WAHBE Infrastructure Modernization Roadmap June 2020 ISG Confidential

WAHBE Infrastructure Modernization Roadmap June 2020 ISG Confidential. © 2020 Information Services Group, Inc. All Rights Reserved. Proprietary and Confidential. No part of this document may be reproduced in any form or by any electronic or mechanical means, including information storage and retrieval devices or systems, without prior written permission from Information Services Group, Inc.

Infrastructure Modernization Timeline Strategic Goals 1 Q 2 Q 3 Q 4 Q 1 Q 2 Q 3 Q 2025 2024 2023 2022 2021 2020 4 Q 1 Q 2 Q 3 Q 4 Q Modularization of HPF using Micro Services WAHBE UI / UX Separation Headless Application Data Modulization Flexibility and Scalability Deloitte Re-platform to Kubernetes Service integration Modernization of Key Products WAHBE Eligibility Modernization - In. Rule Cloud Native Solutions Scalable Workloads Deloitte AEM Evaluation, Process Improvements & Updates WAHBE Replace FTP with Restful State APIs Enterprise Batch Scheduling Replace/Upgrade Image. Now Dev. Sec. Ops (See Dev. Sec. Ops Roadmap) ISG Confidential. © 2020 Information Services Group, Inc. All Rights Reserved. 2

Infrastructure Modernization Timeline 2020 Availability, Integrity, and Confidentiality of Information Strategic Goals WAHBE Deloitte 1 Q 2 Q 2022 2021 3 Q 4 Q 1 Q 2 Q 3 Q 2025 2024 2023 4 Q 1 Q 2 Q 3 Q 4 Q Data Warehouse Replace Oracle Reporting DB with Azure Synapse, Power. BI, and SSRS Move CSA HPF Services to New Data Structure Data Archiving WAHBE Deloitte Full Compliance with New Data Retention Standards Plan and Implement HPF Data Archival Database and Process Enterprise Data Modeling and Data Quality Improvement WAHBE Implement a Single Enterprise Data Model Implement Data Self. Healing Templates Deloitte Office 365 and Azure Compliance Tools WAHBE Office 365 Compliance Azure Gov Compliance One User Experience for Access to Data WAHBE One. Drive Sync to User Devices Windows Hello SSO to all 3 rd Party Applications ISG Confidential. © 2020 Information Services Group, Inc. All Rights Reserved. 3

Infrastructure Modernization Timeline 2020 Strategic Goals 1 Q 2 Q 3 Q 2022 2021 4 Q 1 Q 2 Q 3 Q 2025 2024 2023 4 Q 1 Q 2 Q 3 Q 4 Q Eliminate Legacy Oracle Products Reduction in Technology and Vendor Dependence WAHBE Replace Oracle Rule Engine with In. Rule Replace Oracle Web HTTPS Server with Portal Technology Replace Oracle Enterprise Monitoring with Azure/Orion Monitoring Deloitte Replace Oracle API Gateway (OAG) with Redhat 3 Scale Replace Oracle SOA Suite with Redhat Fuse Replace Oracle Identity Manager with Okta, Google, MS, Forgerock Replace Oracle Web. Logic with Containers/Kubernetes Replace Oracle RDMC and MS SQL Server with Azure Paa. S Database and No SQL Services Utilize Cloud Services (e. g. Kubernetes, Paa. S Services) WAHBE Containerization POC Migrate On-Prem Assets to Azure Cloud Automation of Technology (e. g. Infra as Code) WAHBE Puppet Config and Build Automation Runbook Patching and System Automation ISG Confidential. © 2020 Information Services Group, Inc. All Rights Reserved. 4

Infrastructure Modernization Timeline 2021 2020 Strategic Goals 1 Q 2 Q 3 Q 4 Q 1 Q 2 Q 3 Q 2025 2024 2023 2022 4 Q 1 Q 2 Q 3 Q 4 Q Standards and Process Improvement WAHBE IT Ticketing Solution Improvement System Assessment Process Software Development Lifecycle (SSDLC) Long Term Sustainability Coding Standards Configuration Management WAHBE Long Term Strategic Technology Planning Enterprise Monitoring WAHBE Solar. Winds Orion Monitoring Cloud Monitoring Improvements Deloitte Op. Insights Dashboarding and Log Analytics Zero Downtime Patching Deloitte Implement Blue/Green for Patching DB Patching Strategy Seamless Lower Environment Patching ISG Confidential. © 2020 Information Services Group, Inc. All Rights Reserved. 5

Infrastructure Modernization Timeline 2020 Strategic Goals 1 Q 2 Q 3 Q 2021 4 Q 1 Q 2 Q 3 Q WAHBE 2023 2022 4 Q 1 Q 2 Q 3 Q 2025 2024 4 Q 1 Q 2 Q 3 Q 4 Q Portal for Centralized Website and Media Management Machine Learning and AI Integration Augmented Reality Integration Customer-Centric Innovation VR Investigation Commercial Account Broker and Identity Mapping Eliminate Passwords, Move to Biometrics or Digital Identity UAT Validation with Public Third Parties Continued ADA Compliance and Improvements Mobile App Improvements Holistic Backoffice Systems Replacing Edifecs and EDI Modernize CSA Account Worker Portal HBE Simplified and Elegant Staff Experience Conference Room Improvements Teams Migration Autopilot for Software Development ISG Confidential. © 2020 Information Services Group, Inc. All Rights Reserved. 6

Infrastructure Modernization Timeline 2020 Strategic Goals 1 Q 2 Q 3 Q 2021 4 Q 1 Q 2 Q 3 Q 2023 2022 4 Q 1 Q 2 Q 3 Q 2025 2024 4 Q 1 Q 2 Q 3 Q 4 Q Zero Trust Infrastructure WAHBE Strategic Partners Trusted & Reliable Migrate to New WAF AI Threat Detection within WAHBE Container Security Prisma and Cortex Zero Trust User Experience Data Loss Prevention (DLP) – Office 365 – Data Implementation Eliminate Passwords in Applications for Staff Implement Intune for Mobile Device Management Shared Technology – Extensible, Future-Proofing Technology Assist DSHS with migrating off of ESB to HBE hosted solution HHS Hosting Platform Enterprise Solutions Committee (ESC) Shared Tools for Communication, Documentation and Collaboration (Jira, AHA, Git. Hub) Identity Broker ISG Confidential. © 2020 Information Services Group, Inc. All Rights Reserved. 7

Infrastructure Modernization Roadmap FLEXIBILITY & SCALABILITY Elapsed Time 5 Years Primary Activities Modularization of HPF using Micro Services (2020 -2025) (HBE Lead) 1. Re-platform to Kubernetes 4 Q 3. Data modulization (2020 -2024) 3 Q 2023 (Deloitte Lead) -4 Q 2024 • Containerization POC 3 Q 2020 • Restful APIs for data access 3 Q – 1 Q 2021 (Deloitte Lead) 2020 -2 Q 2022 (Deloitte Lead) • Plan Management Module 1 Q 4. Service integration 3 Q 2020 -2 Q 2021 – 4 Q 2021 (Deloitte 2022 (Deloitte Lead) 2. UI / UX separation headless application 3 Q 2020 - 4 Q 2024 (HBE with 3 rd Party and Deloitte support) • Consolidate content management tools (20202021) 3 Q 2020 – 2 Q 2021 (HBE with 3 rd Party) Benefits / Outcomes � � Improved fault isolation Eliminate vender or technology lock-in Optimize content delivery by channel Aligns technology better to processes � Scalability with the ability to shrink or grow with the needs � Flexibility to be able to handle any possibilities � Smaller and faster deployments 5 Years 2 Years Modernization of key products (20202025) (HBE Lead) 1. Replace FTP with restful state APIs 3 Q 2022 -2 Q 2024 (Deloitte Lead) 2. Eligibility modernization – In. Rule 1 Q 2023 - Q 4 2025 (HBE Lead) 3. Cloud native solutions Q 1 2020 4 Q 2025 (HBE Lead) 4. Enterprise batch scheduling 2 Q 2021 – 4 Q 2022 (Deloitte Lead) 5. Scalable workloads (scalability along with redundancy) 1 Q 2022 – 4 Q 2022 (HBE Lead) 6. AEM evaluation, process improvements and updates 2 Q 2020 - 3 Q 2020 (Deloitte Lead) 7. Replace or upgrade Image. Now 2 Q 2021 - 1 Q 2022 (Deloitte Lead) Dev. Sec. Ops (2020 -2022)* 1. Source Repository 3 Q 2020 – 2 Q 2022 2. Integrate Source Repository 3 Q 2020 – 2 Q 2022 3. Coding Standards 3 Q 2020 – 2 Q 2022 4. Code Quality Automation 3 Q 2020 – 2 Q 2022 5. Security Scans/Pen Testing 3 Q 2020 – 2 Q 2022 6. SQA Improvements 3 Q 2020 – 2 Q 2022 7. ADA Improvements 3 Q 2020 – 2 Q 2022 8. Build & Deploy 3 Q 2020 – 2 Q 2022 9. Operational Improvements 3 Q 2020 – 2 Q 2022 � Cost avoidance by eliminate tech debt and support of legacy systems � Business agility and staff productivity � Reduction in security vulnerabilities � More efficient software development � Higher quality software � Faster speed to market *Dev. Sec. Ops Primary Activities can be found in more detail in the Dev. Sec. Ops Roadmap ISG Confidential. © 2020 Information Services Group, Inc. All Rights Reserved. 8

Infrastructure Modernization Roadmap AVAILABILITY, INTEGRITY, AND CONFIDENTIALITY OF INFORMATION Elapsed Time 1 -2 Year 1 -2 -Year 4 Years 1 -2 Years Primary Activities Data warehouse 2 Q 2019 - 2 Q 2022 (HBE Lead) 1. Replace Oracle reporting DB with Azure Synapse, Power. BI, and SSRS 2 Q 2019 -3 Q 2021 (HBE Lead) 2. Move CSA HPF services to new data structure 3 Q 2020 – 2 Q 2021 (Deloitte Lead) Data archiving 3 Q 2020 - 2 Q 2022 (HBE Lead) 1. Plan and implement HPF data archival Database and process 3 Q 2020 - 2 Q 2021 (Deloitte Lead) 2. Full compliance with new data retention standards 3 Q 2021 – 3 Q 2022 (HBE Lead) Enterprise data modeling and data quality improvement 1 Q 2020 - 4 Q 2024 (HBE Lead) 1. Implement data self-healing templates 3 Q 2020 – 2 Q 2021 (Deloitte Lead) 2. Implement a single enterprise data model 1 Q 2022 - 4 Q 2024 (HBE Lead) Office 365 and Azure compliance tools 3 Q 2020 – 4 Q 2022 (HBE Lead) 1. Office 365 compliance 3 Q 2020 – 2 Q 2021 (HBE Lead) 2. Azure Gov compliance 3 Q 2021 – 4 Q 2022 (HBE Lead) One User Experience for access to data 2 Q 2019 – 3 Q 2022 (HBE Lead) 1. One. Drive sync to user devices 1 Q 2019 – 3 Q 2020 (HBE Lead) 2. Windows Hello 1 Q 2021 – 1 Q 2022 (HBE Lead) 3. SSO to all 3 rd party applications 1 Q 2020 – 2 Q 2021 (HBE Lead) Benefits / Outcomes � Lessen dependence on Oracle � Improved data analytics and reporting � Creates a central system for data needs � Enhances data quality and consistency � Allows anyone in HBE to create reports and publish them � � � Improved data quality Increased business intelligence Enhanced integration Reduces unwanted data abnormalities � Reduces data fixes � Increased data accuracy � Transparent compliance assessments � Increased data protection � Regulatory response capabilities � Faster security incident response � Decreased security incidents � � Regulatory data compliance Reduced cost Prevention of data loss Increased security Better backup and restore performance � � ISG Confidential. © 2020 Information Services Group, Inc. All Rights Reserved. Improved user experience Reduced security vulnerability Reduced wasted work time Easier onboarding and staff training 9

Infrastructure Modernization Roadmap REDUCTION IN TECHNOLOGY AND VENDOR DEPENDENCE Elapsed Time Primary Activities Benefits / Outcomes 4 Years 5 Years Eliminate Legacy Oracle products Q 1 2019 – 1 Q 2024 (HBE Lead) 1. Replace Oracle SOA Suite (Service Bus, etc. ) with Redhat Fuse 1 Q 2021 - 3 Q 2021 (Deloitte Lead) 2. Replace Oracle API Gateway (OAG) with Redhat 3 Scale 1 Q 2020 – 3 Q 2020 (Deloitte Lead) 3. Replace Oracle Rule Engine (Oracle OPA) with In. Rule Q 1 2019 – 3 Q 2021 (HBE Lead) 4. Replace Oracle Identity Manager (IDM/IDAM) with (Okta, Google, MS, Forgerock) 3 Q 2020 – 3 Q 2021 (Deloitte Lead) 5. Replace Oracle Web. Logic with containers/Kubernetes 3 Q 2020 – 1 Q 2024 (Deloitte Lead) 6. Replace Oracle Web HTTP Server with portal technology 2 Q 2021 – 1 Q 2024 (HBE with 3 rd Party and Deloitte support) 7. Replace Oracle enterprise monitoring with Azure/Orion monitoring 3 Q 2022 – 3 Q 2023 (HBE Lead) 8. Replace Oracle RDMS and MS SQL Server with Azure Paa. S Databases and No SQL (Cosmos DB) Services 3 Q 2020 – 3 Q 2023 (Deloitte Lead) • Retire Golden Gate and Data Guard 3 Q 2023 – 3 Q 2023 (Deloitte Lead) Utilize cloud services (e. g. Kubernetes, Paa. S services) (2020 -2023) 1. Containerization POC 3 Q 2020 – 2 Q 2021 (HBE Lead) • VLP services 3 Q 2020 – 2 Q 2021 (Deloitte Lead) • IDM APIs services 3 Q 2020 – 2 Q 2021 (Deloitte Lead) • EDI services pilot 3 Q 2020 – 2 Q 2021 (HBE Lead) 2. Migrate on-prem assets to Azure cloud 3 Q 2020 – 2 Q 2022 (HBE Lead) • CSA 3 Q 2020 – 3 Q 2022 (HBE Lead) • Infra 2 Q 2020 – 3 Q 2021 (HBE Lead) • EDI 3 Q 2020 – 3 Q 2022 (HBE Lead) Automation of technology (e. g. infra as code) 1 Q 2020 – 4 Q 2025 (HBE Lead) 1. Puppet config and build automation 1 Q 2019 – 1 Q 2022 � � � Retire Golden Gate and Data Guard (2023 -2023) Lessen dependence on Oracle Cost reduction Increased flexibility Improved hiring of technical resources 2. � � � (HBE Lead) Runbook patching and system automation 1 Q 2020 – 3 Q 2021 (HBE Lead) Increased portability Improved scalability Simpler and faster deployments Improved security Improved ROI and recovery time ISG Confidential. © 2020 Information Services Group, Inc. All Rights Reserved. 10

Infrastructure Modernization Roadmap LONG TERM SUSTAINABILITY Elapsed Time 5 Years Primary Activities Standards and process improvement (2020 -2025) (HBE Lead) 1. IT ticketing solution improvement 1 Q 2020 – 4 Q 2020 (HBE Lead) 2. System assessment process 1 Q 2021 – 2 Q 2022 (HBE Lead) 3. Software Development Lifecycle (SSDLC) 1 Q 2019 – 3 Q 2020 (HBE Lead) 4. Coding Standards 3 Q 2020 – 1 Q 2021 (HBE Lead) 5. Configuration Management 3 Q 2020 – 1 Q 2021 (HBE Lead) Enterprise monitoring (2020 -2025) (HBE Lead) 1. Solar. Winds Orion monitoring 1 Q 2020 – 3 Q 2020 (HBE Lead) 2. Ops. Insights dashboarding and log analytics 2 Q 2020 – 3 Q 2020 (Deloitte Lead) 3. Cloud monitoring improvements 1 Q 2021 – 1 Q 2022 (HBE Lead) Zero downtime patching (2020 -2025) Long term strategic technology (Deloitte Lead) planning 1 Q 2020 – 2 Q 2021 (HBE 1. Implement blue/green for patching Lead) 3 Q 2020 – 3 Q 2020 (Deloitte Lead) 2. Db patching strategy (may be done with re-platforming) 1 Q 2021 – 4 Q 2025 (Deloitte Lead) 3. Seamless lower environment patching 1 Q 2021 – 3 Q 2021 (Deloitte Lead) Benefits / Outcomes � � � Improved insight into infrastructure and application performance � Reduced incident downtime � Reduce impacts to customers by solving issues before they notice � � Improved security More efficient software development Reduced rework and mistakes More stable environments Reduced system break fix 5 Years 2 Years Reduce system downtime � Reduced project churn and work waste Increased customer satisfaction � Central planning targets to align synergy and resources Overall staff productivity gains Flexibility to allow use to meet security and functional needs without impacting customer access ISG Confidential. © 2020 Information Services Group, Inc. All Rights Reserved. 11

Infrastructure Modernization Roadmap CUSTOMER-CENTRIC INNOVATION Elapsed Time 5 Years Primary Activities 1. Portal for centralized website and media management 3 Q 2020 – 4 Q 2024 (HBE Lead) 2. Machine learning and AI integration 4 Q 2022 – 2 Q 2025 (HBE Lead) 3. Augmented reality integration 4 Q 2024 – 2 Q 2026 (HBE Lead) 4. VR investigation 1 Q 2025 – 2 Q 2030 (HBE Lead) 5. Commercial account broker and identity mapping 1 Q 2024 – 4 Q 2026 (HBE Lead) • Eliminate passwords and move to biometrics or digital identity 1 Q 2025 – 4 Q 20226 (HBE Lead) 6. UAT Validation with public third parties 3 Q 2020 – 3 Q 2020 (HBE Lead) Benefits / Outcomes � � � Increased solution by in, quality, and accuracy Overall efficiency gains Increased data insights Enhanced monitoring capabilities Central management of Customer expérience and design 7. Continued ADA compliance and improvements 1 Q 2020 – 4 Q 2025 (HBE Lead) 8. Mobile app improvements 1 Q 2020 – 4 Q 2025 (HBE Lead) 9. Holistic Backoffice Systems (BEAMS) 2 Q 2020 – 2 Q 2022 (HBE Lead) • Replacing Edifecs and EDI 2 Q 2020 – 2 Q 2022 (HBE Lead) • Modernize CSA 2 Q 2020 – 2 Q 2022 (HBE Lead) • Account worker portal 2 Q 2020 – 2 Q 2022 (HBE Lead) 10. HBE simplified and elegant staff experience (2020 -2025) (HBE Lead) • Conference room improvements 1 Q 2019 – 2 Q 2020 (HBE Lead) • Teams migration 3 Q 2020 – 2 Q 2021 (HBE Lead) • Autopilot for software deployment 1 Q 2021 – 3 Q 2021 (HBE Lead) � � � WCAG compliance and improved access to all Washingtonians Increased customer satisfaction Improved employee working experience Centrally resolve customer issues with increased accuracy and reduced work time. The ability to meet the customer where they have needs ISG Confidential. © 2020 Information Services Group, Inc. All Rights Reserved. 12

Infrastructure Modernization Roadmap TRUSTED & RELIABLE Elapsed Time STRATEGIC PARTNERS 5 Years Primary Activities Zero Trust Infrastructure (2020 -2025) (HBE Lead) 1. Migrate to new WAF (Web Application Firewall) 2 Q 2020 – 2 Q 2021 (HBE Lead) 2. AI threat detection (Integrate Darktrace) within WAHBE 2 Q 2021 – 3 Q 2022 (HBE Lead) 3. Container security (Prisma Cloud, was Twistlock) 3 Q 2020 - 2022) 4. Prisma and Cortex (2022 -2023) Zero Trust User Experience (2020 -2025) (HBE Lead) 1. Eliminate passwords in applications and for staff 1 Q 2022 – 3 Q 2023 (HBE Lead) 2. Data Loss Prevention (DLP) - Office 365 – Data Implementation 3 Q 2020 – 1 Q 2021 (HBE Lead) 3. Implement Intune for mobile device management 4 Q 2020 – 2 Q 2021 (HBE Lead) Benefits / Outcomes � Increased protection of customer � Improved end-user experience data � Increased access visibility � Reduced time to breach detection � Reduces wasted staff time � Reduced complexity of security stack 1 -5 Years 1. Shared technology – extensible, future-proofing technology (2020 -2025) (HBE Lead) • Assist DSHS with migrating off of ESB to HBE hosted solution – 2 Q 2020 – 3 Q 2020 (HBE Lead) 2. HHS hosting platform (2020 -2025) (HBE Lead) 3. Enterprise Solutions Committee (ESC) 1 Q 2020 – 3 Q 2020 (HBE Lead) 4. Shared tools for communication, documentation and collaboration (Jira, AHA, Git. Hub, Confluence) 1 Q 2020 -2 Q 2021 (HBE Lead) 5. Identity Broker 3 Q 2020 – 3 Q 2023 (HBE Lead) � � � Cost avoidance by eliminate tech debt and support of legacy systems Decrease in tool maintenance overheard Create new revenue streams Modernize HHS technologies for the State of Washington Easily expand to meet growing needs for all Washingtonians ISG Confidential. © 2020 Information Services Group, Inc. All Rights Reserved. 13

ISG (Information Services Group) (Nasdaq: III) is a leading global technology research and advisory firm. A trusted business partner to more than 700 clients, including more than 70 of the top 100 enterprises in the world, ISG is committed to helping corporations, public sector organizations, and service and technology providers achieve operational excellence and faster growth. The firm specializes in digital transformation services, including automation, cloud and data analytics; sourcing advisory; managed governance and risk services; network carrier services; strategy and operations design; change management; market intelligence and technology research and analysis. Founded in 2006, and based in Stamford, Conn. , ISG employs more than 1, 300 digital-ready professionals operating in more than 20 countries—a global team known for its innovative thinking, market influence, deep industry and technology expertise, and world-class research and analytical capabilities based on the industry’s most comprehensive marketplace data. isg-one. com