DIR Enterprise Contracts DIR Connect May 25, 2016

Texas.gov Jennifer Buaas May 25, 2016

Texas.gov 4 Self funded Public private partnership between the State of Texas and Texas NICUSA Provides a single point of access to Texas government information and services that is private, secure, convenient, efficient, service-oriented, and accessible

Program Overview The Texas.gov public private partnership is managed through a DIR contract with Texas NICUSA. Texas NICUSA provides:  Application development  Help Desk/Service Desk  Operations  Outreach and Marketing DIR provides:  Program Management  Governance and oversight  Strategic direction and policy  Review and approval of new projects  Budget and fee approval  Enterprise level coordination

Customers & Contract Customers include:  state agencies  institutions of higher education  local governments  any other entity permitted to purchase services through DIR Contract Details:  Master Agreement between DIR and Texas NIC  Customers sign a 3-party agreement between DIR, Texas NIC, and agency  DIR Board approves all Texas.gov fees  Master Agreement expires August 31, 2018

Texas.gov Enterprise Services  Payment Processing – Secure, PCI-compliant payment engine offers complete transaction management services for Texas government entities.  Application Development – C onstituent- focused online applications that feature plain language, 100% accessibility, and a mobile optimized design.  Technology and Operations – We manage the infrastructure, hosting, networking, quality assurance, and security for your services.

Texas.gov Enterprise Services  Strict adherence to industry, State, and federal requirements and best practices:  Payment Card Industry Data Security Standards (PCI-DSS)  Section 508 accessibility compliance  Texas Administrative Code (TAC) 202 compliance  ISO information security controls best practices  Minimum reliability service level agreement targets of 99.9%  Provide convenient solutions with optimum ease-of-use  Mobile-optimized online applications  Intuitive navigation  Concise, plain language content

Services and hosted websites Examples of services include:  Drivers license renewals  Driver records  Occupational licenses and permits  Birth, death and marriage certificates  Vehicle registration renewals Open Data Portal

Texas.gov Budgetary Details Program is self funded through transaction fees 2 MOST COMMONLY USED FEES: FY15 REVENUE AND TRANSACTIONS TEXAS.GOV LITTLE-KNOWN FACTS: DIR does not collect any revenue from Texas.gov Texas.gov funds do not flow through DIR Texas.gov DIR Board approves fees for Texas.gov 40% of Texas.gov program total revenue is deposited into General RevenueTexas.gov TXPAY DIRECT Credit card 2.25% + $0.25 TXPAY DIRECT ACH$0.25 Program RevenueState ShareTransactions Processed State Dollars Processed ~$90M~$29M ~39.4M~$1.4B

What’s New and Coming  DIR Board approved Automated Clearing House (ACH) Fee Change from $1.00 to $0.25  June 15th Texas.gov event – Pickle Center from 8:30 am – 12:00 pm  Veterans Portal Refresh  Texas.gov Re-procurement

Communications Technology Services Sherri Parks May 25, 2016

Communications Technology Services Communications Technology Services (CTS) - manages the statewide communications infrastructure that provides voice, video, and data, telephony, wide area network, virtual private network, and call center solutions to more than 900 state and local government agencies Local Voice Services Long Distance Voice Services Data Services Internet Wireless Services Managed Services Capitol Complex Telephone System

Communications Technology Services Eligible Entities State Agencies Higher Education K – 12 Schools Political Subdivisions, including Cities, Counties and Districts Private Institutions of Higher Education which: Engage in distance learning AND Receive Federal funds for distance learning initiatives Assistance Organizations (as defined by TCG ) DIR recognizes eligibility for assistance organizations as determined by the Comptroller of Public Accounts (CPA) or the Texas Facilities Commission (TFC)

Communications Technology Services Local Services  Business Line  PBX Trunk  PRI  BRI  Operator Services Voice Over IP (VOIP)  Managed PBX  IP Telephone Long Distance Services  Inbound  Outbound  Circuit Switch Digital Data Services  Frame Relay  ATM  MPLS  Private Line Internet Metro Ethernet Small Office/Home Office (SOHO) Wireless Broadband Fixed Satellite Services TEX-AN Services

Communications Technology Services Local Voice Services VoIP (Voice over Internet) Long Distance (in/out) Internet Metro Ethernet MPLS Private Line VPN SOHO Local Voice Services VoIP (Voice over Internet) Long Distance (in/out) Internet Metro Ethernet MPLS Private Line SOHO VoIP (Voice over Internet) Long Distance (in/out) Internet VoIP (Voice over Internet) Internet SOHO Internet Metro Ethernet SOHO Fixed Satellite SOHO

Communications Technology Services How to Order These services are ordered directly from the vendor Local Services  Business Line  PBX Trunk  PRI  BRI  Operator Services Voice Over IP (VOIP)  Managed PBX  IP Telephone Small Office/Home Office (SOHO) These services are ordered from DIR Long Distance Services  Inbound  Outbound  Circuit Switch Digital Data Services  Frame Relay  ATM  MPLS  Private Line Internet Metro Ethernet Wireless Broadband Fixed Satellite Services To order, send an to

Communications Technology Services Other CTS Contracts – Services Ordered Directly from the Vendor Wireless Cell Phones Pagers Satellite Phones Technology Based Conferencing Audio Conferencing Video Conferencing Web Conferencing Web Casting Telecom Managed Services – Customer owned or vendor provided equipment Management of call processing architecture Call Center Services IVR/ Auto Attendant Phone System Management or Integration Network Optimization Management of Voice and/or Data networks

Data Center Services Sally Ward May 25, 2016

Data Center Services (DCS) The Data Center Service Program enables Texas State agencies, universities, and municipal governments to: Share costly data center infrastructure and services, Receive security, availability and disaster recovery Reduce focus on IT infrastructure operations

DCS Services Our Managed Data Center Services include: Enabling Customers to:  Strengthen Security  Enhance Disaster Recovery  Manage Costs Data Center Facilities Print-Mail Services Network Mainframe Server

Who Can Purchase? Texas State Agencies Texas Universities and Colleges Municipal Governments

DCS Customers The DCS program supports the largest state agencies While flexibly serving smaller customers as well Texas Higher Education Coordinating Board

DCS Benefits  State-of-the-art, vendor managed data centers  Enterprise Security  Built in Refresh and Technology Currency  Self-insured disaster recovery  Rigorous, industry-standard service levels  Independent SLA management and reporting

State of Texas Information Security Program Eddie Block May 25, 2016

Seven Deadly Trends Internal network segmentation Consistent event monitoring and analysis Security governance / awareness IT staffing challenges Security in software development Data classification Identity and access management standardization

Program Areas Policy and Assurance Texas Administrative Code / State Requirements Standards, Policies, Guidelines, Templates Texas Information Security Framework Security Services SPECTRIM CPT / WAVS / VS Information Security Services Procurement and Portfolio Decision Support Services (Gartner Research Services) Security Monitoring and Analysis Collaboration Texas Cybersecurity Council Statewide Information Security Advisory Committee OCISO Website and Newsletter Homeland Security Information Network Awareness and Education Information Security Forum End User Awareness Training Webinars Texas InfoSec Academy

SPECTRIM (eGRC) IdentifyProtectDetectRespondRecover Agency security plans (Due every even numbered year) IRDR (Complete) Risk assessment (Live) SOC alerting (Live) Threat (future) Urgent incidents (Live) Monthly incident reports (Live) Business continuity / disaster recovery (future)

UT San Antonio Center for Information Assurance and Security Coordinating Cybersecurity for Texas State Chief Information Security Officer and Cybersecurity Coordinator (DIR) Texas Cybersecurity Council Statewide Information Security Advisory Committee Central Texas Regional Incident Response Statewide Security Operations Working Group Texas Information Sharing and Analysis Center Multi-State Information Sharing and Analysis Center ISO Working Group (ISWG) UT Austin Center for Identity United States Computer Emergency Response Team Information Technology Council for Higher Education Texas Homeland Security Council

Education and Awareness InfoSec Academy Monthly Webinars Service Webinars Newsletters Information Security Forum For our metrics purposes, 100% is the 143 agencies that are required to report security incidents to DIR

OCISO Contact Information  24x7 Incident Response Hotline  SPECTRIM (Incident Reporting, Risk Assessment) Questions  Information Security Forum Questions  Other OCISO questions

Speaker Contact Information  Jennifer Buaas –  Sherri Parks –  Sally Ward –  Eddie Block –