1. DIR Enterprise Contracts DIR Connect May 25, 2016

2. Texas.gov Jennifer Buaas May 25, 2016

3. Texas.gov 4 Self funded Public private partnership between the State of Texas and Texas NICUSA Provides a single point of access to Texas government information and services that is private, secure, convenient, efficient, service-oriented, and accessible

4. Program Overview The Texas.gov public private partnership is managed through a DIR contract with Texas NICUSA. Texas NICUSA provides:  Application development  Help Desk/Service Desk  Operations  Outreach and Marketing DIR provides:  Program Management  Governance and oversight  Strategic direction and policy  Review and approval of new projects  Budget and fee approval  Enterprise level coordination

5. Customers & Contract Customers include:  state agencies  institutions of higher education  local governments  any other entity permitted to purchase services through DIR Contract Details:  Master Agreement between DIR and Texas NIC  Customers sign a 3-party agreement between DIR, Texas NIC, and agency  DIR Board approves all Texas.gov fees  Master Agreement expires August 31, 2018

6. Texas.gov Enterprise Services  Payment Processing – Secure, PCI-compliant payment engine offers complete transaction management services for Texas government entities.  Application Development – C onstituent- focused online applications that feature plain language, 100% accessibility, and a mobile optimized design.  Technology and Operations – We manage the infrastructure, hosting, networking, quality assurance, and security for your services.

7. Texas.gov Enterprise Services  Strict adherence to industry, State, and federal requirements and best practices:  Payment Card Industry Data Security Standards (PCI-DSS)  Section 508 accessibility compliance  Texas Administrative Code (TAC) 202 compliance  ISO 27002 information security controls best practices  Minimum reliability service level agreement targets of 99.9%  Provide convenient solutions with optimum ease-of-use  Mobile-optimized online applications  Intuitive navigation  Concise, plain language content

8. Services and hosted websites www.texaswideopenforveterans.com http://veterans.portal.texas.gov www.data.texas.gov Examples of services include:  Drivers license renewals  Driver records  Occupational licenses and permits  Birth, death and marriage certificates  Vehicle registration renewals Open Data Portal

9. Texas.gov Budgetary Details Program is self funded through transaction fees 2 MOST COMMONLY USED FEES: FY15 REVENUE AND TRANSACTIONS TEXAS.GOV LITTLE-KNOWN FACTS: DIR does not collect any revenue from Texas.gov Texas.gov funds do not flow through DIR Texas.gov DIR Board approves fees for Texas.gov 40% of Texas.gov program total revenue is deposited into General RevenueTexas.gov TXPAY DIRECT Credit card 2.25% + $0.25 TXPAY DIRECT ACH$0.25 Program RevenueState ShareTransactions Processed State Dollars Processed ~$90M~$29M ~39.4M~$1.4B

10. What’s New and Coming  DIR Board approved Automated Clearing House (ACH) Fee Change from $1.00 to $0.25  June 15th Texas.gov event – Pickle Center from 8:30 am – 12:00 pm  Veterans Portal Refresh  Texas.gov Re-procurement

11. Communications Technology Services Sherri Parks May 25, 2016

12. Communications Technology Services Communications Technology Services (CTS) - manages the statewide communications infrastructure that provides voice, video, and data, telephony, wide area network, virtual private network, and call center solutions to more than 900 state and local government agencies Local Voice Services Long Distance Voice Services Data Services Internet Wireless Services Managed Services Capitol Complex Telephone System

13. Communications Technology Services Eligible Entities State Agencies Higher Education K – 12 Schools Political Subdivisions, including Cities, Counties and Districts Private Institutions of Higher Education which: Engage in distance learning AND Receive Federal funds for distance learning initiatives Assistance Organizations (as defined by TCG 2175.001) DIR recognizes eligibility for assistance organizations as determined by the Comptroller of Public Accounts (CPA) or the Texas Facilities Commission (TFC)

14. Communications Technology Services Local Services  Business Line  PBX Trunk  PRI  BRI  Operator Services Voice Over IP (VOIP)  Managed PBX  IP Telephone Long Distance Services  Inbound  Outbound  Circuit Switch Digital Data Services  Frame Relay  ATM  MPLS  Private Line Internet Metro Ethernet Small Office/Home Office (SOHO) Wireless Broadband Fixed Satellite Services TEX-AN Services

15. Communications Technology Services Local Voice Services VoIP (Voice over Internet) Long Distance (in/out) Internet Metro Ethernet MPLS Private Line VPN SOHO Local Voice Services VoIP (Voice over Internet) Long Distance (in/out) Internet Metro Ethernet MPLS Private Line SOHO VoIP (Voice over Internet) Long Distance (in/out) Internet VoIP (Voice over Internet) Internet SOHO Internet Metro Ethernet SOHO Fixed Satellite SOHO

16. Communications Technology Services How to Order These services are ordered directly from the vendor Local Services  Business Line  PBX Trunk  PRI  BRI  Operator Services Voice Over IP (VOIP)  Managed PBX  IP Telephone Small Office/Home Office (SOHO) These services are ordered from DIR Long Distance Services  Inbound  Outbound  Circuit Switch Digital Data Services  Frame Relay  ATM  MPLS  Private Line Internet Metro Ethernet Wireless Broadband Fixed Satellite Services To order, send an e-mail to Telecom.Solutions@dir.texas.gov Telecom.Solutions@dir.texas.gov

17. Communications Technology Services Other CTS Contracts – Services Ordered Directly from the Vendor Wireless Cell Phones Pagers Satellite Phones Technology Based Conferencing Audio Conferencing Video Conferencing Web Conferencing Web Casting Telecom Managed Services – Customer owned or vendor provided equipment Management of call processing architecture Call Center Services IVR/ Auto Attendant Phone System Management or Integration Network Optimization Management of Voice and/or Data networks

18. Data Center Services Sally Ward May 25, 2016

19. Data Center Services (DCS) The Data Center Service Program enables Texas State agencies, universities, and municipal governments to: Share costly data center infrastructure and services, Receive security, availability and disaster recovery Reduce focus on IT infrastructure operations

20. DCS Services Our Managed Data Center Services include: Enabling Customers to:  Strengthen Security  Enhance Disaster Recovery  Manage Costs Data Center Facilities Print-Mail Services Network Mainframe Server

21. Who Can Purchase? Texas State Agencies Texas Universities and Colleges Municipal Governments

22. DCS Customers The DCS program supports the largest state agencies While flexibly serving smaller customers as well Texas Higher Education Coordinating Board

23. DCS Benefits  State-of-the-art, vendor managed data centers  Enterprise Security  Built in Refresh and Technology Currency  Self-insured disaster recovery  Rigorous, industry-standard service levels  Independent SLA management and reporting

24. State of Texas Information Security Program Eddie Block May 25, 2016

25. Seven Deadly Trends Internal network segmentation Consistent event monitoring and analysis Security governance / awareness IT staffing challenges Security in software development Data classification Identity and access management standardization

26. Program Areas Policy and Assurance Texas Administrative Code / State Requirements Standards, Policies, Guidelines, Templates Texas Information Security Framework Security Services SPECTRIM CPT / WAVS / VS Information Security Services Procurement and Portfolio Decision Support Services (Gartner Research Services) Security Monitoring and Analysis Collaboration Texas Cybersecurity Council Statewide Information Security Advisory Committee OCISO Website and Newsletter Homeland Security Information Network Awareness and Education Information Security Forum End User Awareness Training Webinars Texas InfoSec Academy

27. SPECTRIM (eGRC) IdentifyProtectDetectRespondRecover Agency security plans (Due every even numbered year) IRDR (Complete) Risk assessment (Live) SOC alerting (Live) Threat (future) Urgent incidents (Live) Monthly incident reports (Live) Business continuity / disaster recovery (future)

28. UT San Antonio Center for Information Assurance and Security Coordinating Cybersecurity for Texas State Chief Information Security Officer and Cybersecurity Coordinator (DIR) Texas Cybersecurity Council Statewide Information Security Advisory Committee Central Texas Regional Incident Response Statewide Security Operations Working Group Texas Information Sharing and Analysis Center Multi-State Information Sharing and Analysis Center ISO Working Group (ISWG) UT Austin Center for Identity United States Computer Emergency Response Team Information Technology Council for Higher Education Texas Homeland Security Council

29. Education and Awareness InfoSec Academy Monthly Webinars Service Webinars Newsletters Information Security Forum For our metrics purposes, 100% is the 143 agencies that are required to report security incidents to DIR

30. OCISO Contact Information  24x7 Incident Response Hotline 512.350.3282  SPECTRIM (Incident Reporting, Risk Assessment) Questions GRC@dir.texas.gov  Information Security Forum Questions ISF@dir.texas.gov  Other OCISO questions DIRSECURITY@dir.texas.gov

31. Speaker Contact Information  Jennifer Buaas – jennifer.buaas@dir.texas.govjennifer.buaas@dir.texas.gov 512.463.3602  Sherri Parks – sherri.parks@dir.texas.govsherri.parks@dir.texas.gov 512.463.3580  Sally Ward – sally.ward@dir.texas.govsally.ward@dir.texas.gov 512.463.9003  Eddie Block – eddie.block@dir.texas.goveddie.block@dir.texas.gov 512.463.8807