IT Challenges and the States: Trends, Priorities and Policy Issues

Council of State Governments2006 Annual State Trends and Leadership Forum

Technology Working GroupPhoenix, AZ

December 1, 2006

Tom JarrettChief Information Officer/SecretaryState of Delaware

Doug RobinsonExecutive DirectorNASCIO

NASCIO represents state chief information officers and information resource executives from the fifty states, six territories, and D.C.

NASCIO's mission is to foster government excellence through quality business practices, information management, and technology policy.

About NASCIO

NASCIO is the premier network and resource for state CIOsNASCIO is an effective advocate for information technology policies at all levels of government Advance CIOs as key members of the statewide leadership team

NASCIO Goals

IT Enterprise Infrastructure & Services Information Security & PrivacyHealth Information TechnologyEnterprise ArchitectureIT Project Management Forum

Recap: Priorities for NASCIO in 2006

State IT Environment Today

IT security is critical concern – risk impact!Sharing of data, infrastructure & resources (intra and inter-governmental)Infrastructure optimization: consolidation by legislation or directive Interoperability – wireless infrastructureService delivery integration: e-governmentIT workforce - succession/transition (aging) Pent-up demand for IT deployment

State CIO Priorities: 20071. Security: Tightening security safeguards,

enterprise policies, employee education2. Consolidation: centralizing, consolidating

services, operations, resources, infrastructure3. Shared Services: Sharing resources, services,

infrastructure, 4. Cross-boundary: establish relationships,

joined-up government, local government collaboration/cooperative initiatives

5. Disaster Recovery: Improving disaster recovery, business continuity planning and readiness

6. Health Information Technology: Assessment, partnering, implementation

NASCIO State CIO Survey, Nov 2007

Which of the following would you rate as the most significant challenge facing state CIOs?

15%

16%

26%

30%

13%A. Lowering IT costs to meet demands for more efficiencies and better services

B. Increase IT efficiency and effectiveness through adoption of leading practices and emerging technologies

C. Mitigate security risks and ensure business continuityD. Promote enterprise integration of the IT infrastructureE. Strengthen role of CIO to promote higher levels of

influence and responsibility within the enterprise

NASCIO Midyear Conference, June 2006

VA

DCDC

PRPR

CA

AKHIHI

NMOK

KS

TN

AL

SC

ME

PA

WI

VTVT

NJ CTCT

RIRI

MDMD

DEDE

Appointment Status of State CIOs – December 2006

TX

NE

AR

IA

FL

NYOR

WYSD

MN

AZ

NV

COIL

MI

OH

ID

MT ND

MO

LAMS GA

WVIN

KYNC

UT

WA

GUGU

NHNH

MAMA

KEY:KEY:

OfficialActing/Interim

State IT Organizational Models

No one “right way” – it dependsComplete decentralizationDecentralization with critical elements consolidated Federated – agency decision makingState IT Authority – full consolidationHigher education, legislature and courts usually off limits

Trend toward more IT consolidation and shared services, but fluctuations Focus on IT spending control and business process improvementsIncreased resources devoted to enterprise IT securityOutsourcing – state portals and transaction servicesERPs and focus on legacy replacement

State IT Management Trends

Trend: More Business Disciplines in IT

Enterprise architecture: blueprint for better governmentMore focus on business processes improvementFormal risk assessmentsProcurement reform – strategic sourcing, leverage buying power and rationalization

Trend: Discipline Succeeds

Project and Portfolio Management: PM framework, methodology, education, tools and oversightChange management demands attentionService Level Management

DTI Project & Change ManagementOur Focus Is On Service Delivery

Project & Change Management Services

– Status Of Projects All Projects $186,772,342

Green, 121,481,788,

65%

Red, 0, 0%

Yellow, 65,290,554,

35%

On Target – no risk In Progress – may complete late At Risk – needs attention

Trends – hacking, spyware, malwareand phishing directed at state governmentMore aggressive threats - organized criminal activity? Increasing level of threatsGrowing role of state CISOInvestments by state CIOs

Information Security and the States

What country was the most common source of the intrusion attempts against your organization?

DTI Security ProgramDTI Security ProgramNational Security Benchmarking Effort• States we engaged in the effort• Vendor participants • Collaborative Efforts

- Multi-state ISAC- US Department of Homeland Security- NASCIO Global Security Cooperation Program

- Microsoft- FBI INFRAGARD

National Security Benchmarking Effort• States we engaged in the effort• Vendor participants • Collaborative Efforts

- Multi-state ISAC- Multi-state ISAC- US Department of Homeland Security- US Department of Homeland Security- NASCIO- NASCIO Global Security Cooperation Program

- MicrosoftGlobal Security Cooperation ProgramGlobal Security Cooperation Program

- Microsoft- FBI INFRAGARD- FBI INFRAGARD

Interoperability – information exchangeData standards and formatsLack of funding and incentives to accelerate deployment Medicaid coverage, waivers, innovations Legal, regulatory and administrative barriersSecurity and privacy concerns: HISPC projectInformation dissemination and education

Health IT: Major State Issues

What government capabilities or services do you believe have the most potential to be improved through better application of information technology?

1%9%1%17%64%9% A. Education

B. Health and Human ServicesC. Public SafetyD. RevenueE. AdministrationF. Transportation

NASCIO Midyear Conference, June 2006

Significant role of state in healthcare as …Payer – Medicaid, SCHIPs, other programsProvider – increased emphasis on quality of servicePurchaser – over 5 million employees nationwide

Why is NASCIO Interested in HIT?

Telecom reform – fast lanes, IPTV and feesAccess to content – priority routingNet neutrality – transport layer neutral? Taxes and fees for VoIP ? Interoperable communications - wireless for public safetyTransition to IPv6 – next generation InternetBroadband adoption and rich media

Communications Landscape and the States

Please select the most important telecommunications issue for your organization.

4%

8%

4%

36%

12%

11%

25% A. Information Security (protect sensitive information from unauthorized viewing)

B. Cost reduction and efficiency (increasing needs/legal requirements on limited budgets)

C. Mobility (remote access)D. Interoperable Communications (need to be able to

quickly communicate with each other and other command centers).

E. Managed services (outsourcing IT responsibilities)F. Voice and Data network convergence G. Adoption of Voice over IP (VoIP, IP telephony)

NASCIO Midyear Conference, June 2006

Select the top three areas for IT/Telecom investment for your organization in 2007.

25%

4%

10%

14%

7%

15%

13%

12% A. Data Management/Information SharingB. E-Government/Improving Citizen ServicesC. Information SecurityD. Mobile Workforce/Wireless OperationsE. Interoperability and IntegrationF. Managing/Replacing Legacy SystemsG. Homeland Security InitiativesH. IT Consolidation/Shared Services

NASCIO Annual Conference, October 2006

Telecommunications Landscape and Broadband

The Bigger News: regardless of the type of broadband connection used now, large majority in US are interested in high-bandwidthbroadbandUsers are eager for new applicationsConsumers prefer the triple play of services: voice, video and dataBundled services: future growth

Considering the Future: States and Broadband

Broadband competition – many choices and flavorsState regulatory environmentFederal – net neutralityState initiatives to promote broadbandMunicipal broadband initiatives: Wi-FiRural areas left in the slow lane?

800MHz “Next Generation”

– Provide statewide communications for all state, county and municipal government agencies, including fire and emergency medical services

– Provide in-building coverage for over 2,500 buildings– Replace lifecycle support for 10-year old

infrastructure– Enhance interstate interoperability with surrounding

jurisdictions– Enhance intrastate interoperability –

City of Wilmington

The REAL ID Act = Real Challenges

State cost impact - $11 billion? Implementation timelineRe-enrollment nightmareDL/ID design requirementsProcess improvementsNew verification processes Data harmonization

Critical infrastructure protection -disaster recovery & business continuity Healthcare costs and health ITSecurity imperative – culture & processContinued intense focus on privacy Strategic sourcing and alliances REAL ID – the unknownsand opportunities

The State CIOs: A View Forward

KEY PROGRAM GOALS NEXT 2 YEARS:1. 800MHz Next Generation 7. e-Government Program 2. ERP Service Delivery (Financials, T&L etc)

8. Enterprise Project Management Program

3. COTS–Courts Organized To Serve (Phases 1-4 of 8 total)

9. Statewide Disaster Recovery and Business Continuity Program

4. New State Data Center 10. Internet 2 Deployment 5. Network Operations Center 11. Enterprise GIS 6. Enterprise-wide Information Security Program

13. Broadband Deployment –Transparent LAN Service (TLS)

KEY POLICY GOALS NEXT 2 YEARS: 1. Enterprise IT Security Policy 7. Statewide Data Center Policy 2. Statewide IT Strategic Plan 8. Systems Architecture Standard 3. Indentity Access Management Policy 9. Implementation of new Data

Classification Policy 4. e-Discovery Policy / Standards 10. Service Oriented Architecture Policy5. Customer Relationship Management Policy

11. Document Control Policy / Standard

6. Imaging and Document Management 12. Electronic Signature Standard

DTI Key Initiatives

Identity Access Management Policy

36 gubernatorial elections just completed –11 new governorsThreats to success: no IT understanding on the transition team -- miss major opportunities to leverage governor's agendaProjects of the past – tough choicesEven with second term governors, the agenda changes

The Challenges of Transition

OPPORTUNITIES: What do you see as the major opportunity for the coming transition?

1%

8%

7%

39%

20%

25%A. The focus on the governor's agenda opens "enterprise

alignment" opportunities for ITB. The multi-year horizon opens a window for longer-term

reforms C. Key IT issues are ripe for 2007 action: shared services;

REAL-ID; homeland security; health care reform; etc.D. New opportunities because leadership going to younger,

more IT-savvy peopleE. The vendor community can help improve understanding

of the strategic role of technology in the global knowledge economy

F. Other?

NASCIO Annual Conference, October 2006

Questions ?

Doug RobinsonNASCIO Executive Director201 East Main, Suite 1405Lexington, KY 40507859-514-9153drobinson@amrms.comwww.nascio.org