Agile Gov't Virtual Event presentation - Identity and Access Management in Clark County, NV

Government Technology

Virtual Conference

March 19, 2015

Executive Summary

• Clark County NV is a complex government organization for which an identity and access management (IAM) strategy will have major operation and strategic value.

• IAM is about giving the right people the right access (to systems) at the right time for the right reasons.

• We have started, in earnest, building a foundation of understanding why an IAM program is necessary and how it will benefit County employees and the citizens of Clark County.

• We have engaged some expertise to help us build our foundation.

About Clark County, NV …

6

Clark County

Clark County is the 12th most populous county in the

United States.

The county is 8,000 square miles in area.

We have a population of 2.1 million residents.

We average about 39 million visitors annually.

The cities within the boundaries of Clark County include

Las Vegas, Henderson, North Las Vegas and Mesquite.

7

Clark County

The population of the City of Las Vegas is about 600,000; the

population of unincorporated Clark County is about 800,000.

There are 38 departments in Clark County; we provide

traditional county services like property tax assessment and

official document recording (marriage licenses, deeds, etc.),

but also municipal services such as parks and rec, building

permits and business licensing.

IT is decentralized in Clark County. A few agencies -- the

county hospital, airport and county sheriff's office have their

own CIOs. About 6 smaller departments have a handful of IT

employees that report to their departments.

8

Clark County

Little known fact: The Las Vegas Strip is actually in

unincorporated Clark County, not in the city limits of the

City of Las Vegas.

What is

Identity Access Management?

Identity and Access Management (IAM) is

about: “Providing the right people with the

right access at the right time for the right

reasons”

10

IAM Benefits for Clark County

Improve IAM-related services available

to staff and citizens– Improve end-user experiences via:

– Citizens portal

– Enterprise white pages “lookup” capabilities

– Reduced sign on

– Simplify deployment of shared enterprise applications

Reduce risk of:– Breaches

– Compliance violations, potential fines

Service Delivery

Enhanced Security/

Mitigating Risks

Contain Costs

Increased Productivity

Strengthen Security

Controls

Business Enablement

11

IAM Benefits for Clark County

Contain costs/increase productivity– Automate manually intensive provisioning and de-

provisioning processes where feasible

Strengthen security controls– Improved auditing and reporting capabilities

– Consistent enforcement of enterprise policies

Service Delivery

Enhanced Security/

Mitigating Risks

Contain Costs

Increased Productivity

Strengthen Security

Controls

Business Enablement

12

Progress to Date

We’ve worked with a consultant to help us lay the

foundation for IAM program

We’ve held 3 two day long workshops since September

2014.

Our to-date progress includes:

– Agreeing on an over-arching IAM Program Charter

– Establishing principles to ensure IAM-related services can be

easily integrated within the existing infrastructure.

– Form sub-teams for further defining solutions and deliverables:

security, process, and data sub-teams.

What are our next steps?

14

Our Next Steps

Since we have distributed IT, socialize that Departments

and Agencies will retain the authority to manage their

own users and contractors

Continue to build the enterprise-wide IAM Program by:

– Socializing the IAM Program Charter with the other CIOs

– Socializing the business value of IAM-related services to all 38

department heads (i.e. what’s in it for them).

– Ensure participation by all departments and agencies thru an

IAM Steering Committee

15

Our Next Steps

Refine and update/optimize:

– IAM related policies, processes, procedures

– IAM-related services and technologies

Establish a culture of continuous service improvement

16

Critical Success Factors

Effective executive sponsorship is crucial

– CIO, Director of ERP, Comptroller, HR, CAO and CFO

Collaboration/cooperation across all departments and agencies

Align IAM services with other key enterprise initiatives including:

– CRM/Constituent’s Portal

– Employee on-boarding pilot program

– Business, License, Inspections, Permit, and Zoning (BLITZ)

– Shared Computer Operations, Protection, and Enforcement (SCOPE)

– DR

– Cloud Services

– Mobility and BYOD

17

Priority IAM Services

Directory Services: To store and locate identity

information

Provisioning/De-provisioning Services: To automate

identity creation and credential management

Authentication & Authorization Services: To identify and

authorize users at varying levels of assurance

Identity Audit Services: To keep track of end user

accounts and access privileges