University Academic and Administrative Information Technology Steering Committee



Similar documents
2014 HIMSS Analytics Cloud Survey

University of North Carolina at Greensboro

Service Catalog. it s Managed Plan Service Catalog

Personal Security Practices of the CAO

Information Technology Strategic Plan /23/2013

The ABCs of DaaS. Enabling Data as a Service for Application Delivery, Business Intelligence, and Compliance Reporting.

Validating Enterprise Systems: A Practical Guide

LAMAR STATE COLLEGE - ORANGE INFORMATION RESOURCES SECURITY MANUAL. for INFORMATION RESOURCES

Picasso Recommendation

Sage Nonprofit Online and Sage Virtual Services. Frequently Asked Questions

How Much Cyber Security is Enough?

ISAAC Risk Assessment Training

Top 10 Tips and Tools for Meeting Regulatory Requirements and Managing Cloud Computing Providers in the United States and Around the World

Enabling Storage Services in Virtualized Cloud Environments

State of Oregon. State of Oregon 1

QRadar SIEM 6.3 Datasheet

ITIL's IT Service Lifecycle - The Five New Silos of IT

TOP 10 WAYS TO ADDRESS PCI DSS COMPLIANCE. ebook Series

CONTENTS. Abstract Need for Desktop Management What should typical Desktop Management Software do? Securing Desktops...

The Cost of Payment Card Data Theft and Your Business. Aaron Lego Director of Business Development

IBM Enterprise Asset Management

Summary of Current ITMP Projects by Status. Summary of All ITMP Projects by Status (136 current plus 18 new initiatives)

Technology Services Strategic Direction

Secure Cloud Computing Concepts Supporting Big Data in Healthcare. Ryan D. Pehrson Director, Solutions & Architecture Integrated Data Storage, LLC

Enabling Compliance Requirements using ISMS Framework (ISO27001)

Designing and Deploying Cloud Solutions for Small and Medium Business

SOFTWARE AS A SERVICE (SaaS)

Infrastructure Technical Support Services. Request for Proposal

Program Summary. Criterion 1: Importance to University Mission / Operations. Importance to Mission

STRATEGIC IT ACCOUNTABILITY BOARD (SITAB) AGENDA WEDNESDAY, JUNE 15, :30 3:30 p.m. STARK LIBRARY

Information Security Program CHARTER

HIPAA CRITICAL AREAS TECHNICAL SECURITY FOCUS FOR CLOUD DEPLOYMENT

Information Technology Cluster

Appendix B7. Master Data Management Business and Technical Requirements Solicitation No.: YH Page 229

Service Catalog Bootcamp

Swansea University. ICT Infrastructure Strategic Plan:

DESIGN BUILD TEST TRAIN/DEPLOY MAINTENANCE

Boosting enterprise security with integrated log management

Securing the Service Desk in the Cloud

Strengthen security with intelligent identity and access management

This white paper describes the three reasons why backup is a strategic element of your IT plan and why it is critical to your business that you plan

Cloud Computing Risks & Reality. Sandra Liepkalns, CRISC sandra.liepkalns@netrus.com

IBM QRadar Security Intelligence April 2013

General HIPAA Implementation FAQ

DELIVERING CUSTOMER COMMUNICATIONS IN A DYNAMIC MARKETPLACE. A Madison Advisors White Paper June 2013

PCI DSS Reporting WHITEPAPER

Viewfinity Privilege Management Integration with Microsoft System Center Configuration Manager. By Dwain Kinghorn

Scalability in Log Management

Citrus College. Technology Master Plan Adopted 2011

Strategic Plan FY

REMOVING THE BARRIERS FOR DATA CENTRE AUTOMATION

Software Asset Management (SAM) and ITIL Service Management - together driving efficiency

Information Security Program

TNHFMA 2011 Fall Institute October 12, 2011 TAKING OUR CUSTOMERS BUSINESS FORWARD. The Cost of Payment Card Data Theft and Your Business

Security at Your Fingertips.

Transformation of POS Operations at

QRadar Security Management Appliances

Subject: Overview of Information Technology Services and the Strategic Technology Plan. Proposed Committee Action No Action Required Information Only.

IT Vendor Due Diligence. Jennifer McGill CIA, CISA, CGEIT IT Audit Director Carolinas HealthCare System December 9, 2014

AUSTIN PEAY STATE UNIVERSITY RFQ Web Conferencing and Collaborative Classroom Questions & Answers

Software Licensing and Pricing Best Practices. Stewart Buchanan June 3, 2009 Gartner Webinar

Computer Information Technology

Cloud Contact Center. Security White Paper

NET ACCESS HIPAA COMPLIANT FLEXCloud

Vermont Enterprise Architecture Framework (VEAF) Identity & Access Management (IAM) Abridged Strategy Level 0

Symantec Control Compliance Suite Standards Manager

8 Key Requirements of an IT Governance, Risk and Compliance Solution

Enterprise Information Technology Security Assessment RFP Answers to Questions

What is Security Intelligence?

Asset management guidelines

The Push and Pull of the Cloud. TPI Cloud Computing Overview. April 5 th 2011

Cloud Security and Managing Use Risks

Cloud Computing: Contracting and Compliance Issues for In-House Counsel

How To Manage A Shared Server Management Service At Texas Tech University

Bottom line you must be compliant. It s the law. If you aren t compliant, you are leaving yourself open to fines, lawsuits and potentially closure.

Healthcare IT (HIT) Strategic Planning & Budgeting MARCH 26, 2014

Information Technology Policy

micros MICROS Systems, Inc. Enterprise Information Security Policy (MEIP) August, 2013 Revision 8.0 MICROS Systems, Inc. Version 8.

SMS. Cloud Computing. Systems Management Specialists. Grupo SMS option 3 for sales

Transcription:

University Academic and Administrative Information Technology Steering Committee Monthly Status Report for October, 2013 I. New IT Investment Proposals 1. QRadar Security Monitoring System Sponsor: Dan Han, Institutional Security Officer Description: Procure additional component license and upgrade existing QRadar system capability Schedule: One month to implement (December 2013 - January 2014) Resources: Information Security Office staff, Technology Services staff Audience: ISO, local administrators of information technology security Benefits: Improve monitoring of risks and vulnerabilities that affect VCU s information technology assets, and provide better data to aide decisions regarding those risks 5-Year Cost: $212,400 ($118,000 initial, $94,400 four-year maintenance) Funded: Yes (HEETF) Recommendation: APPROVE 2. Server and Storage Architecture for MOOCs Sponsor: Gardner Campbell, Vice Provost for Learning Innovation and Student Success Description: Implement the WordPress Course Site and build an online learning community for MOOCs beginning in Summer 2014 Schedule: November 2013 - Spring 2014 semester Resources: Staff from the Office of Online Education and Office of the Vice Provost for Learning Innovation and Student Success Audience: Students and faculty Benefits: Model and showcase a distinctive, high-engagement online learning environment 5-Year Cost: $90,000 ($18,000 per year license fee) Funded: Yes Recommendation: APPROVE 3. Secure Cloud Storage and Collaboration Solution Sponsor: Michael Duong, School of Medicine Technology Services Description: Implement a secure and HIPAA compliant cloud storage and collaboration solution to ensure PII and PHI information is secure

2 Schedule: Spring 2014 Resources: Audience: Benefits: through contractual agreements and through advanced auditing, monitoring and management tools. Central IT Staff Requirements: Information Security staff to perform security assessment; eid/ Windows active directory analyst for AD integration; Networking analyst to ensure connectivity and appropriate network security. SOM Technology Services: SOM Information Security and Infrastructure Services staff will be involved in all phases of the project form planning, deployment and ongoing administration; SOMTech Desktop Support Analysts will be involved in daily support. School of Medicine faculty and staff and other units that must comply with similar regulatory requirements across the university. 1. Reduce the use of personal and free cloud storage for work purposes 2. Standardize on a secure cloud storage and collaboration solution for housing and sharing very sensitive data 3. Compliance with regulatory requirements such as HIPAA/HITECH and others 4. Reduce the risk of data breaches 5. Reduce administrative overhead in investigating potential data breaches that involve data stored in the cloud and access from many end points 6. Allow for the auditing and technical controls of data types 5-Year Cost: >$50,000 (estimated) Funded: Yes (Pilot only) Recommendation: Hold for Consideration (final decision in November 20 th meeting)

3 Infrastructure and Operations Portfolio Project/Sponsor Cost Funded Benefits Description 1. Redundant Fiber Connection / $189,000/ Y $0 yearly Eliminate single point of network failure risk Vendor will install second fiber optic connection 2. Telephone Equipment and Billing System / $225,000/ Y $28,000 yearly Primary operations system for Telecommunications office Replace current system (Pinnacle) losing vendor support 3. LANDesk Customer Management System / $150,000/ Y $120,000 yearly Improved user experience, elimination of duplicative solutions, integration with current software suite Replace current system (Remedy), savings to partially fund new system 3. RedCap Survey Tool Support / Center for Clinical and Translational Research $100,000 yearly N (salary + benefits) Improved service to all users of RedCap survey software Request to add staff (1) required to fully support RedCap survey tool 4. Point- Of- Sale System for Technology Store $17,250 initial/ Y $2,000 yearly Support sales and administrative activities of new technology retail outlet Business Services to implement the LightSpeed POS system 5. QRadar Security Incident Monitoring System 6. Serve and Storage Architecture for MOOCs $118,000 initial/ Y $23,600 yearly $18,000 initial/ Y $18,000 yearly $817,250 initial $291,600 yearly Improve monitoring of risks and vulnerabilities that affect VCU s information technology assets, and provide better data to aide decisions regarding those risks Model and showcase distinctive, high- engagement online learning that leads to deep learning NOTE RedCap support funding is not identified Information Security Office to procure additional components and upgrade QRadar Implement the WordPress Course Site and build an online learning community for MOOCs beginning in Summer 2014

4 IN QUEUE 1. Network Equipment Replacement / 2. e911 System / Telecommunications $390,000 Y Maintain reliable network $131,400 Y Provide number and location data for all 911 calls Replace 110 network switches reaching end of life Replace existing system losing vendor support 3. Internet Upgrade / $50,000 / Y $40,000 yearly Increase aggregate bandwidth from 3.5Gbps to 5 Gbps Upgrade total Internet connection 4. Move Blackboard LMS to hosted solution / $318,000 Y Eliminate hardware costs and reduce staff time to support Move Blackboard from VCU- supported platform to vendor- supported Business Process Automation and Improvement Portfolio Project/Sponsor Cost Funded Benefits Description 1. Grants Management System/Office of Research Administration $670,000 / Y $35,000 yearly Improve grant submission and award management processes Implement Click Commerce system 2. Animal Resources System / ORA $437,000 / Y $20,000 yearly Improved functionality in animal resource management Implement Click Commerce system 3. Time and Attendance System / Human Resources $262,000 / Y $26,900 yearly Automated attendance and leave recording; improve FLSA compliance Implement TimeClock Plus system 4. Hobsons Apply Yourself / Strategic Enrollment Mgmt 5. Visa Management System / Global Education Office $100,000 + / Y $25,000 yearly $60,000 / Y $10,000 yearly Improve graduate application process Automate reporting of student/staff/faculty visa information to SEVIS Purchase off State contract, configure and implement hosted solution Implement the Sunapsis system from Indiana University

5 6. Career Services Technology Platform / University Career Center 7. Course Evaluation / Center for Teaching Excellence IN QUEUE $125,000 Y Improve ability for students to perform job searches $90,000 / Y $18,500 yearly $1,744,000 initial $135,400 yearly Improved instrument, more student data Partner with School of Business and School of Engineering to procure hosted solution Implement the explorance Blue system 1. ImageNow site license/ Technology Services 2. Customer Relationship Management System / Development & Alumni Relations $1.1 - $2 million N Remove funding barrier for schools and departments; leverage functionality $300,000 + (est.) Y Improve communications management to support fundraising and alumni relations Convert per user license to site license Issue an RFP to replace current Mellinum CRM system Innovation Portfolio Project Cost Funded Benefits Description 1. Research Opportunity and Application System / Center for High Performance Computing $60,000 Y Provide researchers ability to post research opportunities and students to apply for them Quest for Distinction funded project to be developed by Nihar Sheth $60,000

6 Non- Discretionary Portfolio Project Cost Funded Benefits Description 1. Security Camera Upgrade / VCU Police $ 1,200,000 Y Upgrade existing cameras and install 300 additional ones Improve surveillance and the ability to identify suspects $1,200,000 Other Issues for ELT: No issues identified.