center for information technology services (cits) … for information technology services (cits)...

~ .............:

Ill UNIVERSITYaf MARYLAND ~

Center For Information Technology Services

(CITS)

Plans, Projects, & Roadmaps for

FY2017 & Beyond

~ .............:


Themes of New Strategic Plan Theme 1 - Health, Justice, and Social Impact

Objective: Deepen local engagement and expand global impact by providing health, legal, and social work services and programs

that promote social justice and reduce health disparities.

Theme 2 - Scholarship and Discovery

Objective: Harness the power of scholarship for discovery and innovation in the search for solutions to complex problems

impacting the human condition.

Theme 3 - Innovative Teaching and Learning

Objective: Design a contemporary teaching and learning environment to ensure that students receive education and training that

distinguishes them as professionals and leaders in society.

Theme 4 - Inclusive Excellence

Objective: Sustain an environment that recognizes and values each member of the University community, enabling members to

function at their highest potential to achieve their personal and professional goals.

Theme 5 - Partnership and Collaboration

Objective: Strengthen internal and external affiliations to leverage complementary expertise and purposes to maximize impact to

benefit the people of the State and society at large.

Theme 6 - Efficiency, Effectiveness, and Assessment

Objective: Institutionalize efficiency, effectiveness, and assessment to make more responsible and impactful use of University

resources.

Center for Information Technology Services (CITS)

~ .............:


Summary of IT Stakeholders Initiatives

1. Microsoft Office 365

2. Federated Identity Management

3. Enhanced Financial Decision-Making and Reporting

4. Expanding Resources for Faculty Teaching and Learning Using Technology

5. Information Security Collaborative

6. Help Desk Integration and Support

7. Data Management Plan & Strategy


~ .............:


Major Security & Compliance Initiatives

• PCI Com liance for 50 Merchant IDs across cam us – 6/30/17

• Resume IT assessments: ID Finder and Nessus for cam us

• OLA Recommendations/Follow u

– Co ier Data Destruction

– Publicly Accessible Systems

• Review new USM IT Security Standards for com liance

• Com lete DUO (Multi-factor Authentication) im lementation

for securing sensitive data


~ .............:


Security & Compliance Timeline

Task Name 2016 2017 2018 2019

Q1 Q2 Q3 Q4 Q1 Q2 Q3 Q4 Q1 Q2 Q3 Q4 Q1 Q2 Q3 Q4

IT Security Assessments Ongoing

Campus Vulnerability Scans Ongoing

PCI Compliance (~50 Merchant ID's)

OLA/USM Audit Findings Resolution

Review USM IT Security Standards v4.0

UMB Collaborative Activities Ongoing

DUO Implementation

Sunapsis

PeopleSoft

Banner

"Other" Systems


~ .............:


Major Enterprise Applications Initiatives • Re-evaluate LMS solution: Bb vs. other products (on premise vs. cloud solution)

• PeopleSoft Financial System Replacement with a Cloud solution

• Enterprise Analytics and reporting solution – Helio pilot

– CDW and Power BI pilot

– UMCP Data Warehouse solution

• Preparing Banner for XE

• Kuali-Coeus to the Cloud

• QuestionMark to the Cloud

• Archibus Upgrade

• MyMediasite campus planning and rollout

• Multi-factor (DUO) rollout for sensitive data users

• Academic Affairs Projects – Sunapsis (International Students/Scholars Visa management) integration and rollout

– Customer/Student Relationship Management and Recruitment

• HR modifications to accommodate new FLSA regulation changes


iii:::;. MARYLAND Ill UNIVERSITYaf ~

--- --- -----�-----�� - --------� -- --- ------- --- ---

Upgrade Timeline Plan For Enterprise Applications

Task Na e 2016 2017 2018 2019

Q1 Q2 Q3 Q4 Q1 Q2 Q3 Q4 Q1 Q2 Q3 Q4 Q1 Q2 Q3 Q4

Evaluat LMS options (Cloud/on Pr mis )

R plac PS Financials with Cloud solution

Ent rpris Analytics/R porting solution

Pr par for Migration to XE

Migration to Kuali-Co us (Cloud syst m)

Qu stionMark to th Cloud

Archibus Upgrad

MyM diaSit planning and rollout

Multi-Factor for s nsitiv data us rs

AA - Sunapsis proj ct

AA - CRM

FLSA HR R gulation chang s

Maximus Upgrad

HRMS R plac m nt/Upgrad D cision


~ .............:

Ill UNIVERSITYaf MARYLAND ~ Major Infrastructure Services Initiatives

• Office 365 – Include Schools: Implement Core Services

– Framework for SharePoint

– Nursing Migration to Campus Domain

• Upgrade IronPort

• Build Infrastructure for Facilities Management Building Monitoring System

• Replace UPS Infrastructure at 300 W Lex

• Replace HVAC in HS/HSL and put on emergency power

• Revamp Eduroam infrastructure

• Implementation of DR/VMware at 300 W Lex

• HVAC Assessment of aging equipment at 300 W. Lex

• AWS Contract: – Finalize UMB Contract

– Develop Networking Architecture and Deployment Plan

– Research Infrastructure as part of our Partnership w/UMCP (Including HPC)

• Standardize Virtual Linux and Management Tools

• Support Infrastructure for Enterprise, Web, Directory Services, and Security Initiatives

• Data Management Plan: we need to recommend where data should be stored

• Enhance the core research infrastructure


~ .............:

111 UN IVERS I TY of MARYLAND ~

Dept/School Unification Prep Server Integration

Central Administration

Public Safety

Law Social Work

HS/HSL Pharmacy

Dental

Nursing Medicine

In Progress

8/29/2016,

9/19/2016,

10/31/2016 Fall 2016

In Progress

10/10/2016

11/21/2016 Fall/Winter 2016

1/2/2016

Invitation Start

10/31/2016

12/12/2016 Winter 2016

1/23/2016

Unification Target Completion

Mid October 2016

Mid Nov 2016

End of Nov 2016

End of Jan 2.017

Spring 2017

Spring 2017

Major Identity Management Initiatives

• Unifi d Dir ctori s & O365 Start Dat

Ongoing

Ongoing October 2016

October 2016

November 2016

December 2016

February 2017

Spring 2017

Spring 2017

• F d rat d Id ntity Manag m nt Stak hold r Initiativ – Unified Directories (exce t SOM) constitutes Phase 2 of this roject

• Shibbol th 3.x upgrad – Native su ort for Multi-Factor Authentication (DUO)

– Peo leSoft to be integrated with Shibboleth and first a lication to require MFA

• R -archit cting Eduroam Auth ntication – Move away from [email protected] to Email Address (same as O365)

– Have an enter rise AD-authentication o tion for a lications & services (already being used by 5 a s/services)


mailto:[email protected]

~ .............:


Major ID Management & Support Initiatives

• Helpdesk Integration and Support Stakeholder Initiative – Continue Service Desk rollout through schools and depts.

• Complete = CITS, SOP, SON, SOM – IS Dept

• Planning or Underway = SSW, SOD, SOL, SOM – Medical Education, SOM – Surgery, SOM – Dept of Medicine, SOM – Psychiatry, HSHSL, Facilities & Public Safety, FPI

– Expand use of Service Desk within CITS for requests for support/service traditionally captured in email/shadow systems

• Security & Compliance = Identity Finder notifications, Malware notifications, Remediation Tracking

• Datacomm = DNS/Firewall requests

• Web Development = [email protected] to route to NSD

• IT Helpdesk – Expanding coordination between other support groups via NSD

• Software Licensing Office – SAS: USM Site License w/new Products

– Electronic purchasing site – eliminate paper, improved reporting, order creation & status

– Evaluating new titles • Talking with UMCP about leveraging their site licenses


mailto:[email protected]

II ------1 - ----1

I

----1 - -

1 - --

1 - -

1 � --1 --1 -I

Timeline for Major ID Management and Support Initiatives 2015 2016 2017 2018

Tasks Q3 Q4 Q1 Q2 Q3 Q4 Q1 Q2 Q3 Q4 Q1 Q2 Q3 Q4

Helpdesk Integration Stakeholder Initiative

Creation of IT Support Steering Committee

Design and implement common incident management

system - NSD

CITS, SOP, SON transition to NSD

SOM - IS Dept transition to NSD

SOL, SSW, SOM - Medical Education transition to

NSD

SOD, SOM - Surgery/Medicine/Psychiatry transition

to NSD

HSHSL, FPI transition to NSD

Unified Directories @ UMB

Design and implement Identity Manager system

Connect CITS OU in Campus Domain

Connect all OU's in Campus domain

Connect Law domain

Connect SSW domain

Connect HSHSL domain

Connect RX domain

Connect Dental domain

Connect Nursing OU (SON to join Campus domain)

Analyze process for creating Student OU in AD

domain(s)

---

Timeline for Major ID Management and Support Initiatives

2015 2016 2017 2018

Tasks Q3 Q4 Q1 Q2 Q3 Q4 Q1 Q2 Q3 Q4 Q1 Q2 Q3 Q4

Office 365 - Email, Skype, OneDrive

Design and implement O365 architecture

Migrate CITS OU in Campus Domain

Migrate all OU's in Campus domain

Migrate Law domain

Migrate SSW domain

Migrate HSHSL domain

Migrate RX domain

Migrate Dental domain

Migrate Nursing OU (SON to join Campus

domain)

Analyze process for provisioning O365

accounts for Students

___________ _.._____,_I ____._____._I_.__I _.__I _.._____._I ___.I I I I I

---------------------- -----�----�� -�� --- ------

Timeline for Major ID Management and Support Initiatives

Tasks

2015 2016 2017 2018

Q3 Q4 Q1 Q2 Q3 Q4 Q1 Q2 Q3 Q4 Q1 Q2 Q3 Q4

Federated Identity Mgt Stakeholder Initiative

Design and implement architecture

Connect Campus Forest (all domains)

Connect CICERO and CITI Training applications

Connect SOM Forest

Connect FPI Forest

Multi-Factor Authentication

Design and implement architecture (Shib 3.x)

Sunapsis (Visa Mgt)

eUMB

Banner

Other Major Projects

Expanding the use of UMID

Shibboleth 3.x upgrade

Re-architecting Eduroam authentication & architecture

Software Licensing - web app for department/school sales


~ .............:


Major Networking & Communications Initiatives

• Internal Firewall Upgrade – Palo Alto

• Internal Intrusion Prevention System (IPS) and SSL Inspection

• Wireless Controllers and Access Points Upgrade (entire campus)

• Network Hub at 620 W. Lexington

– Upgrade Fiber Backbone and Relocate Redundant Campus Network Core

• UPS Upgrade at Howard Hall Network Hub

• Load Balancing Appliance Upgrade – F5

• VoIP Network Gateways Upgrade

• Azure and AWS – DNS, Firewall, IPS

• Enhancing Core Infrastructure for Internet Capacity and Internal Network Capacity

• Research Network

• HS/HSL Data Center Core Upgrade – 10G connectivity to servers and 20G connectivity to 300 W.

Lexington Street Facility


~ .............:


Major Networking & Communications Initiatives - Timeline

Task Na e 2016 2017 2018

Q1 Q2 Q3 Q4 Q1 Q2 Q3 Q4 Q1 Q2 Q3 Q4

Internal Firewall Upgrade - Palo Alto

Internal Intrusion Prevention System (IPS) and SSL

Inspection

Wireless Controllers and Access Points Upgrade (entire

campus)

Network Hub at 620 W. Lexington

UPS Upgrade at Howard Hall Network Hub

Load Balancing Appliance Upgrade - F5

VoIP Network Gateways Upgrade

Azure and AWS - DNS, Firewall, IPS

Enhancing Core Infrastructure for Internet & Internal

Network Capacity

Research Network

HSHSL Data Center Core Upgrade - 10G connectivity to

servers; 20G to 300 W.Lex


~ .............:


Un ive rsity of Ma ry lan d Internet and lnternet2 Connectivity Current


UNIVERSITY of MARYLAND

University of Maryland Internet and lnternet2 Connectivity Future


~ .............:


UMB Network Core (current)

Fiber Runs From other campus

Buildings

Fiber Runs From other campus

Buildin s

Howard Hall

SOM Core 2

Jumpers for Secondary Device Con ections (Many)

II CITS Core 2

11 CITS Core 1


~ .............:


620 W est Lexingto n

SO Core 2

DI CITS Core 2

UMB Network Core Split (futu re)

Howard Hall

Fiber Fiber on Ter min t ion +------+-~ Pair Singlemode~~---.. Panel to 620

Jumpers for Seco dary Device Connections ( ny) and Core

Failover Co nection(s)

Jumpers for Secondary Device Connections (Many)

Fiber Runs From Other campus

Buildi gs

W . Lex

Fiber Fib r Termlna on Panel LO How rd Hall

Ter ml tron i------+--48 Pair Singlemode-+----+ Panel to 620

Jumpers for Seoondary Device Connections (Many) and Core

Failover Connection(s)

Jumpers for Seoondary Device Connections (Ma y)

Flber Runs From Other campus

Buildi

W . Lex

t ion

·111 OTS Core 1

Jumpers for Primary Device Connections (Many)


~ .............:


Support of Research Activities

• Partner with other cam us entities in im lementing the

Com rehensive Research Data Management Plan and Strategy

– Build an Infrastructure for storing, managing, and accessing data

• Investigating Ways to Provide Secure, High-s eed Cloud

Services to Enhance Research Ca abilities and Provide Better

Platforms for Collaboration

– This may involve working with UMCP to leverage our artnershi

– Otherwise, UMB will ursue


~ .............:


Custom Web Applications

• Build Applications to Support Research Groups (e.g., II Institute, Clinical Trials,

Research Integrity Office COI applications)

• Partner with Schools to Provide Support for Mission Objectives

• Partner with the Expanded Graduate School to Provide Needed Tools

• Develop Common Applications for Efficiency & Effectiveness

– PCI Compliant Credit Card Forms, Analytics, Invitations, Registrar Action Forms,

Training Forms

• Assist in Building New Community Engagement Applications and Maintain Those

Already Delivered

• Strategic Plan Initiatives Support


~ .............:


Major Enterprise Training Initiatives

• Office 365

– Increase Variety of Media Used for Training/Support

– Develop a Means to Alert Users to New Features Available

• New Financials System

– Planning Change Management Initiative to Prepare Users

• Upgrades to Existing Training Resources

– Kuali-Coeus is Moving to a Cloud Version with Completely New Interface: all

training materials will need to be revised

– Clinical Trials Tracking System


~ .............:

Ill UNIVERSITYaf MARYLAND ~ IT Communications

• Develop a Way to Take Advantage of Social Media – Especially for Student Related Communications

• Provide Ongoing Information About O365 – New Features

– Migration from Vibe to SharePoint

– Forms/Workflow Development

• Ensure the Campus is Aware of Cyber Threats – As Well As Tools to Fend Off Threats

• Develop IT Communications Plan (How we get our word out) – What Is Important to Know (e.g., Strategic Initiatives, Research Activity)

– The Best Ways to Reach Different Constituencies

• A News Feed


~ .............:


Development Support

• Implementation of the latest version of the Advance system to provide

the best possible tools for identifying and engaging prospective donors

– Provide data analysis to identify new prospects through the use of internal

analytics and industry standard prospect rating systems.

– Use the system to track and manage the solicitation prospects.

• Move to a Cloud-based financial system (Blackbaud EDGE) for

Development activity to ensure access to essential information from the

field.


~ .............:


Blackbaud Financial Edge

Move to Hosted Environment

Task Name

2016

June July August September October November December

Initial Vendor meeting, demonstrations and contract

review

Prepare file for testing transfer to Blackbaud

Test accessibility and security administration in hosted

environment

User Testing and Training

Final transfer to Blackbaud to implement

Post transition review


~ .............:


Center for Information Technology Services

QUESTIONS?

center for information technology services (cits) … for information technology services (cits)...

Documents