Winnebago County Illinois Governmentaugustconsulting.com/images/filelibrary/file_11_1-08924829.pdf · Winnebago County DoIT Mission Statement "It is the purpose of the Winnebago County

WinCo DoIT November 2016 Page | 1

Winnebago County Illinois Government

Department of Information Technology

Current Situation & Futures

November 2016

WinCo DoIT November 2016 Page | 2

Winnebago County Government IT Responsibilities

Technology Professionals Current Situation WinCo DoIT November 2016 Page | 3

For the Winnebago County Department of Information Technology (WinCo DoIT) hiring and retaining credentialed technology staff is challenging. At the beginning of 2006, there were 21 technology employees on staff. In 2011, headcount was reduced to 16. Current WinCo

DoIT staff of 13 is comprised of highly educated and competent technologists who serve internal and external government users. These professionals collectively possess 24 college degrees and 25+ technology and business related certifications. Average tenure is 7 years and the longest retention is 16 years.



Government Users vs. WinCo DoIT Headcount

WinCo DoIT staff is .65% of total Government Users.

This means there are approximately 154 Government Users per WinCo DoIT staff member.

2000+

13

1

10

100

1000

2016

Government Users vs. WinCo IT Headcount

GOVERNMENT USERS IT HEADCOUNT


0 2 4 6 8 10 12

LEADSCCNA

CCENTRHCTOCAOCP

A+CPM

MCSAMCTS

MCITPMCP

Associates DegreesBachelors Degrees

Masters Degrees

3

2

1

1

3

1

3

4

1

3

1

5

8

12

4

WinCo DoIT Staff Credential Summary

Security Current Situation WinCo DoIT November 2016 Page | 7

Symantec Endpoint Protection is currently used for server and desktop security. In the last ten years, anti-malware has been upgraded four times to the latest and most robust protection suite.

In the 4th quarter of 2015, WinCo DoIT procured and deployed an additional layer of next generation perimeter security in the format of what is known as the FireEye. Combined with the advanced protection from Spam filtering and Cisco Intrusion Prevention Systems (IPS), WinCo DoIT has enhanced perimeter security using a diverse and comprehensive methodology.

From the 2012 Cost of Cyber Crime Study: United States, the least expensive attack to resolve is malware with an estimated $1,232 per incident financial cost and 2.1 days per incident time cost1. This estimate does not include any costs associated with stolen data. Within 4 minutes of install, the FireEye identified a PC on our network with Vawtrak on it. Vawtrak is malware designed to gain access to bank accounts accessed by the victim. Since the FireEye was installed in December of 2015, 110 billion network packets have been inspected. 190 incidents have been prevented for a minimum cost avoidance of $234K and a minimum avoidance of 399 labor days consumed by remediations.

1 2012 Cost of Cyber Crime Study:United States. HP Enterprise Security, Oct. 2012. Web. Independently conducted by Ponemon Institute LLC


Cleaned /Deleted43629%

Quarantined1329%

Manual Remediation81655%

Exempted by Policy1127%

Virus Statistics Fiscal 2016

Cleaned /Deleted QuarantinedManual Remediation Exempted by Policy


The Value of “FireEye” and Perimeter Security

Network ProtectionWinnebago County MAN

• Within 4 minutes of deployment, discovered a PC with

bank account phishing software on board. • 190 incidents avoided

o 2.1 (days) x 190 = 399 days o $1232 x 190 = $234,080

• 110 billion network packets read since deployment


SPAM statistics for the last 24 hours as of 11/07/2016


Over 39 million threatening emails stopped since May 2009. That is more

than 76% of the email Winnebago County has received since then.

Blocked38.6M

75%

Allowed11.5M

22%

Tagged1.01M

2%

Quarantined1.3K0% Viruses

319K1%

Spam Stats since May 2009as of 11/07/2016

Blocked Allowed Tagged Quarantined Viruses

Stability, Reliability, Predictability Current Situation WinCo DoIT November 2016 Page | 12

A progression of improvements in management technique, hardware and software selection, monitoring, and security improvements has allowed us to meet our users’ expectations. The WinCo DoIT promises a Service Level Agreement (SLA) of “the five nines.” This means that

99.999% of the time, based on 24/7/365, mission critical (and other business) applications and services will be available. Using Windows Server and various Linux operating systems along with virtualization and current technology storage devices, WinCo DoIT has been able to ensure uptime and performance. These designs may be referenced as “technology convergence” whereas highly complex technology assets (hard and soft) are centralized on platforms that are stable and reliable.


100%

100%

100%

100%

100%

99.989%

100%

99.989%

100%

100%

100%

100%

100%

100%

100%

AFIS

CAD

Chameleon

DevNet

MS Exchange

FCE

iJuror

Munis

OffenderTrak

OpenQuery

OTWeb

PDO

SAO

Point Click Care

Patagonia

Application Availabilityfor some Mission Critical and other Elected and Appointed

Officials' Applicationslast 365 days

as of 11/07/2016


Virtual Host

Virtualization Structure (General)

Physical Servers


17th Judicial (Official)

5 Physical

14 Virtual

Monitoring Current Situation WinCo DoIT November 2016 Page | 16

Robust monitoring software provides real time hardware and software status information that allows WinCo DoIT to quickly and proactively respond to minor issues, often mitigating the risk of wide-scale outages or minor issues becoming major.

Monitoring Current Situation WinCo DoIT November 2016 Page | 17

Real Time Infrastructure Monitoring

Backup Current Situation WinCo DoIT November 2016 Page | 18

Ensuring backup and recovery of all County data is a top priority of the WinCo DoIT. Over 140 backup jobs run daily and we maintain a 41 calendar day recovery horizon complimented

with 6, 12, 18 and 24-month snapshots.

Backup Current Situation WinCo DoIT November 2016 Page | 19

• 41 day rapid recovery horizon • 6, 12, 18 & 24 month snapshots for point in time

recovery

Successful12185%

Recovered5

3%

Success with Exceptions

64%

Failed118%

Last 24 hr Backup Statusas of 11/07/16

Successful RecoveredSuccess with Exceptions Failed

Winnebago County Technology User Current Situation WinCo DoIT November 2016 Page | 20

Critical to effectiveness is to know the mission. The WinCo DoIT team knows why they come to work, the department maintains metrics, a knowledge base and are diligent about documenting what they do and how much time they spend doing it.

Winnebago County DoIT Mission Statement

"It is the purpose of the Winnebago County Department of Information Technology to be of maximum service to its internal and external customers by providing timely, accurate and financially sound Information Technology counsel, services and solutions. Our focus shall be the five nines in everything we do - our Information Technology infrastructure shall be available 99.999% of the time; our service commitments shall be completed 99.999% of the time on schedule; 99.999% reliability, accuracy and integrity in everything we do."


There were a total of 10,126 tickets opened and 10,046 tickets closed in Fiscal 2016.

0

100

200

300

400

500

600

700

800

900

1000

Oct Nov Dec Jan Feb Mar Apr May Jun Jul Aug Sep

Tick

ets

Month

Tickets Opened vs. Closed by MonthFiscal 2016

Opened Closed


0

0.5

1

1.5

2

2.5

3

3.5

4

4.5

5

Oct Nov Dec Jan Feb Mar Apr May Jun Jul Aug Sep

Day

s

Month

Support Ticket Meantime to Closure Fiscal 2016


Criminal Justice3,72837%

DoIT6787%

Government Users1,23612%

CoR551%

Appointed Officials2,16321%

WinGIS34

0%

Public Safety1,90019%

Non PS/CJ Elected Officials3043%

Tickets Opened by OrganizationFiscal 2016

Government Convergence of Technology Services Current Situation WinCo DoIT November 2016 Page | 24

We imagined that a “Metropolitan Information Technology Services” organization could be formed of technologists “from” government “for” government that could provide high value, low cost technology services. In some circles, that may be referred to as “Government

Convergence of Technology Services (GCoTS)”. As WinCo DoIT has become effective with servicing internal government users, we set our focus on helping other governmental agencies throughout Winnebago County. In a few short years, WinCo DoIT has developed and delivered a model of IT support services for non-traditional government users. The types of services provided are labor, email, server, storage, bandwidth and technology consulting. With serving over 40 other agencies, WinCo DoIT made a contribution to the General Fund of over $1M during the last six fiscal years. GCoTS is consistent with intergovernmental cooperation initiatives and goals. Discussion and ideas of regionalization may now be contemplated.


Government Convergence of Technology Services (GCoTS)

17th Judicial Circuit Court - CPDC Northern Illinois Training Advisory Board Administrative Office of Illinois Courts Pecatonica Police Department Boone County 17th Judicial Circuit Court Rockford Airport/FlyRFD.com Boone County Administration Rockford Area Economic Development Council Boone County Circuit Clerk Rockford Housing Authority Boone County Housing Authority Rockford Sexual Assault Counseling, Inc. Boone County Probation Rockford Township Assessor Boone County State's Attorney Rockton Police Department City of Belvidere Roscoe Township Assessor City of Loves Park Severson Dells Nature Center City of Rockford Public Works Department Village of Machesney Park City of South Beloit Village of Pecatonica City of South Beloit Police Department Village of Rockton Economic Development District Northern Illinois Village of Roscoe Forest Preserves of Winnebago County Village of Winnebago Illinois Association of Problem-Solving Courts WinGIS Klehm Arboretum Winnebago County Bar Association of Rockford Loves Park Fire Department Winnebago County Health Department Loves Park Police Department Winnebago County Housing Authority Administration North Park Public Water District Winnebago PD


$60,696

$116,195

$151,492

$200,855

$233,683

$303,948

$25,000

$75,000

$125,000

$175,000

$225,000

$275,000

$325,000

2 0 1 1 2 0 1 2 2 0 1 3 2 0 1 4 2 0 1 5 2 0 1 6

Government Convergence of Technology Services (GCoTS)REVENUE HISTORY

$1.07M added to General Fund

Leadership and Vision Futures WinCo DoIT November 2016 Page | 27

WinCo DoIT has successfully managed many technology projects for internal and external government users. While some of these projects are more expensive and complex than others – on time and on budget have been the outcomes. Some of

these projects have included but are not limited to: bidirectional data exchange of offender sentencing data with the Illinois Department of Corrections (IDOC); Court and Case Management (CCM); Child Protection Data Collection (CPDC) application build and deployment for the Administrative Office of Illinois Courts; ready assimilation of court data by Judges; pretrial defendant notification; Voice over IP (VoIP); redundant Gigabit wireless connectivity between the North and Downtown campus; OffenderTrak (OTrak) deployment in Juvenile Detention; automated geocoding for Deputy beats; email and email archiving; IP video surveillance at RBNH, Animal Services and WCHD (Court St); Time and Attendance (labor collection); courtroom docket displays; resilient 10 Gigabit downtown network backbone; deployed public and private wireless in county buildings; deployed emergency notification system(ENS); outstanding fines and fees collections; and many more.

Leadership and Vision Futures WinCo DoIT November 2016 Page | 28

1. $6.7M Court and Case Management implementation launched November 2010.

2. Collections initiative: Over $9.1M collected in past due Fines and Fees since January 2012.

3. Integrated Cherry Valley Police, Loves Park Police, and Corrections into Sheriff’s Records Management System.

4. Integrated Winnebago County Health Department into DoIT Support.

5. Rockford Airport: infrastructure Support for ABX Air.

6. Illinois Criminal Justice Information Authority (ICJIA) IDOC bidirectional data exchange.

7. E-warrant pilot initiated with the Sheriff and the 17th Judicial Circuit July 2016.

8. Online streaming of County Board meetings.

9. Supported ACA reporting and 1094/1095 form creation and submission.

10. Implemented new permit and tracking system (PINS).

Project Highlights

The Internet of Things Futures WinCo DoIT November 2016 Page | 29

Simplified, the Internet of Things (IoT) is a proposed development of the Internet in which everyday objects have network connectivity, allowing them to send and receive data transforming everyday human activities (the way we live and work). Human interactions with

government will morph whereas those activities requiring human interaction will be less and less. Winnebago County must possess adequate infrastructure that is reliable and secure to participate in the IoT in a meaningful manner. The IoT places even greater emphasis on technology security apparatus.

The Internet of Things Futures WinCo DoIT November 2016 Page | 30

Gigabit to the Desktop Futures WinCo DoIT November 2016 Page | 31

High-speed communication between desktop computers and the applications they access, greatly influences human efficiency in that humans need not experience any wait time for data / screen rendering. Current internal bandwidth to the desktop is 100 megabits. A

way to interpret this is that our bandwidth to the desktop is legacy or 20th century restrained.

Gigabit to the Desktop Futures WinCo DoIT November 2016 Page | 32

Network Congestion High-Speed Communication

Public Safety Futures WinCo DoIT November 2016 Page | 33

Possibly the two single biggest technological enablers for public safety are: radio communications and Police Enterprise Resource Planning (PERP). PERP is where all pieces of public safety management converge within a single application or closely knit

esoteric applications. These pieces include, but are not limited to: patrol, corrections, detective bureau, property management, evidence, canine, administration, and 911.

STARCOM21 is the official statewide public safety radio network of Illinois. STARCOM21 is a Project 25 (P25 or APCO-25) compliant 700/800 MHz IP based radio system with over 270 radio tower sites across the state. The STARCOM21 network is founded on Motorola's 80 years of partnership with public safety professionals. Project 25 is a suite of standards for digital radio communications for use by federal, state/province and local Public Safety organizations in North America to enable them to communicate with other agencies and mutual aid response teams in emergencies2. The quickest and easiest way to understand this is police radio communication goes internet protocol (IP) based.

2 Wikipedia contributors. "Project 25." Wikipedia, The Free Encyclopedia. Wikipedia, The Free Encyclopedia, 28 Oct. 2016. Web. 28 Oct. 2016.


POLICE ENTERPRISE RESOURCE PLANNING MODEL

Law Enforcement Business

Patrol

Traffic K-9 Unit

Field Interview

Field Reports Photo Lineups

FugitiveApprehension

UnitSWAT

DB

Investigation

Evidence Photo Lineups

Administration

Fleet mgmt. Personnel Training

Records

Crime Mapping Analysis

Corrections

Arrests / Bookings

Gang Affiliations

911 /

CAD

Calls for

Service


17th Judicial Court Futures WinCo DoIT November 2016 Page | 36

Forecasts are that every citizen, at some point in their life, will interact with the court system. Matters brought to the courts will be settled in different ways – possibly with technology whereas parties never physically meet and are provided a “just disposition” virtually. Court

rooms will be distributed and in some cases virtualized. The construct of “Just in Time Justice” will gain traction and evolve. Self-represented parties will continue to increase placing a burden on court systems and the technologists participating in helping with efficiencies. Drive up / self-initiated “do it yourself law” is here now and its impact on case load and court capacity has yet to be forecast. Lawyers will continue to demand and expect seamless interaction with the courts for their clients. We have yet to define the challenges, let alone articulate the solution. What we do know as WinCo DoIT is that fast and secure networks must exist first to support the Courts of the 21st Century. We must be prepared to support case process, management information and decisions. In other words, information that makes our “court factory” more efficient. The key purpose of case management is to organize data (and ensure completeness) so it can, in turn, be converted into information for cases to be adjudicated and “just decisions” rendered.

17th Judicial Court Futures WinCo DoIT November 2016 Page | 37

“Just Dispositions” from Virtual Court Rooms

Futures WinCo DoIT November 2016 Page | 38

Winnebago County Government IT Responsibilities

Winnebago County Illinois Governmentaugustconsulting.com/images/filelibrary/file_11_1-08924829.pdf · Winnebago County DoIT Mission Statement "It is the purpose of the Winnebago County

Documents