We recommend the DHS Office of the Chief Security Officer determine, with the aid of the Office of Program Accountability and Risk Management, whether the expanded ITP is an acquisition program, what level of acquisition program it is using a Rough Order Magnitude or other Cost Estimate, and where the program is in the Acquisition Life Cycle. Determine, along with the Office of Program Accountability and Risk Management, the acquisition documentation required for the Acquisition Life Cycle Framework phase the program is in.