1. You need a new application/functionality?
How to get through the process quicker
June 8 – 9, 2017

2. Introduction User Experiences? Current State
Departmental business need
Time constraints
Procurement – security reviews
Engagement with UNM IT
Goal: educate on the process steps to procure, secure and engage IT for assistance to implement and support your new application as efficiently as possible.
Team

3. Opportunity Statements
Cost and risk avoidance
Communicate and clarify processes (Request, security, etc.)
Process efficiencies
Alignment with existing systems
Alignment with advisory and governance boards
Get what you need efficiently!
Kirsten and Jeff
Procurement Processes and Future and Budgets
Data Steward Level Approval

4. Request Process

5. IT Speak
Incident: Something is broken; cannot complete your daily work.
Service Request – I want something.
Once a Service Request is entered, there is analysis
Standard Repeatable
Project
Help.UNM
Make a Request – Professional Services Request – Enhancement Request TJ

6. Alesia

7. https://login.unm.edu/cas/login?service=http%3A%2F%2Fmyit.unm.edu%2F
MyIT
Related Presentation -- MyIT: A Road To Enhancing UNM IT Workload Visibility
Alesia

8. What Now? UNM IT already engaged
Department in the middle of something and wants to engage UNM IT
There is a need and no engagement has happened
TJ or Kirsten?

9. Related Presentations
MyIT: A Road To Enhancing UNM IT Workload Visibility
Your Team Is Going To Build A New Application?
Information Security Incident Response Primer
Kirsten or TJ?

10. THANK YOU!!! Questions?

11. Supporting Slides

12. More IT Speak - Standard vs Non-Standard
Defined Service
Solution is well defined
Current Toolsets
Repeatable Process
Service Level Agreements (SLAs) can be estimated
Non-Standard:
New System or Service
Major Change to a Current System or Service
Analysis is needed to determine solution
Timelines determined based on the work needed
Funding Needed
Examples:
Production Data Change
Firmware Patches/Upgrades
Lobocloud
Upgrades
Current Business Cycles
Examples:
New Application Functionality
New Application Implementation
Application Development
Changes to Current Processes and Systems
TJ?

13. Initial Analysis High Level Other Systems/Options Business Case
Engagement
Requestor/Functional Units/Departments
Platforms
Security
Service Management
High Level
Other Systems/Options
Business Case
Target Timeframe – 2 weeks
Alesia

14. Service Management Lifecycle of a service/product Support Model
SS, SD, ST, SO, CSI
Performance metrics
Customer Satisfaction
Support Model
During Implementation
Post Go-Live
Long Term
Alesia

15. Security Process and Artifacts
Customer fills out a Preliminary Security Questionnaire ( PSQ) (IT Apps Artifact)
If Personally Identifiable ( PII) is part of the data used (e.g.)
SSN
Direct Deposit Information
Protected Health Information (PHI)
If service is third party hosted then vendor fills out Vendor Security Questionnaire (VSQ)
(IT Apps Artifact)
Reviews can take
1-3 days for easy
5-7 days for moderate
Longer depending upon data, application , regulatory and contractual requirements
Recommend purchase if vendor meets the security requirements
Don’t recommend if vendor does not meet security requirements
Jeff

16. Additional Security Considerations
Has Data Steward Already Approved?
Help ticket will be submitted with questionnaire/s attached
The Near Future:
Shared Assessments
NIST
Jeff

17. Procurement
Upon approval, department will initiate purchase request through LoboMart
Submit Purchasing Security Questionnaire (if UNM IT involved, this will be completed on department’s behalf)
Follows existing purchasing processes and approvals
Kirsten

18. Escalation to Advisory
Significant Resources Needed
Needed – staff (IT, Functional), Hardware
Funding Needed
Impact to current project resources
Significant Cross Functional Business Impact
Escalation Needed from Other Teams
New System (Give details on what this means)
Redundant System
Unsupported Technology
Alesia