Officeof Technology Requirements

Transcription

OFFICE OF TECHNOLOGYREQUIREMENTSJustin McAllisterCFO – WV Office of TechnologyHope FoutEnterprise Service Manager– WV Office of TechnologyDepartment of Administration

Why does OT review IT Procurements? To abide by the following Statutes:– W.Va. Code §5A-6-4(a)(3)– W.Va. Code §5A-6B-1,et seq. To identify opportunities for standardization and a unified approachto information technology across state government To evaluate operational efficiencies To leverage enterprise solutions when possible To ensure safeguarding of information systems, sensitive andrestricted data, and communications infrastructures To ensure tax dollars are being spent wisely2

What is the internal OT process for CTO Requests?When an Agency initiates a request, the CTO Review Administratordetermines the appropriate technical unit within the Office of Technology toperform the review. Requests are often reviewed by more than one technicalunit, depending on the nature and complexity.Technical Units include: Enterprise Data Storage Solutions Application Development, IT Services, and Software Networking and Telecommunications Security, Privacy, and Antivirus Initiatives Client Services and Desktop SupportUpon completion of the technical review/s, the CTO evaluates therecommendation/s, makes a final determination, and issues an approval ordenial of the Agency’s request.3

Recent Policy Changes Created a new CTO-19-001 Policy referenced in the Purchasing Handbook- issued-by-the-cto.aspx Implemented internal process changes within the Office of Technology Implemented Email acknowledgments from theConsulting Services mailboxwith OT Tracking # added Implemented changes forprocurements that are less than 2,500 Procurement Implemented changes forContract Renewals for futureyears4

CTO Process OverviewTechnology purchases generally refers to hardware, software, and services (includingprofessional services) implemented on or connected to the State’s network. When anAgency is considering a technology purchase of any value, the Agency must requestreview and approval of the proposed procurement from the Office of Technology.Requests are made electronically, and processed by the CTO ReviewAdministrator. Requests are processed by the date received from oldest to newest.Expedited requests take precedent.Types of CTO requests: Less than 2,500.00 Expedited CTO Requests (RFP, RFQ, RFI, Change Requests) Contract Renewals Telecommunication Waivers Statewide Contracts Other5

What should you send to OT for CTO Requests? Description (What do you need?)Justification (Why do you need it?)Estimated Cost (How much it will cost?)Will it be replacing something already in place or will it be a new addition?Specification Documents (if applicable)Where will equipment be located? (if applicable)Oasis number (if applicable)If Expedited, additional data will be needed (see subsequent slides)6

Procurements under 2,500.00Non-Software Technology Procurements under 2,500.00 Non-Software Technology procurements under 2,500.00 are pre-approved for purchase and do not require a CTOapproval memo unless referenced in the list below:– Hardware (Not previously provided in Office of Technology Bill of Material (BOM)) Routers Wireless Access Points Ethernet Switches VoIP Phones/Equipment Circuits PCs and Tablets that are not on the IP19 Statewide contract– Technology Statewide Contract Purchases will still require 3rd party approval (if applicable)Software Technology Procurements under 2,500.00 The only software items under 2,500.00 that are pre-approved and do not require CTO approval memo are referencedbelow:– Adobe DC PDF– Nuance PDFRemoveable Media If you are purchasing removeable media under the 2,500.00 threshold it will not require CTO approval. However, youwill need to work with your Agency Privacy Officer, the State Privacy Office, and the OT Security Office when applicable.Removeable Media must have a privacy impact assessment (PIA).7

Expedited RequestsThe intent of the expedite review is to provide agencies a mechanism to indicate atime-sensitive procurement as the result of a legitimate business need. For timesensitive requests, an Agency may request expedited review for an additional charge.The requesting agency head must approve expedited requests. An Email chain isacceptable.The following review types are NOT authorized for expedited review.– Request for Proposals (RFPs) at the concept stage– Request for Proposals (RFPs) at the release stage– Contract Renewals8

Expedited Requests (Cont)An expedited review request must be sent to the ConsultingServices@wv.gov Email addresswith the subject line of “Expedite Request” and marked as high importance. In the Emailrequest, provide specification documents and detailed business justification in accordance withthe criteria outlined below:- Detailed explanation of the funding source impact to the agency.Estimated Cost of procurementFund source type (General Revenue, Special Revenue, Grants, etc.)If funds are expiring, provide expiration date(s).Additional details, as necessary.- Significant Operational Impact.Detailed explanation of the operational impact to the agency.Explanation of the urgency and scope of anticipated or actual impact.Timeline of existing or anticipated operational impact.Additional details, as necessary.9

CTO Requests (RFP)Request for Proposal (RFP) Concept Stage - At concept stage the Agency must submit an overview and justification ofthe desired RFP to the ConsultingServices@wv.gov Email address with the subject line of“RFP Concept Stage: Description of Request”. At this stage of procurement, the Officeof Technology is reviewing the request to ensure alignment with the strategic initiatives.Agency contact will receive an approval memo from the Office of Technology via Email sothey can move forward with the procurement. Release Stage - At release stage the Agency must submit the RFP solicitation withestimated costs to the ConsultingServices@wv.gov Email address with the subject line of“RFP Release Stage: Description of Request”. At this stage of procurement, the Officeof Technology is ensuring the solicitation aligns with the concept. Agency contact willreceive an approval memo form the Office of Technology via Email so they can moveforward with the procurement. Award Stage - At award stage the Agency must submit all award documentation to theConsultingServices@wv.gov Email address with the subject line of “RFP Award Stage:Description of Request”. At this stage or procurement, the Office of Technology isvalidating strategic alignment and cost. Agency contact will receive an approval memo fromthe Office of Technology via Email so they move forward with the procurement.10

CTO Requests (RFQ)Request for Quote (RFQ) Release Stage - At release stage the Agency must submit the RFQ solicitation withestimated costs to the ConsultingServices@wv.gov Email address with the subject lineof “RFQ Release Stage: Description of Request”. At this stage of procurement, theOffice of Technology is ensuring strategic alignment. Agency contact will receive anapproval memo form the Office of Technology via Email so they can move forward withthe procurement. Award Stage - At award stage the Agency must submit all award documentation to theConsultingServices@wv.gov Email address with the subject line of “RFQ AwardStage: Description of Request”. At this stage or procurement, the Office ofTechnology is validating strategic alignment and cost. Agency contact will receive anapproval memo from the Office of Technology via Email so they move forward with theprocurement.11

CTO Requests (RFI)Request for Information (RFI) At concept stage the Agency must submit an overview and justification of the desiredRFI to the ConsultingServices@wv.gov Email address with the subject line of “RFIConcept Stage: Description of Request” . At this stage of procurement, the Office ofTechnology is reviewing the request to ensure alignment with the strategic initiatives.Agency contact will receive an approval memo from the Office of Technology via Emailso they can move forward with the procurement.12

Contract RenewalsAt Contract Renewal the Agency must submit all renewal documentation to theConsultingServices@wv.gov Email address with the subject line of “ContractRenewal: Description of Request”. At this stage of procurement, the Office ofTechnology is validating strategic alignment and cost. Agency contact will receive anapproval memo from the Office of Technology via Email so they move forward with theprocurement. Contract Renewals will be approved for the initial contract plus all optional years.A new request will not be required in subsequent years unless noted on the initialMemo or if the contract renewal somehow alters the technical specifications orprice of the original procurement effort. Contract Approvals approved prior to September 1, 2019The next renewal will need to come through the process to obtain approval for theremainder of the contract. Contract Renewals will be Audited as needed.13

Change OrdersContract Changes Changes to an existing contract that alters the technical specifications or price ofthe original procurement requires the Agency to submit documentation to theConsultingServices@wv.gov Email address with the subject line of “ChangeOrder: Description of Request”. At this stage of procurement, the Office ofTechnology is validating strategic alignment and cost. Agency contact willreceive an approval memo from the Office of Technology via Email so they moveforward with the procurementContract Reassignments CTO approval is not needed for contract reassignments necessitated by a nameand/or other administrative change, such as funding or address changes.14

Telecommunication WaiversTelecommunications Waiver Process Per W.Va. Code §5A-7-1,et seq, the IS&C Division, reporting to the CTO, isresponsible for the payment of uncontested invoices for telecommunicationsservices Provided, That the service is provided under a statewide contract. An Agency desiring an exemption from the WVOT’s ordering and billing services’authority may make a written request, with sufficient justification, for review andapproval. These requests should be sent to Consulting.Services@wv.gov. NOTE: A Telecommunications Services Ordering/Billing waiver does notconstitute a waiver from any Statewide Contract, as that authority is held by theCentral Purchasing Division. In addition, these waivers are not to be confusedwith CTO review and approval for the requisition of telecommunication services. The provisions of this article do not apply to the Legislature or the Judiciary.15

Statewide ContractsThe following Statewide Contracts require Office of Technology Approval via 3rd partyapproval in OASIS. For ordering instructions and attachments, ault.html and click on the link in theContract column for the respective contracts. IP19 - Desktop and Laptop Computers and MonitorsDIGICOP - Digital Copiers (Lease or Purchase of Multi-FunctionCopiers)MAILMCHN - Digital Mailing Machine SystemsITCONSULT - Information Technology & Advisory Services provided byGartner16

Other RequestsPrivacy Impact Review The CTO Review Process attempts to identify technology procurements that maycollect, use, store, or transmit sensitive and/or restricted data. If identified, theState and Department Privacy Officers are notified and a Privacy ImpactAssessment is recommended when the CTO approval memo is sent to therequestor. ges/default.aspx)E-Portal Governance Board Process (EPORTAL16) As Agencies pursue e-government applications, systems and/or websites, the Eportal Governance Board, consisting of the CTO and representation frommultiple Departments, provides approval, prioritization, and monitoring of theportfolios, programs, and/or projects including scope, budgets, and schedules, aswell as changes to these items. The EPORTAL SWC Ordering Instructions require CDOs for new application orwebsite development.NON-OASIS Users (Example Local Health Departments) If the Agency does not have OASIS access they must submit a WV-39 requestform to the OTES@wv.gov Email address.17

Statewide Contracts including Technology Commodities or ServicesOASIS IDVendorDescriptionActionIP19Dell Marketing LPPersonal Computers/ Laptops3rd PartyDIGICOPKomaxDigital Copiers3rd PartyMAILMCHNKomax/Pitney BowesDigital Mailing Machine Systems3rd PartyITCONSULTGartnerInformation Technology & Advisory Services3rd PartyCMA SWC*25Verizon BusinessSIP trunkingTCRVoIP19Lumos/SegraHosted VoIP Solutions & ServicesTCRCMA SWC*02Verizon BusinessData Transport servicesTCRCENTREX19FrontierCentrex and Business lines and trunks, ISDN and DSLTCRLDPHONE19Method OneLong Distance phone serviceTCRLAR16SHILarge Account Reseller for Microsoft SoftwareCTOMSENTRPRZMicrosoft LicensingMaster Agreement Microsoft Licensing (Enterprise)CTOMA05SW19IBMMaster Agreement IBMCTOTEMPITMultipleIT Staffing ContractCTOCPHONE 13AAAT&TCellular Phones and Planswvot.cell@wv.govCPHONE 13BVerizon WirelessCellular Phones and Planswvot.cell@wv.govEportal16WV InteractiveState’s Web Portal SolutionePortal BoardCMA SWC*27Iron MountainRecords ManagementNO CTO Approvalrequired18

Recap and ReviewProcurementTotalCostRFQ for Healthcare system 325,0003 HP Desktop Printer 2,10010 Desktop Scanners 8,100Network Switch (no WVOTBOM) 1,859MS Surface not on Dell IP19contract 2,145Contract Renewal Yr 2 of 4 54,0002 USB Thumb Drives 118Adobe PDF Writer (not DCCloud) 180Docking Station purchasedfrom IP19 125New Policy Action19

Upcoming Policy ChangesBlanket Privacy Impact Assessmentfor Removeable Media at a Department Level Removeable Media URL to 11 RemovableMedia Mar2019.pdf Privacy ment/Pages/default.aspx)3rd Party Review approval in OASIS for all items except: RFP Concept under 2,500.00 exceptions Non-OASIS users20

Other Tips and Tricks Current 3rd Party Review Process For SWCs (see Appendix B) Cell Phones – Do not require CTO approval. For help with cell phones please sendEmail to wvot.cell@wv.gov Under Warranty Part Replacements – If the devices are already in implementationand covered by warranty to replace the failed components with like components aCTO approval is not needed. However if the failed components are being replacedwith a new or separate solution, then CTO review/approval would be needed. Telephony Statewide Contracts require a TCR form to be submitted to WVOTTCR@wv.gov Email. The TCR forms are located at the following Pages/DownloadableForms.aspx If you aren’t sure whether or not your item should be submitted to CTO Approvalplease reach out to your designated OT IRM or send an Email toConsultingServices@wv.gov.21

QUESTIONS?22

Contact UsContact NameContact InformationJustin McAllisterJustin.T.McAllister@wv.gov, 304-957-8184Hope FoutTara.H.Fout@wv.gov, 304-957-6877OASIS v.govOT Service DeskServiceDesk@wv.gov, 304-558-9966OT IRM GroupERM@wv.gov, 304-957-8140OT TCR GroupTCR@wv.govOT Cell Groupwvot.cell@wv.govOT Securityesecurity@wv.govOT Websitehttps://technology.wv.gov23

Appendix A: Statute References W.Va. Code §5A-6-4 (a)(3) provides the Chief Technology Officer (CTO) authorityto:–Evaluate: Economic justification System design Suitability of information equipment and related services– Review and make recommendations on the purchase, lease, or acquisition ofinformation equipment and contracts for related services by the state spendingunits. The Purchasing Handbook Reference is 7.2 (Special Acquisitions) CTO Policy CTO-19-001 issuedby-the-cto.aspx24

Statute References (Cont.) W.Va. Code §5A-6B-1 et seq. West Virginia Cybersecurity Officea) There is hereby created the West Virginia Cybersecurity Office within the Officeof Technology. The office has the authority to set standards for cybersecurity andis charged with managing the cybersecurity framework.– Ensure the security of state government information and data communicationsinfrastructure from unauthorized uses, intrusions, or other security threats W.Va. Code §5A-6-8 Exemptions– The provisions of this article do not apply to the: Legislature Judiciary Constitutional Officers25

Appendix B:3rd Party Approval WalkthroughFor 3rd Party Approval in OASIS, use the following steps to submit your purchase to the IPBoard:Step 1:In the Header Section, Click on the Reporting Tab. Leave Reporting 1 Field as is Change Reporting 2 Field to 10; This is the CTO IP Board26

3rd Party Approval Walkthrough(Cont.)Step 2: Once the ADO/CDO has been completed, validated, and submitted into workflow, theAgency will take the task and approve, which will send the document to your agency’s 3rdParty Approver’s worklist. The 3rd Party Approver must reassign the order to the IP Board’sworklist by using the following instructions:When the document appears in the Agency’s 3rd Party Approver’s worklist, he/she will checkthe document box and from the Action Menu at the top of the page, select the Reassignfunction.27

3rd Party Approval Walkthrough(Cont.)Step 3: After selecting Reassign, type “lipscomb*” in theUserID Field and click Browse or hit Enter to search. Select“lipscombdo1” in Dept 0231 and Unit 0231 and click“Select” hyperlink underneath the search results.Step 4: Your ADO/CDO will be assigned to the IP Board. Youcan verify this step by looking at the document’s workflow. Ifdone correctly, you will see the document is assigned toDonna Lipscomb. If changes are requested, the IP Boardwill reject the document. If approved, it will continue throughthe workflow.28

CMA SWC*25 Verizon Business SIP trunking TCR VoIP19 Lumos/Segra Hosted VoIP Solutions & Services TCR CMA SWC*02 Verizon Business Data Transportservices TCR CENTREX19 Frontier Centrex and Business lines and trunks, ISDN and DSL TCR LDPHONE19 Method One Long Distance phone service TCR LAR16 SHI Large Account Reseller for Microsoft Software CTO