winnebago county department of it
TRANSCRIPT
WinCo DoIT November 2016 Page | 1
Winnebago County Illinois Government
Department of Information Technology
Current Situation & Futures
November 2016
WinCo DoIT November 2016 Page | 2
Winnebago County Government IT Responsibilities
Technology Professionals Current Situation WinCo DoIT November 2016 Page | 3
For the Winnebago County Department of Information Technology (WinCo DoIT) hiring and retaining credentialed technology staff is challenging. At the beginning of 2006, there were 21 technology employees on staff. In 2011, headcount was reduced to 16. Current WinCo
DoIT staff of 13 is comprised of highly educated and competent technologists who serve internal and external government users. These professionals collectively possess 24 college degrees and 25+ technology and business related certifications. Average tenure is 7 years and the longest retention is 16 years.
Technology Professionals Current Situation WinCo DoIT November 2016 Page | 4
Technology Professionals Current Situation WinCo DoIT November 2016 Page | 5
Government Users vs. WinCo DoIT Headcount
WinCo DoIT staff is .65% of total Government Users.
This means there are approximately 154 Government Users per WinCo DoIT staff member.
2000+
13
1
10
100
1000
2016
Government Users vs. WinCo IT Headcount
GOVERNMENT USERS IT HEADCOUNT
Technology Professionals Current Situation WinCo DoIT November 2016 Page | 6
0 2 4 6 8 10 12
LEADSCCNA
CCENTRHCTOCAOCP
A+CPM
MCSAMCTS
MCITPMCP
Associates DegreesBachelors Degrees
Masters Degrees
3
2
1
1
3
1
3
4
1
3
1
5
8
12
4
WinCo DoIT Staff Credential Summary
Security Current Situation WinCo DoIT November 2016 Page | 7
Symantec Endpoint Protection is currently used for server and desktop security. In the last ten years, anti-malware has been upgraded four times to the latest and most robust protection suite.
In the 4th quarter of 2015, WinCo DoIT procured and deployed an additional layer of next generation perimeter security in the format of what is known as the FireEye. Combined with the advanced protection from Spam filtering and Cisco Intrusion Prevention Systems (IPS), WinCo DoIT has enhanced perimeter security using a diverse and comprehensive methodology.
From the 2012 Cost of Cyber Crime Study: United States, the least expensive attack to resolve is malware with an estimated $1,232 per incident financial cost and 2.1 days per incident time cost1. This estimate does not include any costs associated with stolen data. Within 4 minutes of install, the FireEye identified a PC on our network with Vawtrak on it. Vawtrak is malware designed to gain access to bank accounts accessed by the victim. Since the FireEye was installed in December of 2015, 110 billion network packets have been inspected. 190 incidents have been prevented for a minimum cost avoidance of $234K and a minimum avoidance of 399 labor days consumed by remediations.
1 2012 Cost of Cyber Crime Study:United States. HP Enterprise Security, Oct. 2012. Web. Independently conducted by Ponemon Institute LLC
Security Current Situation WinCo DoIT November 2016 Page | 8
Cleaned /Deleted43629%
Quarantined1329%
Manual Remediation81655%
Exempted by Policy1127%
Virus Statistics Fiscal 2016
Cleaned /Deleted QuarantinedManual Remediation Exempted by Policy
Security Current Situation WinCo DoIT November 2016 Page | 9
The Value of “FireEye” and Perimeter Security
Network ProtectionWinnebago County MAN
• Within 4 minutes of deployment, discovered a PC with
bank account phishing software on board. • 190 incidents avoided
o 2.1 (days) x 190 = 399 days o $1232 x 190 = $234,080
• 110 billion network packets read since deployment
Security Current Situation WinCo DoIT November 2016 Page | 10
SPAM statistics for the last 24 hours as of 11/07/2016
Security Current Situation WinCo DoIT November 2016 Page | 11
Over 39 million threatening emails stopped since May 2009. That is more
than 76% of the email Winnebago County has received since then.
Blocked38.6M
75%
Allowed11.5M
22%
Tagged1.01M
2%
Quarantined1.3K0% Viruses
319K1%
Spam Stats since May 2009as of 11/07/2016
Blocked Allowed Tagged Quarantined Viruses
Stability, Reliability, Predictability Current Situation WinCo DoIT November 2016 Page | 12
A progression of improvements in management technique, hardware and software selection, monitoring, and security improvements has allowed us to meet our users’ expectations. The WinCo DoIT promises a Service Level Agreement (SLA) of “the five nines.” This means that
99.999% of the time, based on 24/7/365, mission critical (and other business) applications and services will be available. Using Windows Server and various Linux operating systems along with virtualization and current technology storage devices, WinCo DoIT has been able to ensure uptime and performance. These designs may be referenced as “technology convergence” whereas highly complex technology assets (hard and soft) are centralized on platforms that are stable and reliable.
Stability, Reliability, Predictability Current Situation WinCo DoIT November 2016 Page | 13
100%
100%
100%
100%
100%
99.989%
100%
99.989%
100%
100%
100%
100%
100%
100%
100%
AFIS
CAD
Chameleon
DevNet
MS Exchange
FCE
iJuror
Munis
OffenderTrak
OpenQuery
OTWeb
PDO
SAO
Point Click Care
Patagonia
Application Availabilityfor some Mission Critical and other Elected and Appointed
Officials' Applicationslast 365 days
as of 11/07/2016
Stability, Reliability, Predictability Current Situation WinCo DoIT November 2016 Page | 14
Virtual Host
Virtualization Structure (General)
Physical Servers
Stability, Reliability, Predictability Current Situation WinCo DoIT November 2016 Page | 15
17th Judicial (Official)
5 Physical
14 Virtual
Monitoring Current Situation WinCo DoIT November 2016 Page | 16
Robust monitoring software provides real time hardware and software status information that allows WinCo DoIT to quickly and proactively respond to minor issues, often mitigating the risk of wide-scale outages or minor issues becoming major.
Monitoring Current Situation WinCo DoIT November 2016 Page | 17
Real Time Infrastructure Monitoring
Backup Current Situation WinCo DoIT November 2016 Page | 18
Ensuring backup and recovery of all County data is a top priority of the WinCo DoIT. Over 140 backup jobs run daily and we maintain a 41 calendar day recovery horizon complimented
with 6, 12, 18 and 24-month snapshots.
Backup Current Situation WinCo DoIT November 2016 Page | 19
• 41 day rapid recovery horizon • 6, 12, 18 & 24 month snapshots for point in time
recovery
Successful12185%
Recovered5
3%
Success with Exceptions
64%
Failed118%
Last 24 hr Backup Statusas of 11/07/16
Successful RecoveredSuccess with Exceptions Failed
Winnebago County Technology User Current Situation WinCo DoIT November 2016 Page | 20
Critical to effectiveness is to know the mission. The WinCo DoIT team knows why they come to work, the department maintains metrics, a knowledge base and are diligent about documenting what they do and how much time they spend doing it.
Winnebago County DoIT Mission Statement
"It is the purpose of the Winnebago County Department of Information Technology to be of maximum service to its internal and external customers by providing timely, accurate and financially sound Information Technology counsel, services and solutions. Our focus shall be the five nines in everything we do - our Information Technology infrastructure shall be available 99.999% of the time; our service commitments shall be completed 99.999% of the time on schedule; 99.999% reliability, accuracy and integrity in everything we do."
Winnebago County Technology User Current Situation WinCo DoIT November 2016 Page | 21
There were a total of 10,126 tickets opened and 10,046 tickets closed in Fiscal 2016.
0
100
200
300
400
500
600
700
800
900
1000
Oct Nov Dec Jan Feb Mar Apr May Jun Jul Aug Sep
Tick
ets
Month
Tickets Opened vs. Closed by MonthFiscal 2016
Opened Closed
Winnebago County Technology User Current Situation WinCo DoIT November 2016 Page | 22
0
0.5
1
1.5
2
2.5
3
3.5
4
4.5
5
Oct Nov Dec Jan Feb Mar Apr May Jun Jul Aug Sep
Day
s
Month
Support Ticket Meantime to Closure Fiscal 2016
Winnebago County Technology User Current Situation WinCo DoIT November 2016 Page | 23
Criminal Justice3,72837%
DoIT6787%
Government Users1,23612%
CoR551%
Appointed Officials2,16321%
WinGIS34
0%
Public Safety1,90019%
Non PS/CJ Elected Officials3043%
Tickets Opened by OrganizationFiscal 2016
Government Convergence of Technology Services Current Situation WinCo DoIT November 2016 Page | 24
We imagined that a “Metropolitan Information Technology Services” organization could be formed of technologists “from” government “for” government that could provide high value, low cost technology services. In some circles, that may be referred to as “Government
Convergence of Technology Services (GCoTS)”. As WinCo DoIT has become effective with servicing internal government users, we set our focus on helping other governmental agencies throughout Winnebago County. In a few short years, WinCo DoIT has developed and delivered a model of IT support services for non-traditional government users. The types of services provided are labor, email, server, storage, bandwidth and technology consulting. With serving over 40 other agencies, WinCo DoIT made a contribution to the General Fund of over $1M during the last six fiscal years. GCoTS is consistent with intergovernmental cooperation initiatives and goals. Discussion and ideas of regionalization may now be contemplated.
Government Convergence of Technology Services Current Situation WinCo DoIT November 2016 Page | 25
Government Convergence of Technology Services (GCoTS)
17th Judicial Circuit Court - CPDC Northern Illinois Training Advisory Board Administrative Office of Illinois Courts Pecatonica Police Department Boone County 17th Judicial Circuit Court Rockford Airport/FlyRFD.com Boone County Administration Rockford Area Economic Development Council Boone County Circuit Clerk Rockford Housing Authority Boone County Housing Authority Rockford Sexual Assault Counseling, Inc. Boone County Probation Rockford Township Assessor Boone County State's Attorney Rockton Police Department City of Belvidere Roscoe Township Assessor City of Loves Park Severson Dells Nature Center City of Rockford Public Works Department Village of Machesney Park City of South Beloit Village of Pecatonica City of South Beloit Police Department Village of Rockton Economic Development District Northern Illinois Village of Roscoe Forest Preserves of Winnebago County Village of Winnebago Illinois Association of Problem-Solving Courts WinGIS Klehm Arboretum Winnebago County Bar Association of Rockford Loves Park Fire Department Winnebago County Health Department Loves Park Police Department Winnebago County Housing Authority Administration North Park Public Water District Winnebago PD
Government Convergence of Technology Services Current Situation WinCo DoIT November 2016 Page | 26
$60,696
$116,195
$151,492
$200,855
$233,683
$303,948
$25,000
$75,000
$125,000
$175,000
$225,000
$275,000
$325,000
2 0 1 1 2 0 1 2 2 0 1 3 2 0 1 4 2 0 1 5 2 0 1 6
Government Convergence of Technology Services (GCoTS)REVENUE HISTORY
$1.07M added to General Fund
Leadership and Vision Futures WinCo DoIT November 2016 Page | 27
WinCo DoIT has successfully managed many technology projects for internal and external government users. While some of these projects are more expensive and complex than others – on time and on budget have been the outcomes. Some of
these projects have included but are not limited to: bidirectional data exchange of offender sentencing data with the Illinois Department of Corrections (IDOC); Court and Case Management (CCM); Child Protection Data Collection (CPDC) application build and deployment for the Administrative Office of Illinois Courts; ready assimilation of court data by Judges; pretrial defendant notification; Voice over IP (VoIP); redundant Gigabit wireless connectivity between the North and Downtown campus; OffenderTrak (OTrak) deployment in Juvenile Detention; automated geocoding for Deputy beats; email and email archiving; IP video surveillance at RBNH, Animal Services and WCHD (Court St); Time and Attendance (labor collection); courtroom docket displays; resilient 10 Gigabit downtown network backbone; deployed public and private wireless in county buildings; deployed emergency notification system(ENS); outstanding fines and fees collections; and many more.
Leadership and Vision Futures WinCo DoIT November 2016 Page | 28
1. $6.7M Court and Case Management implementation launched November 2010.
2. Collections initiative: Over $9.1M collected in past due Fines and Fees since January 2012.
3. Integrated Cherry Valley Police, Loves Park Police, and Corrections into Sheriff’s Records Management System.
4. Integrated Winnebago County Health Department into DoIT Support.
5. Rockford Airport: infrastructure Support for ABX Air.
6. Illinois Criminal Justice Information Authority (ICJIA) IDOC bidirectional data exchange.
7. E-warrant pilot initiated with the Sheriff and the 17th Judicial Circuit July 2016.
8. Online streaming of County Board meetings.
9. Supported ACA reporting and 1094/1095 form creation and submission.
10. Implemented new permit and tracking system (PINS).
Project Highlights
The Internet of Things Futures WinCo DoIT November 2016 Page | 29
Simplified, the Internet of Things (IoT) is a proposed development of the Internet in which everyday objects have network connectivity, allowing them to send and receive data transforming everyday human activities (the way we live and work). Human interactions with
government will morph whereas those activities requiring human interaction will be less and less. Winnebago County must possess adequate infrastructure that is reliable and secure to participate in the IoT in a meaningful manner. The IoT places even greater emphasis on technology security apparatus.
The Internet of Things Futures WinCo DoIT November 2016 Page | 30
Gigabit to the Desktop Futures WinCo DoIT November 2016 Page | 31
High-speed communication between desktop computers and the applications they access, greatly influences human efficiency in that humans need not experience any wait time for data / screen rendering. Current internal bandwidth to the desktop is 100 megabits. A
way to interpret this is that our bandwidth to the desktop is legacy or 20th century restrained.
Gigabit to the Desktop Futures WinCo DoIT November 2016 Page | 32
Network Congestion High-Speed Communication
Public Safety Futures WinCo DoIT November 2016 Page | 33
Possibly the two single biggest technological enablers for public safety are: radio communications and Police Enterprise Resource Planning (PERP). PERP is where all pieces of public safety management converge within a single application or closely knit
esoteric applications. These pieces include, but are not limited to: patrol, corrections, detective bureau, property management, evidence, canine, administration, and 911.
STARCOM21 is the official statewide public safety radio network of Illinois. STARCOM21 is a Project 25 (P25 or APCO-25) compliant 700/800 MHz IP based radio system with over 270 radio tower sites across the state. The STARCOM21 network is founded on Motorola's 80 years of partnership with public safety professionals. Project 25 is a suite of standards for digital radio communications for use by federal, state/province and local Public Safety organizations in North America to enable them to communicate with other agencies and mutual aid response teams in emergencies2. The quickest and easiest way to understand this is police radio communication goes internet protocol (IP) based.
2 Wikipedia contributors. "Project 25." Wikipedia, The Free Encyclopedia. Wikipedia, The Free Encyclopedia, 28 Oct. 2016. Web. 28 Oct. 2016.
Public Safety Futures WinCo DoIT November 2016 Page | 34
POLICE ENTERPRISE RESOURCE PLANNING MODEL
Law Enforcement Business
Patrol
Traffic K-9 Unit
Field Interview
Field Reports Photo Lineups
FugitiveApprehension
UnitSWAT
DB
Investigation
Evidence Photo Lineups
Administration
Fleet mgmt. Personnel Training
Records
Crime Mapping Analysis
Corrections
Arrests / Bookings
Gang Affiliations
911 /
CAD
Calls for
Service
Public Safety Futures WinCo DoIT November 2016 Page | 35
17th Judicial Court Futures WinCo DoIT November 2016 Page | 36
Forecasts are that every citizen, at some point in their life, will interact with the court system. Matters brought to the courts will be settled in different ways – possibly with technology whereas parties never physically meet and are provided a “just disposition” virtually. Court
rooms will be distributed and in some cases virtualized. The construct of “Just in Time Justice” will gain traction and evolve. Self-represented parties will continue to increase placing a burden on court systems and the technologists participating in helping with efficiencies. Drive up / self-initiated “do it yourself law” is here now and its impact on case load and court capacity has yet to be forecast. Lawyers will continue to demand and expect seamless interaction with the courts for their clients. We have yet to define the challenges, let alone articulate the solution. What we do know as WinCo DoIT is that fast and secure networks must exist first to support the Courts of the 21st Century. We must be prepared to support case process, management information and decisions. In other words, information that makes our “court factory” more efficient. The key purpose of case management is to organize data (and ensure completeness) so it can, in turn, be converted into information for cases to be adjudicated and “just decisions” rendered.
17th Judicial Court Futures WinCo DoIT November 2016 Page | 37
“Just Dispositions” from Virtual Court Rooms
Futures WinCo DoIT November 2016 Page | 38
Winnebago County Government IT Responsibilities