Executive BranchInformation Technology

JCIT December 16, 2019

Dr. DeAngela Burns-WallaceChief Information Technology Officer

Agenda

• Introduction

• 3rd Quarter KITO Report

• IT Project Oversight Recommendations

2

KITO Report

• July-September 2019 Quarterly Report

• Next Report Published February 10, 2020

3

4

KITO Reportable Projects

17

9

10

6

42 Total Projects Monitored

ActiveApprovedPlannedCompleted

New Completed Projects

• KDHE • Bureau of Public Health Informatics – EpiTrax

• Pittsburg State University• Oracle Cloud Implementation III

5

Active Projects by Branch

2019 Q3

Average

0

2

4

6

8

10

12

14

Executive -$130.7m

Regents - $26.5m Judicial - $0 Legislative - $0

11

6

0 0

13.8

30 0

2019 Q3 Average6

Active Project Status

7

3

2

5

Good - $19.5m

Good -Infrastructure - $6.1m

Caution - $2.1m

Alert - $129.4m

7

Active Projects in Caution Status

• Kansas Department for Children and Families• Kansas Prevention and Protection Services

(PPS) Placement Management System Project

• Kansas Department of Health and Environment• Bureau of Environmental Remediation

Database

8

Active Projects in Alert Status• Office of the Attorney General

• iManage Document Management Project

• Fort Hays State University• FHSU ERP Implementation

• Kansas Department of Health and Environment• MMIS Modernization & Fiscal Agent Operations Takeover Svcs

Reprocurement Project III

• Office of Information Technology Services• Data Center as a Service – IT Hybrid Cloud project –

Infrastructure

• Kansas Department of Transportation• K-Hub

9

Questions

10

IT Project Reporting

11

ITEC 2000 Series Volunteer Policy Review Team

• Mike Wilkerson, DCF• Joe Mandala, KBI• Allan Haverkamp, KDOT• Megan Rohleder, KSHS• Greg Larson, ESU• Cole Robison, OITS

• Sara Spinks, OITS• Courtney Fitzgerald,

OITS• Rod Blunt, CISO, OITS• Jeff Maxon, OITS• Donnita, Thomas, Project

Manager, OITS

12/10/2019 12

Goals

• Evaluate IT Projects based on business risk• Incorporate flexibility to the oversight process• Improve transparency of IT resource utilization• Identify and close reporting gaps• Simplify the Process• Clearly define ‘IT project’• Business Needs Alignment• Process Improvement

13

Proposed Process Changes

• Remove single determining factor of cost threshold

• Implement a business risk-based approach that determines reporting requirements

• Create a comprehensive registry of all IT Projects regardless of cost

• Assign the appropriate level of reporting for the corresponding level of business risk

• Automate the process to simplify reporting

12/10/2019 14

Current IT Project Definition

“Information technology project - means a project for a major computer, telecommunications or other information technology improvement with an estimated cumulative cost of $250,000 or more and has proposed expenditures for: (1) new or replacement equipment or software; (2) upgrade improvements to existing equipment and any computer systems, programs or software upgrades therefore; or (3) data or consulting or other professional services for such a project.”

12/10/2019 15

Proposed IT Project Definition

"Information Technology Project means an information technology effort of defined and limited duration which implements, effects a change in or presents a risk to processes, services, security, systems, records, data, human resources or architecture.”

16

Business Risk Factors

• Breadth of business units impacted• Initiative duration• Cost• Information Security• Impact to Core Business Mission• Familiarity, supportability, maturity of

technology

12/10/2019 17

Overall Business Risk

• Determined by a combination of risk levels for the individual risk factors

• Risk factors are weighted in the determination

• Will continue to assess and revise weighting and calculation

12/10/2019 18

Next Steps

• Continue policy research and development• Feedback• Procedure Development• Focus Groups & Testing• Automation Tool

12/10/2019 19

Questions

20