Laserfiche WebLink
Information Technology Assessment <br />City of Santa Ana October 30, 2014 BAFO V2 <br />Network vulnerabilities: Interception, Availability, <br />Access/Entry Point <br />Controls: Interception, Availability, Access/Entry Point <br />Encryption and IT audit policies and procedures <br />Logical security audit: passwords policies, termination <br />policies, special user accounts, remote access <br />Specific tools used in network security <br />• Physical security of data centers <br />• Data center personnel <br />• Equipment <br />• Policies and Procedures <br />• Physical security / environmental controls <br />• Backup procedures <br />• Location (move IT form City Hall other location, <br />recommendations) <br />Help Desk & Reporting <br />A YIN checklist will be used to confirm if the City has the foregoing <br />security policies and practices in place: Security requirements will be <br />prioritized using a 1, 2 , 3 rating where number is the highest priority. <br />Four (4) two-hour workshops will be facilitated in a focus group format. <br />The following data will be collected for each of sessions listed above: <br />• Problems: anything inhibiting the effective operation, support and/or <br />maintenance of the City's information systems. <br />• Impacts: to the operating effectiveness of the IT organization or its <br />internal / external customers. <br />• Solutions: for each respective issue, i.e., technology solutions, <br />training, etc.. <br />• Benefits: the qualitative / quantitative outcomes of implementing the <br />proposed solutions identified in each session of the focus groups. <br />A summary of findings of the workshops will be produced and provided to <br />the City for the 1T organization's review and comments. The data <br />collected will be used to produce recommendations on further utilization of <br />cloud -based solutions and technologies in Phase 3. <br />Assumptions: <br />I. The IT focus groups will be held on one day. <br />2. Participants in the Focus Groups will be highly knowledgeable and <br />experienced in the technologies being addressed, so all IT staff will <br />not have to attend all focus groups. <br />Proposal <br />©2014 17 <br />ThirdWave 11400 W. dympic Blvd. Suite 200 Los Angeles CA 90064 310.914.0186 V 310.312.9513 -F <br />