State University of New York SA General Update. June, 2014 Dave Powalyk, Chief Transformation Officer and CIO Carey Hatch, Associate Provost 1

Transcription

1 State University of New York SA General Update June, 2014 Dave Powalyk, Chief Transformation Officer and CIO Carey Hatch, Associate Provost 1

2 SUNY Technology Conference Session highlights BI Data and Reporting Update (Wed 8:00 am) Security - ISO Roundtable ISO Roundtable (Wed 11:15am) SOC, Compliance, Log Mgmt Federation/Idm Update (Thur 10:15) Contracts Update (SUNY only meeting) Wed 4:00pm SPSS, Adobe, VMWare, others specifics Degree Works Roundtable (Thurs 8:00 am) BYOD Legal and Contracts Roundtable (Thurs 10:15 am & 11 am) (SUNY Only meeting) 2

3 Agenda Topics for today Brief Update regard Data availability via BI Standard Data Dictionary (Jean Boland - Lead) Data Center Strategy Team Update Security Operations Center Conversations Provost Office Update Carey Hatch 3

4 Business Intelligence Existing Direction Setting Current State Campus User Campus Committee SysAdmin Executive Staff Outside Entities OSC OGS DOB CS RF CF Legislators Finance & Management Human Resources Provost Office Enrollment Management Office of Information Technology Data Warehouse Development Groups Minimal communication between all groups Department / End-User focused Minimal cross functional analysis available Multiple requests for the same information Data structures reworked multiple times 4

5 Better Coordination Driving Towards U-Wide Steering Committee RESPONSIBILITIES Coordinate broader communication and requirements gathering Increase awareness Align focus and defined benefits toward meeting campus and System Offices needs Subject Matter Steering Committee(s) Set priorities Identify campus managerial requirements Subject Matter Working Committee(s) Identify requirements Test/Approve deliverables Office of Information Technology Development Group(s) Convert requirements into deliverables 5

6 Access to BI - As Of June, 2014 OBIEE Access 794 People 60 Campuses have access to the Analysis tool 2,252 People 62 Campuses have access to at least one dashboard You can contact the Center for Professional Development (CPD) for further information on OBIEE Analysis training. We have scheduled regional training in the past. 6

7 BI Reporting Capabilities Data Available Now Active Initiatives Future Development Ad-Hoc Queries Analysis Security (IdAM) Cohort Tracking Academic Programs Degree Enrollment Course Data Transfer SUNY Data Warehouses Transfer Mobility Transfer Student General Education Legislative Data HR / Payroll CC Financials Library EM FIN HR IR Financial SUNY Report Card Applicant Course Equivalencies SEO Degree Works HR / IPEDS Human Resource MISC EXT???? Financial Aid Student Engagement Procurement Executive Info ALL FUNDS?? WHAT S NEXT?? 7

8 SUNY-Wide Standard Data Dictionary Project Phase Flowchart Consistent, standard data helps achieve University-wide academic services like Open SUNY, cross-registration, Integrated Student Systems, and mobility. Methodology permits each SUNY college and System Administration to determine when and how to migrate to the SUNY-wide data standard. The order of the data being defined can be easily altered to accommodate the critical priorities of SUNY. Compliance with State, National, or International standards when available. Input and feedback from system administration and all 64 colleges is gathered before the data standard is finalized. 8

9 SUNY-Wide Standard Data Dictionary Project Phase Flowchart Process Repeats for Each Phase: Draft Pre-Review Post Pre- Review In-Review Post Review Production Phase III Data Next: Phase II Data to Pre- Review Colleges for Next: Phase I Data to all 64 Colleges for feedback

10 Data Center Strategy Initiative Team Members Team Co-Chairs (voting member): StoP (UB s Director IT) Saira Hasnain CC CIO Broome CC John Petkash SUNY CIO Dave Powalyk Team members (voting member): Amy Berg, CIO Cortland Chris Haile, CIO UA Jon Lewit, CIO New Paltz Sue Chichester, CIO Geneseo Dennis Michaels, CIO NCCC Greg Roth, CIO FMCC Mike Notarius, CIO ITEC Business Officers Liaison (VP s) Bill Schicking, NCCC (CCBOA) Lyle Gomes, Stony Brook (SUBOA) Shared Service Liaison Laura Stetson (Director SS) Team Staff Assistants Mike Plowinske and Heather Soroka 10

11 Data Center Strategy Team Activities to date: Consolidated the CCIO service catalog with AST Service catalog creating roughly 134 identified services Evaluated facilitator opportunities and selected a facilitator that appears align with the team s methodology Conducted an initial working session with the facilitator to validate CIO s identified their individual considerations, criteria, etc. that become part of their decision process regarding selecting their service delivery method Attempting to prioritize those considerations and identify variations in campus capabilities (we will call these profiles) We expect the facilitator to walk us through their methodology toward recommendations for more consistent service delivery outcomes 11

12 Identifying opportunities for service delivery Phase Activities and Tasks SUNY Team working with a facilitator Assess Strategize Plan Current State Profile Business and Academic Requirements Opportunity and Gap Identification Analysis Develop Options Select Target Scenarios Identify Initiatives and Project Definition Develop Roadmap Gather and review documentation, such as Plans, standards, processes, organization Services / Applications Portfolio Service delivery capability Business and Technical Requirements Conduct multiple work sessions and interviews, as required Develop business and technical requirements Collect additional data as necessary Document current state Document criteria and campus profile groupings Summarize data gathered Common criteria by campus profile Assumptions for data not available Develop a list of target state scenarios for consideration Conduct work session to present findings, impacts and identify options Evaluate options Prepare and recommended target scenarios Review and select options for transition planning Finalize recommendation Develop high-level roadmap to implement the recommended target state Define projects, timelines and key dependencies Prioritize and sequence into roadmap

13 SOC Operational Focus Critical Incident Response Assurance that proper procedures are being followed Best Practice Configurations Specific commands and syntax Log Management and Reporting SEIM Capability similar to Log Rhythm, Splunk Log Monitoring Service Service similar to MS-ISAC Symantec offering Vulnerability Scanning Resource available to support general security compliance Penetration Testing Experienced penetration testing professional, White hat Security Audits Aligned with SUNY Auditor s office Breach Insurance Version 1.1 created 6/12/14 13

14 SOC Policy Focus Policy Document Framework Boilerplate policy documents Easily customized by campuses Aligned with SUNY s overarching security policies Vetted Security Vendors Familiar with SUNY Contractual arrangement and Ts & Cs would already be spelled out Easily engage with these vendors as needed Vendor agnostic best practice network configurations Standardized Risk Assessment/Compliance Evaluation Specific compliance requirements (NYS, PCIDSS, HIPAA, FERPA, FEDRamp) Provide relevant checklists Self assessments (CIO level view) Version 1.1 created 6/12/14 14