DIR Enterprise Contracts DIR Connect May 25 2016

DIR Enterprise Contracts DIR Connect May 25, 2016

Texas. gov Jennifer Buaas May 25, 2016

Texas. gov Self funded Public private partnership between the State of Texas and Texas NICUSA Provides a single point of access to Texas government information and services that is private, secure, convenient, efficient, service-oriented, and accessible 4

Program Overview The Texas. gov public private partnership is managed through a DIR contract with Texas NICUSA. DIR provides: Program Management Texas NICUSA provides: Application development Governance and oversight Help Desk/Service Desk Strategic direction and policy Operations Review and approval of new projects Outreach and Marketing Budget and fee approval Enterprise level coordination

Customers & Contract Customers include: Contract Details: state agencies Master Agreement between DIR institutions of higher education local governments any other entity permitted to purchase services through DIR and Texas NIC Customers sign a 3 -party agreement between DIR, Texas NIC, and agency DIR Board approves all Texas. gov fees Master Agreement expires August 31, 2018

Texas. gov Enterprise Services Payment Processing – Secure, PCI-compliant payment engine offers complete transaction management services for Texas government entities. Application Development – Constituentfocused online applications that feature plain language, 100% accessibility, and a mobile optimized design. Technology and Operations – We manage the infrastructure, hosting, networking, quality assurance, and security for your services.

Texas. gov Enterprise Services Strict adherence to industry, State, and federal requirements and best practices: « Payment Card Industry Data Security Standards (PCI-DSS) « Section 508 accessibility compliance « Texas Administrative Code (TAC) 202 compliance « ISO 27002 information security controls best practices « Minimum reliability service level agreement targets of 99. 9% Provide convenient solutions with optimum ease-of-use « Mobile-optimized online applications « Intuitive navigation « Concise, plain language content

Services and hosted websites Open Data Portal Examples of services include: «Drivers license renewals «Driver records «Occupational licenses and permits «Birth, death and marriage certificates «Vehicle registration renewals www. data. texas. gov www. texaswideopenforveterans. com http: //veterans. portal. texas. gov

Texas. gov Budgetary Details Program is self funded through transaction fees • 2 MOST COMMONLY USED FEES: TXPAY DIRECT 2. 25% + $0. 25 Credit card TXPAY DIRECT ACH $0. 25 • FY 15 REVENUE AND TRANSACTIONS Program Revenue State Share ~$90 M ~$29 M Transactions Processed ~39. 4 M State Dollars Processed ~$1. 4 B TEXAS. GOV LITTLE-KNOWN FACTS: • DIR does not collect any revenue from Texas. gov • Texas. gov funds do not flow through DIR • DIR Board approves fees for Texas. gov • 40% of Texas. gov program total revenue is deposited into General Revenue

What’s New and Coming DIR Board approved Automated Clearing House (ACH) Fee Change from $1. 00 to $0. 25 June 15 th Texas. gov event – Pickle Center from 8: 30 am – 12: 00 pm Veterans Portal Refresh Texas. gov Re-procurement

Communications Technology Services Sherri Parks May 25, 2016

Communications Technology Services • Communications Technology Services (CTS) - manages the statewide communications infrastructure that provides voice, video, and data, telephony, wide area network, virtual private network, and call center solutions to more than 900 state and local government agencies • • Local Voice Services Long Distance Voice Services Data Services Internet Wireless Services Managed Services Capitol Complex Telephone System

Communications Technology Services • Eligible Entities • • • State Agencies Higher Education K – 12 Schools Political Subdivisions, including Cities, Counties and Districts Private Institutions of Higher Education which: • Engage in distance learning AND • Receive Federal funds for distance learning initiatives • Assistance Organizations (as defined by TCG 2175. 001) • DIR recognizes eligibility for assistance organizations as determined by the Comptroller of Public Accounts (CPA) or the Texas Facilities Commission (TFC)

Communications Technology Services TEX-AN Services • Data Services 4 Frame Relay 4 ATM 4 MPLS 4 Private Line • Internet • Metro Ethernet • Small Office/Home Office (SOHO) • Wireless Broadband • Fixed Satellite Services • Local Services 4 Business Line 4 PBX Trunk 4 PRI 4 BRI 4 Operator Services • Voice Over IP (VOIP) 4 Managed PBX 4 IP Telephone • Long Distance Services 4 Inbound 4 Outbound 4 Circuit Switch Digital

Communications Technology Services Local Voice Services Vo. IP (Voice over Internet) Long Distance (in/out) Internet Metro Ethernet MPLS Private Line VPN SOHO Fixed Satellite SOHO Local Voice Services Vo. IP (Voice over Internet) Long Distance (in/out) Internet Metro Ethernet MPLS Private Line SOHO Internet Metro Ethernet SOHO Vo. IP (Voice over Internet) Long Distance (in/out) Internet Vo. IP (Voice over Internet) Internet SOHO

Communications Technology Services • How to Order • These services are ordered directly from the vendor from DIR • Local Services Business Line 4 PBX Trunk 4 PRI 4 BRI 4 Operator Services • Voice Over IP (VOIP) 4 Managed PBX 4 IP Telephone • Small Office/Home Office (SOHO) 4 • Long Distance Services Inbound 4 Outbound 4 Circuit Switch Digital 4 • Data Services Frame Relay 4 ATM 4 MPLS 4 Private Line 4 • • Internet Metro Ethernet Wireless Broadband Fixed Satellite Services • To order, send an e-mail to Telecom. Solutions@dir. texas.

Communications Technology Services • Other CTS Contracts – Services Ordered Directly from the Vendor • Wireless • Cell Phones • Pagers • Satellite Phones • Technology Based Conferencing • • Audio Conferencing Video Conferencing Web Casting • Telecom Managed Services – Customer owned or vendor provided equipment • • • Management of call processing architecture Call Center Services IVR/ Auto Attendant Phone System Management or Integration Network Optimization Management of Voice and/or Data networks

Data Center Services Sally Ward May 25, 2016

Data Center Services (DCS) The Data Center Service Program enables Texas State agencies, universities, and municipal governments to: • Share costly data center infrastructure and services, • Receive security, availability and disaster recovery • Reduce focus on IT infrastructure operations

DCS Services Our Managed Data Center Services include: • Mainframe • Data Center Facilities • Server Enabling Customers to: • Print-Mail Services Ø Strengthen Security • Network Ø Enhance Disaster Recovery Ø Manage Costs

Who Can Purchase? • Texas State Agencies • Texas Universities and Colleges • Municipal Governments

DCS Customers • The DCS program supports the largest state agencies • While flexibly serving smaller customers as well Texas Higher Education Coordinating Board

DCS Benefits Ø State-of-the-art, vendor managed data centers Ø Enterprise Security Ø Built in Refresh and Technology Currency Ø Self-insured disaster recovery Ø Rigorous, industry-standard service levels Ø Independent SLA management and reporting

State of Texas Information Security Program Eddie Block May 25, 2016

Seven Deadly Trends IT staffing challenges Data classification Security governance / awareness Identity and access management standardization Security in software development Consistent event monitoring and analysis Internal network segmentation

Program Areas Policy and Assurance Security Services Texas Administrative Code / State Requirements SPECTRIM Standards, Policies, Guidelines, Templates Texas Information Security Framework CPT / WAVS / VS Information Security Services Procurement and Portfolio Decision Support Services (Gartner Research Services) Security Monitoring and Analysis Collaboration Awareness and Education Texas Cybersecurity Council Information Security Forum Statewide Information Security Advisory Committee End User Awareness Training OCISO Website and Newsletter Webinars Homeland Security Information Network Texas Info. Sec Academy

SPECTRIM (e. GRC) Identify Business continuity / disaster recovery (future) Recover Urgent incidents (Live) Monthly incident reports (Live) Respond Agency security plans (Due every even numbered year) IRDR (Complete) Protect Detect Risk assessment (Live) SOC alerting (Live) Threat (future)

Coordinating Cybersecurity for Texas Statewide Security Operations Working Group Texas Cybersecurity Council ISO Working Group (ISWG) Statewide Information Security Advisory Committee UT Austin Center for Identity State Chief Information Security Officer and Cybersecurity Coordinator (DIR) Information Technology Council for Higher Education UT San Antonio Center for Information Assurance and Security Texas Information Sharing and Analysis Center Multi-State Information Sharing and Analysis Center Texas Homeland Security Council Central Texas Regional Incident Response United States Computer Emergency Response Team

Education and Awareness • Info. Sec Academy • Monthly Webinars • Service Webinars • Newsletters • Information Security Forum Percent of Agencies Attending a Training 100% 87% 90% 81% 74% 73% 70% 60% 50% 37% 40% 30% 20% 10% 0% FY 14 -Q 3 FY 14 -Q 4 FY 15 -Q 1 FY 15 -Q 2 For our metrics purposes, 100% is the 143 agencies that are required to report security incidents to DIR FY 15 -Q 3

OCISO Contact Information § 24 x 7 Incident Response Hotline • 512. 350. 3282 § SPECTRIM (Incident Reporting, Risk Assessment) Questions • GRC@dir. texas. gov § Information Security Forum Questions • ISF@dir. texas. gov § Other OCISO questions • DIRSECURITY@dir. texas. gov

Speaker Contact Information § Jennifer Buaas – jennifer. buaas@dir. texas. gov • 512. 463. 3602 § Sherri Parks – sherri. parks@dir. texas. gov • 512. 463. 3580 § Sally Ward – sally. ward@dir. texas. gov • 512. 463. 9003 § Eddie Block – eddie. block@dir. texas. gov • 512. 463. 8807