example, FHWA will apply NT 4.0 service pack 5 on its servers this summer to correct Y2K deficiencies identified by Microsoft.

        Contingency Plan:

        (Assuming isolated problems)

        Day 1 (January 1, 2000) Plus 13 - within first 2 weeks:

        Re-assign functional machines to critical personnel.

        2 weeks to 90 days:

        Obtain replacement systems.

        91 days & after:

        Same as above.

  4. Baseline Software: Common standard software the FHWA uses for sharing information.

      As a consequence of its shift to a 32-bit desktop operating environment (see above) the FHWA evaluated a set of baseline COTS software applications for use throughout the Agency. As part of this process, documents were obtained from each of the candidate software vendors verifying their current compliance or intentions to comply with Year 2000 standards. The Corel WordPerfect 8 Suite was selected and agency-wide licenses for the new standard baseline packages were negotiated in FY 1998.

      Baseline software includes:
      Category Former Standard 32-bit Standard
      E-Mail /Office Automation GroupWise 4.1 (Novell) GroupWise 5(Novell) being

      installed with Novell

      IntraNetware 4.11 11/97-12/99

      Word Processing WordPerfect 6.1 (Corel) WordPerfect 8 (Corel)
      Spreadsheet ".wk1" format; no specific package. Quattro Pro 8 (Corel)
      Presentation Graphics Powerpoint (Microsoft) selected 1996.

      Still supported as "alternate" for specific users.

      Presentations 8 (Corel)
      Database .DBF format; no specific package. Paradox (Corel)
      Electronic Forms Informs 4.0 (Novell) Informs 4.3 (Novell)
      Web Browser Netscape (Corel) Netscape (Corel)

      Internal/External Interfaces:

      Not applicable for personal computer hardware which is used in a large number of contexts, but date-related interfaces are software dependent.

      Generally COTS software is used to develop or enable interfaces to some systems, but is not normally considered part of that system. No specific dependencies relating to mission critical systems have been identified.

      Electronic Mail (E-Mail) may be considered to be an exception to the statement above. Handling of date formats for messages to/from external systems can affect retention and automatic deletion of messages.

      Note: While overall, the COTS software packages for word processing, spreadsheets, and database form one basis for producing and exchanging information within the Agency, none of these are part of a designated mission critical system for personnel, finance, program, or grant administration, etc.

      Y2K Risk Assessment:

      Occurrence probability: Low.

      Severity assessment: Low/moderate: some disruption to Agency operations, little or no impact on the safety of the public or Agency personnel.

      Status of Y2K Compliance Efforts:

      The FHWA has upgraded to the latest versions of all COTS software and obtained statements of Y2K compliance from the vendors. FHWA will continue to monitor the Y2K status of the COTS software and apply any future patches as they are released by the software vendors.

      Contingency Plan:

      Day 1 (January 1, 2000) Plus 13 - within first 2 weeks:

      Restore affected files from backup.

      Determine incompatibility cause.

      The Corel 8 Suite (including WordPerfect) is installed on each PCs hard drive and therefore could continue to be used without the LAN file server being operational.

      2 weeks to 90 days:

      Apply fixes, contact vendor for updated software.

      91 days & after:

      Obtain and migrate to alternative software package.

System Name: Contracts and Procurement Information System (CPIS)

Description:

Internal/External Interfaces:

Y2K Risk Assessment:

Status of Y2K Compliance Efforts:

Contingency Plan:

System Name: Fiscal Management Information System (FMIS)

Description:

Internal/External Interfaces:

  1. DAFIS Format 3 - The Format 3 files are created from FMIS and interfaced to DAFIS. OST reports that the format for the DAFIS Format 3 will not change - dates will remain 2 digits.

  2. Electronic Data Sharing FMIS Input Record - FHWA has a set format for receiving information from State DOTs. The format for this record will not be changed.

  3. Electronic Data Sharing FMIS Output Record - FHWA has a set format for providing information back to the State DOTs. The format for this record will not be changed.

  4. DOT Grant File - FMIS provides OST with a Grant File. OST reports that the format for the Grant file will not be changed.

Y2K Risk Assessment:

Status of Y2K Compliance Efforts:

Contingency Plan:

System Name: Highway Performance and Monitoring System (HPMS)

Description:

Internal/External Interfaces:

Y2K Risk Assessment:

Status of Y2K Compliance Efforts:

Contingency Plan:

System Name: Motor Carrier Management Information System (MCMIS)

Description:

Internal/External Interfaces:

Y2K Risk Assessment:

Status of Y2K Compliance Efforts:

    MCMIS has been renovated for Y2K compliance:

  1. Several programs that were deemed to be obsolete by the system owners were archived.

  2. Programs that were renovated before the Y2K compliant system date function was available were renovated using windowing.

  3. Programs that were renovated after the Y2K compliant system date function was available were renovated to use the system date function.

    Final testing to confirm Y2K compliance of the MCMIS database was completed on March 31, 1999. MCMIS has been thoroughly tested and put into production.

Contingency Plan:

System Name: National Bridge Inventory System (NBIS)

Description:

Internal/External Interfaces:

Y2K Risk Assessment:

Status of Y2K Compliance Efforts:

Contingency Plan:

System Name: Personnel Management Information System (PMIS)

Description:

Internal/External Interfaces:

  1. CPMIS data - FHWA receives from CPMIS monthly files containing employee master data, history data, and separations data. OST reports that the format for these files will not change.

  2. Budget Tracking System - This file is created from the CPMIS data and used to produce Full time Equivalency, salary projection, Grade Analysis etc. Its format will not change.

Y2K Risk Assessment:

Contingency Plan:

Table of Contents


FHWA Home | The Year 2000 Computer Problem | Feedback
FHWA
United States Department of Transportation - Federal Highway Administration