information technology 2017 - strategic plan
TRANSCRIPT
InformationTechnology2017-StrategicPlan
Version1.0
LakeMichiganCollegeInformationTechnologyServicesStrategicPlan2017
2
TableofContents
TableofContents.................................................................................................................1
Introduction.........................................................................................................................3
MissionofIT........................................................................................................................3
PrimaryServiceDeliveryObjectives.....................................................................................3
AvailabilityofSystems.............................................................................................................3
ImproveProcesses...................................................................................................................3
Innovation................................................................................................................................4
ITPlanning&AlignmentProcess.............................................................................................4
PlanningandAlignment.......................................................................................................5
ITServiceDeliveryModel.........................................................................................................5
2017-2020HighLevelObjectives............................................................................................6
ITHumanCapital.....................................................................................................................6
ITRiskManagement&Security...............................................................................................6
EnterpriseApplications............................................................................................................7
Pathways................................................................................................................................8
ITHelpdesk/AcademicTeam..................................................................................................8
Networking&Telephony.........................................................................................................9
CloudComputing,DataCenterandComputingResources......................................................10
CloudInfrastructureArchitectureConsiderations...............................................................10
NapierCampusCapitalPlan...................................................................................................11
LakeMichiganCollegeInformationTechnologyServicesStrategicPlan2017
3
Introduction
InformationTechnologyisvitaltothesuccessofanyorganizationandinvolvesarrangingtherightmixofskilledindividualswhosharecommonobjectivesanddefinedprocessestodeliverservicesandsolutionsthatsupportthemissionoftheorganization.LakeMichiganCollegeisservedbyadedicatedteamofindividualswhosepurposeistodelivertechnologytostudents,facultyandstaffinanaccountableandcosteffectivemanner.
MissionofIT
InformationTechnologyisaserviceorganizationthatworksinpartnershipwithmembersoftheCollegetoprovidetechnicalsolutions,systemsandservicesthatsupportthefacultyandstudentrelationship,improvesbusinessprocesses,protectsinformationalassets,andkindlesinnovationthatadvancesStudentSuccess.
PrimaryServiceDeliveryObjectives
IThasthreeconstantobjectivesasitprovidesservicesandsolutionsfortheorganization.Thefirstobjectivetargetstheavailabilityofkeyinformationservicesandsystems.Thesecondobjectiveisaprogressivefocusonimprovingprocessesthatenablestheorganizationtobemoreefficient.Thethirdfocusesongrowingtheorganizationthroughthedeploymentofinnovativesolutionsthatallowstheorganizationtooffernewservicesandapplications.
AvailabilityofSystemsITmustensuretheavailabilityofvitalinformationservicestotheorganizationatalltimes.Thisisaccomplishedthroughcapacityplanning,requirementsvalidationandsolutiondesign,projectmanagement,riskmanagementandthroughthemonitoringofcriticalsystemsandprocesses.Thelackofvitalservicescanharmthereputationandeffectivenessoftheorganizationandresultinfinanciallossandmissedopportunities.Itisalsocriticalthattheconfidentialityandintegrityofinformationbemaintainedforallsystems.Thisrequirestraceabilityandstrongaccesscontrols.Withoutconfidentiality,informationisnotsecuredandwithoutintegrity,informationcannotbetrusted.
ImproveProcessesITmustalsoworkcloselywithkeybusinessprocessownerstoimproveoperationalefficiencies.Inmanycasesthisrelatestothediscovery,understandinganddocumentationofkeybusiness
Availabilityofsystems
ImproveProcesses
InnovativeSolutions
TotalCostofOwnership
OrganizationalGoals
LakeMichiganCollegeInformationTechnologyServicesStrategicPlan2017
4
processesandthedefininganddocumentingofbusinessrules.ThegoalofITistoassisttheorganizationinthedevelopmentofeffectiveprocessesthatarerepeatable,sustainableandtransferable.Improvementsarealsorealizedthroughthefullutilizationofexistingtechnologyinvestmentsandthroughthealignmentofsoftwaresolutionswiththeneedsofthebusiness.Improvementsmayalsoincludetheprocurementanddeploymentofnewtechnicalsolutions.
InnovationITmustpartnerwithkeyorganizationswithintheCollegetoselectanddeployinnovativesolutionsthatgrowsandfurthersthemissionoftheCollege.Traditionally,ITorganizationsspend70%oftheiroperationalbudgetmaintainingwhattheyalreadyhave.ItisessentialthatITallocatepartofitsbudgettosupportgrowthopportunitiesfortheCollege.
ITPlanning&AlignmentProcessOneofthekeyrolesforITistoalignitsinternalgoalsandobjectiveswiththatoftheorganization.ThisisacontinuousprocessthatinvolvesdevelopingaconstructivedialogwithmembersoftheCollege.AkeyelementofsuccessinvolvesITbuildingtrustwithmembersoftheCollegetoworkcollaborativelytosolveproblemsandbuildsolutions.ITmustlistencollectivelyandembracepositivetensionasanopportunityforbuildingamoreeffectiveorganization.
ITmustnotonlyalignwiththeorganizationgoals,butmustalsodevelopagilityandcapacitytorespondtounplannedneedsandopportunities.
OrganizationGoals&
Objectives
ITGoals&Objectives
CapacityPlanning
LakeMichiganCollegeInformationTechnologyServicesStrategicPlan2017
5
PlanningandAlignment
ITpublishesanannualstrategicplanandatacticalhorizontalplan.Thestrategicplanisamulti-yearviewthatisbroadinnatureandaddresseskeydeficiencieswithITservices,agingandemergingtechnology,costofownershipandcriticalneedswithintheorganization
ITServiceDeliveryModelITisrefiningitsServiceDeliveryModeltocontinuouslyalignprojectsandserviceswiththeneedsoftheorganization.ThegoalofthismodelistodelivercosteffectivesolutionsandservicesthatenablesandfurthersthemissionoftheCollege.ITmustdevelopanapproachofmeetingthegoalsoftheorganizationinatimelyandcosteffectivemanner.Thismodelisamethodologyusedtobuildstructurewithintheorganizationforexecutingandformeasuringresults.
1. ITStrivestomaketechnologyworkforthefirstminuteintheclassroom.2. ContinuousEvaluationandStakeholderengagementisvitalforeffectiveSupport
proceduresandstrategies.3. CustomerSupportandServicesisakeycomponentofourITservicedeliverymodel.4. Follow-upandFeedbackisavitalpartofprovidingeffectivesupportandmeetinguser
expectations.5. Manage"ChangeManagement"andCommunications.6. CapacityPlanning,HighAvailabilityManagementandRiskManagementarecore
activitieswithinITthatmustbeexecutedwell.7. PlanningandProjectExecutionisvitaltomanagingdeliverables.8. SecurityControlmeasuresisafunctionforallITactivities.9. Providetheright"resources"forthetaskathand.10. QualityControlisanessentialcomponentforExcellence.11. IssueEscalationandFollow-up.
Acquire&DevelopSkilledIndividuals
EstablishClearlyDefinedObjectives
PlanandCommunicate
DevelopandDefineProcesses
SelectandDeploytheRightTechnology
DeliverEffectiveSolutions
ITServiceDeliveryModel
LakeMichiganCollegeInformationTechnologyServicesStrategicPlan2017
6
2017-2020HighLevelObjectivesThestrategicplancoverssevenbroadcategoriesfor2017to2020thatinclude:
1. ITHumanCapital2. ITRiskManagement&Security3. EnterpriseApplications4. Pathways5. ITHelpdesk&AcademicTechnology6. NetworkInfrastructureandTelephony7. CloudComputing,DataCenterandComputingResources8. NapierCampusCapitalPlan
ITHumanCapital1) StaffingLevels–ContinuetoalignITresourcelevelswiththeneedsofthebusiness,the
shiftswithemergingtechnologyandtheexpandingfootprintoftechnologywithinthecollege.
2) OpenSourceSkills–ContinuetogrowopensourcetechnologyskillswithinITaroundthefollowingareas:Docker,Groovy,REST,Node.js,Angular,SailsJS/Express,JavaScript,MongoDBandLinux.
3) ProjectManagement-StrengthenITapproachtoprojectmanagement;adoptagilepracticesandprojecttrackingforkeyprojects.
4) Dev-Ops&SecurityPosition-ContinuetostrengththenewroleswithinITaroundsecurityandDev-opstomanagesecurecomputing,systemprovisioningandcomputeresources.
5) SecuritySkills–ExtendsecuritytrainingwithinITtosafeguardinformationalassetsforkeyareas.
ITRiskManagement&SecurityContinuetomanagecomplianceandreduceriskacrosstheorganizationtosafeguardITassetsandinformation.
1) ContinuetomanagebusinesscontinuityplanusingorexistingComvaultinvestmentandhighavailabilityservicemodelforvirtualServers
2) MaintaineffectiveDisasterRecoveryprocesses;conductAnnualdesktopreviewofLMCDisasterRecoveryPlanandmaintainproductionplans.
3) Continuetheuseofvenerabilityinternalsecurityscannerforserversandnetworkdevices.
4) MaintaintheITriskmanagementplantosafeguardITassetsandtoreduceexposures.5) MaintaintheKnowBe4securityawarenesscampaignatLMC.Educatingourinternal
stakeholdersisakeycomponentofhaveaneffectiveinformationsecurityprogram.
LakeMichiganCollegeInformationTechnologyServicesStrategicPlan2017
7
6) ExtendtheuseoftheF5firewallsystemswithinITtoincludedeeppacketinspectionusingourunifiedthreatmanagementfirewall.
7) SelectaSoftwareDefinedNetworkssolutionthatextendspolicybasednetworksecuritycontrolsbetweenswitchesandroutersthathelpsisolatekeysystems.ThiswillenablepolicybasedVLANSthatprovidesrobustcontrolsbetweenenterpriseapplications.
8) GrowtheuseofLMC’stwologgingsystemstosupportcriticalapplicationsandinformation.
9) Secureasecondarysecurityreviewofcrucialsystemsonanannualbasisinadditiontothethirdpartypentest.
10) Developalong-termplantostoreallSSNsatRestinencryptedformusingadatainmotionkeyencryptionservices.
11) SelectaMobileDevicemanagementsolutionforsafeguardinginformationalassetsonBYODsbaseduponfunding.
12) ContinuetogrowLMCsecurityprogram-UpdateWISPonabiannualbasisandconductanannualdataclassificationscanusingthirdpartytools.
13) ContinuetheuseofTwo-factorauthenticationforoffcampusaccesstoEnterpriseapplications.
14) Developalong-terminternaleventlogattheuseraccountlevelforsystemloginsandmoduleaccesstoprovidetraceabilitytouseractivities.
15) ContinuetousethirdpartyassessmenttoolstoprovideboardlevelinsightofLMC’ssecurityposture.LeveragetheFICOsecurityservicesasabaselinescoretomeasureIT’seffectivenessinmanagingsecurity.
EnterpriseApplications
1. MigratetoBannerXEby2018thatincludesthefollowingrelatedprojects:a. ReviewandupdatetheuserandgrouprolesMatrixtoensurethatACLsalign
withtheneedsofthebusinesswhilemaintainlimitedaccesstoPIIdata.b. LeveragetheBannerRESTInterfaceasanewsolutiontoreplaceselectedlegacy
interfaces.c. ProvideahighavailabilitymodelforBannerApplicationservicesusingtheF5
loadbalancer,RHELsVMenvironmentandDocker.d. ReviewcorebusinessprocessforFinancialAidandHRanddeterminehowXE
canbettersupportemployeeonboardingandfinancialAidprocesses.e. ReviewbusinessprocessesaroundselectedredesignedformswithXEto
strengtheninternalprocessflows.2. StrengthenthesupportmodelandutilizationofOffice365usingMicrosoftcloud
services.DetermineoptionsforextendingfilesharesfortheAcademicteamforcollaborationwithindiscipline.
LakeMichiganCollegeInformationTechnologyServicesStrategicPlan2017
8
3. ContinuetherolloutofEduDashtobuildworkflowsthatsupportrobustroutingofelectronicforms.EnableEduDashtohandledocumentscanningandevaluateoptionsforsunsettingourlegacyscanningsolution.
4. MigrateLMC’sprimarywebsitesitetoanopensourceCMSsolutionthatsupportintegrationwithPathwaysandWebComponenttechnology.
5. Continuethemigrationofdocumentscanningtootherareaswithinthecollege.6. Extendthedigitalsignagesolutionacrossthecampusthatsupportseffective
communicationwithstudents.7. Extendtheprintermonitoringservicestomanagehighavailabilityofservices.
PathwaysImplementthePathwaysIPASsystemthatwillprovidethefollowingservices:
1. StudentDashboardandportal2. StudentAssessmentsTools3. Student,StudentServicesandFacultyMessagingSystem4. DegreeEduTools5. CollegeCatalogLifecycleManagement6. DigitalCatalogandSchedulingtool7. FacultyAttendanceSystem8. EarlyWarningSystem9. ProgramandMajorsSequencingandMetaMajorTools10. ProgramandMajorsContentManagementSystems11. StudentRelationshipManagementSystem12. ContractBrokeringServicesforEmails,textingandnotifications.
ITHelpdesk/AcademicTechnology1) Maintainthe5YearPCrefreshplan–Refreshsystemsasneededtoensurethatthereis
adequatehardwaretosupporttheinfrastructureasitages.Targettolowerthedesktopacquisitioncostifpossible.
2) StarttheWindows10MigrationPlanandreviewoptionsforthePostPCEra.3) StartaGoogleChromebookpilotprojecttodetermineoptionsforloweringlabsupport
cost.4) Clarifyandplanforanyoptionsinsupportingone-to-oneinitiativesasdirectedbythe
AcademicTeam.5) StrengthenQualityGatesforkeyprocesseswithinITtodelivereffectiveservicesandto
provideaccurateinformation.6) AssisttheAcademicteaminstrengtheningourinstructionalsupportmodelsfor.7) Evaluateoptionstoextendthe24/7IThelpdeskpilotprojecttoaMichiganCollege
supportedmodelsharedamongcolleges.8) AssisttheAcademicteaminextendingitscurrentlecturecaptureservicemodel.
LakeMichiganCollegeInformationTechnologyServicesStrategicPlan2017
9
9) StrengthentheITcustomerservicemodelbyreplacingourlegacyhelpdeskticketingsystem.
10) ImplementanewQAprocessformanagingacademicsoftwareapplications.11) Continuetomonitorandoptimizedourprintandcopyingservices.
Networking&Telephony1) Replaceend-of-lifeNetworkComponents-5yearlife-spanforallnewcomponents…
expandability.ApproximatelyonehalfofourLANswitchinginfrastructurelacksbothfuturesupportandafeaturesetthatwilladequatelyembracenewtechnologiessuchasvoiceoverIPandnetworkaccesscontrol.Overthenext3years,apredictableandcloselymonitoredphase-inofup-to-dateswitchingtechnologywillbeimplemented.
2) Replacethecorenetworkswitchwithahigh-availabilitysolutionthatsupportssoftwaredefinednetworking.
3) ExpandWIFIdensitywithintheclassroomtosupportBYODandnewAcademicapplications.4) ContinuetoexpandoutdoorWIFIforallLMCcampustosupportBYODsandotherWIFI
applications.5) Continuetoexpandsecuritycamerasacrossthecampuseswhereneededtosupport
campussafety.6) LANConnectivityExpansionandImprovement
a) Maintainandupgradeournetwork-basedtelephonysystem.b) Anincreasingneedfornetworkconnectivityinclassrooms,labs,officeareasaswellas
customer-serviceareas.7) LeverageournewunifiedthreatmanagementFirewall
a) Providedeeppacketinspectionforcommonwebapplicationinjectionattacksandprovidescanningatthegatewayforcommonmalware.
b) OurnewlyacquirednextgenerationofInternetfirewalltechnologyemploysgranularfilteringcapabilities,greatlyenhancedremote-accesssecurityauthenticationfeatures,withimprovementsinallpopularVPNtechnologies.
c) InternalFirewallServices–Mostnetworkanddatasecuritybreachesoriginatefromwithintheorganization;notfromtheInternetandourinternalnetworkisvirtuallyopentothepublic.Implementingafirewallonour“inside”networkwillallowustoquicklyandeasilyputaverysecurebarrieraroundourservernetworkaswellasaroundless-secureareasofournetwork,bothwiredandwireless.
8) ImprovedInternetbandwidthandbandwidthmanagement-Improvedbandwidthmetricsandsolutionsformanagingbandwidth.
9) IncreaseGigabitBackbonebandwidthandIncreasedLocalAreaNetworkReliability.Addingswitchportsandinterconnectingswitch-to-switchlinkswillallowustomultiplybandwidthtoselectareasintheschoolbysimplyusingtheavailablefiberconnectivity.
LakeMichiganCollegeInformationTechnologyServicesStrategicPlan2017
10
CloudComputing,DataCenterandComputingResources
LMCITdesirestocontinuetodevelopan“ITasaServicemodel”usingprivateandpubliccloudsstrategiestoloweroperatingcostandimproveagility.
“ITasaService”includesthedynamicprovisioningofcomputingserviceswithinamanagedframeworkforthefollowingclassofservices:
§ InfrastructureasaService(IaaS)-Deliveryofraw,virtualizedcomputinginfrastructuresuchasserversandstorageasaservicetobuildapplications.(WindowsServer/LinuxServer/VirtualDesktop)
§ PlatformasaService(PaaS)-Deliveryofavirtualizedapplicationruntimeplatformthathasasoftwarestackfordevelopingapplicationsorapplicationservices.PaaSapplicationsandinfrastructurearerunandmanagedbytheservicesvendor.(IIS/HTTP/SQL)
§ SoftwareasaServiceSaaS-CloudbaseddeliveryofcompletesoftwareapplicationsthatrunoninfrastructuretheSaaSvendormanages.SaaSapplicationsareaccessedovertheInternetandtypicallychargedonasubscriptionbasis.(Email/CRM/SharePoint)
CloudInfrastructureArchitectureConsiderations
1. ContinuetobuilduponourDynamicprovisioningofServersusingMicrosoftHyper-V
2. CompletethemigrationtoBladeserversthatprovidebettercomputedensity.3. LeverageournewdynamicprovisioningofstorageusingEMCstoragesolution.4. Continuetoleverageournew10GHighspeedbackboneforstorageand
virtualization.5. ContinuetoleverageOffice365forEdgeEmailGatewayservices.
PriviateCloud
DataCenterNetwork
OSVirtualizatonSolutionandHardware
StorageVirtulizaton
PublicCloud
LakeMichiganCollegeInformationTechnologyServicesStrategicPlan2017
11
6. Evaluateoptionsforimplementingaread-onlyADserveronapubliccloudtoensurehighavailabilityofCanvasandotherADbasedsystemsintheeventofmajorInternetoutage.
NapierCampusCapitalPlan
1. SupportinternalstakeholdersastheyconsideroptionsforClassroommodernizationthatincludevarioustechnologycomponentsnotlimitedtolecturecapture,flatscreens,smart-boards,InternetofThingsandvirtualclassroomsupport.
2. ConductafeasibilityplanforrelocatingtheNapierDataCentertotheTelcoRoom.
3. Ensurethatadequatefiberandcablingbuildsareincorporatedwithinanyrenovationsforthelong-termsupportneedsofthenetwork.
4. Evaluateoptionsforamodernnetworkdistributionmodelwithintherenovationprojectthatimprovesnetworkreliabilityandreduceslong-termmaintenancecost.