Edit

Department of Administration

Serving state government to benefit the citizens of Montana.

Goals

Agency Goals and Objectives

State Strategic Plan Goal Reference: Goal 3

Objectives

  • Optimize Program Capabilities - Mature the information security program to identify threats and reduce risks.
    State Strategic Plan Objective Reference: Obj. 1
  • Increase Security Awareness - Promote security awareness and best practices to citizens and organizations.
    State Strategic Plan Objective Reference: Obj. 2
  • Deliver Security Services - Offer security services to local, tribal, and territorial governments and public
    education institutions.
    State Strategic Plan Objective Reference: Obj. 3
  • Measure Program Success - Establish analytics and metrics to measure information security program
    effectiveness.
    State Strategic Plan Objective Reference: Obj. 4
  • Enhance Strategic Partnerships - Collaborate with public and private sector partners to share information,
    identify best practices, and enhance the State’s cybersecurity posture.

    State Strategic Plan Objective Reference: Obj. 5

State Strategic Plan Goal Reference: Goal 4

Objectives

  • Provide consolidated access to government information and services anywhere, anytime, on any device
    State Strategic Plan Objective Reference: Obj 4.1

State Strategic Plan Goal Reference: Goal 5

Objectives

  • Improve and increase internal and external customer service interactions using technology and collaborative communication tools to foster relationships and add value
    State Strategic Plan Objective Reference: Obj 5.2 and 5.3

State Strategic Plan Goal Reference: Goal 4

Objectives

  • Improve and enhance website accessibility and security across the State
    State Strategic Plan Objective Reference: Obj 4.1 and 4.4

State Strategic Plan Goal Reference: Goal 5

Objectives

  • Leverage cloud technologies to provide modern recruitment, performance management, and learning to state employees
    State Strategic Plan Objective Reference: Obj 5.4

Information Technology Resources and Capabilities

Number of FTE: 1

This position is responsible for overseeing all technical aspects of the State Information Technology Services Division.

Number of FTE: 45

The mission of the Application Technology Services Bureau in SITSD is to provide superior development for websites, applications, databases and host all these services and supply enterprise content management to support the missions of our customers and our division. Major Functions: Application Development, Application Hosting, Website Development, Database Development, Database Hosting, Enterprise Content Management

Number of FTE: 31

The mission of the Enterprise Support Bureau is to manage and monitor a secure and reliable environment for computing assets, and provide enterprise IT support and services that fulfills customers’ business needs. Major Functions: Data Center Facilities, Desktop Services, Service Desk

Number of FTE: 31

The mission of the Enterprise Technology Services Bureau is to provide enterprise class platforms for compute, storage, and applications that are cost effective and scalable to further the state’s ability to serve the citizens of Montana. Major Functions: Ente

Number of FTE: 10

The mission of the Incident Response & Technical Security bureau is to identify threats to the State’s information assets, provide technical security expertise, respond to cybersecurity incidents, and perform digital forensic investigations. Major Functions: Antivirus Administration, Compliance and Vulnerability Scanning, Continuous Security Monitoring, Digital Forensic Investigations, Incident Response, Offensive Security, Security Architecture, and Technical Security.

Number of FTE: 27

The mission of the Network Technology Services Bureau is to provide reliable, state-of-the-art, cost-effective, telecommunication systems and services supporting all branches of state government, political subdivisions and qualifying non-profits. Major Functions: Voice, Video, Data, Security Solutions

Number of FTE: 10

The mission of the Policy & Risk Management bureau is to promote the adoption of consistent information security policies, manage enterprise risks, create a framework of safeguards and best practices, and to enhance the security posture of all State information assets. Major Functions: Business Continuity and Disaster Recovery, Policy Management, Regulatory Compliance, Risk Management, Security Assessments, Security Awareness, and Vulnerability Management.

Number of FTE: 2

The General Services Division (GSD) consists of business units that include Business Architecture, Capitol Facilities Management, Real Property & Leasing, State Print & Mail, and Surplus Property & Recycling. As stewards of State property, GSD considers what is best for the people served and the environment we work in. The Capitol Facilities Management maintenance team performs a variety of services for State owned buildings in Helena. State Print and Mail is responsible for providing and operating a centralized duplicating and mail facility as well as administering the state wide managed print contract and procuring printing from the commercial sector.

Number of FTE: 16

The State Human Resources Division’s (SHRD) mission is to help Montana become an employer of choice. SHRD supports state managers in their efforts to attract, develop, and retain creative, competent, and energetic employees who embrace the differences and bridge the distances of the Big Sky State

Number of FTE: 20

The State Financial Services Division (SFSD) provides financial and accounting services to State agencies and Local Governments. SFSD provides financial accounting and reporting, central treasury services to the State, financial accounting and budgeting technical expertise, assistance and structure and the audit review function for all local governments within the State of Montana, effective maintenance, support, and management of the enterprise Accounting and Budgeting System, and assistance to Montana's public employers by serving as a communication bridge between the United States Social Security Administration, the IRS, and local government employers in relation to Social Security and Medicare coverage programs.

Number of FTE: 1

The mission of the Chief Information Security Officer is to protect the confidentiality, integrity, and availability of citizens’ data and the State's information assets. The CISO manages and matures the State’s information security and data privacy programs, aligns enterprise security strategies with agency business objectives, and promotes cybersecurity awareness and best practices throughout the State. Major Functions: Advisory Services, Business Engagement, External Outreach, Federal & State Partnerships, Program Management, Public & Private Partnerships, Relationship Management, Security Governance, and Strategic Planning.

Projects

Division State Information Technology Services
Project / Program Purpose and Objectives Secure an Identity Management solution for the State of Montana. Support for the current product expires December 31, 2020.
State Strategic Plan Goal/Objective Reference Unified Digital Government / Objective: Provide consolidated access to government information and services anywhere, anytime, on any device
Estimated Start 1/30/2020 Estimated Delivery 1/1/2021
Estimated Cost 401,000 Comment
HB 10 Request No Funding Sources Enterprise fund: - Comment: Unknown at this time
Annual Costs Upon Completion 401,000 Comment
Status of the project as of March 31, even numbered years. Indicate % completed and status of funds expended. The project is in Phase 2, with approximately 10% total completed. No funds have been expended yet.

Division State Information Technology Services
Project / Program Purpose and Objectives Migrate State of Montana mailboxes from Microsoft Exchange on-premise to Exchange Online. The current environment is nearing the end of its functional lifespan and encountering compatibility limitations. This upgrade will allow for better integration with Microsoft O365 products.
State Strategic Plan Goal/Objective Reference Unified Digital Government / Objective: Provide consolidated access to government information and services anywhere, anytime, on any device
Estimated Start 5/1/2020 Estimated Delivery 12/1/2020
Estimated Cost 0 Comment included in standard product licensing
HB 10 Request No Funding Sources Proprietary 06522: - Comment:
Annual Costs Upon Completion 0 Comment included in standard product licensing
Status of the project as of March 31, even numbered years. Indicate % completed and status of funds expended. In process of moving individual bureaus within SITSD. Approximately 10% complete of total project, as the goal is 90% of all state mailboxes to be moved. No funds have been expended.

Division State Information Technology Services
Project / Program Purpose and Objectives Streamline and improve electronic services that will increase productivity and create improvements for Montana, while enhancing the customer experience.
State Strategic Plan Goal/Objective Reference Improve Customer Service / Objective: Improve and increase internal and external customer service interactions using technology and collaborative communication tools to foster relationships and add value
Estimated Start 5/1/2020 Estimated Delivery 5/1/2021
Estimated Cost 2,462,685 Comment
HB 10 Request No Funding Sources COVID19 fund - number unknown at this time.: 2,462,685 - Comment:
Annual Costs Upon Completion 2,071,181 Comment
Status of the project as of March 31, even numbered years. Indicate % completed and status of funds expended. In process of planning the module rollout dates. Demos are scheduled for June. Approximately 10% complete. No funds have been expended yet.

Division State Information Technology Services
Project / Program Purpose and Objectives To build a comprehensive roadmap and plan for the successful implementation of the state Configuration Management Database that considers and aligns interdependencies across process, governance, service, tooling and automation, including organizational change management dimensions.
State Strategic Plan Goal/Objective Reference Improve Customer Service / Objective: Improve and increase internal and external customer service interactions using technology and collaborative communication tools to foster relationships and add value
Estimated Start 9/1/2019 Estimated Delivery 7/31/2020
Estimated Cost 57,165 Comment
HB 10 Request No Funding Sources Cybersecurity general fund 01100: 57,165 - Comment:
Annual Costs Upon Completion 0 Comment
Status of the project as of March 31, even numbered years. Indicate % completed and status of funds expended. Vendor workshops are in process. It is about 75% complete. All funds have been expended.

Division State Information Technology Services
Project / Program Purpose and Objectives Implement a grant management software solution to streamline and integrate the business process for tracking state and federal funding, and provide service and support to agency partners and Montana’s citizens.
State Strategic Plan Goal/Objective Reference Improve Customer Service / Objective: Improve and increase internal and external customer service interactions using technology and collaborative communication tools to foster relationships and add value
Estimated Start 1/1/2019 Estimated Delivery 9/30/2020
Estimated Cost 0 Comment this will be a pass through costs to agencies who choose to implement
HB 10 Request No Funding Sources Proprietary 06522: 0 - Comment:
Annual Costs Upon Completion 0 Comment
Status of the project as of March 31, even numbered years. Indicate % completed and status of funds expended. Phase 1 is 100% complete (agency workgroups, requirement gathering and vendor selection). Phase 2 is approximately 10% complete. Agencies are still in kick-off process for implementing.

Division State Information Technology Services
Project / Program Purpose and Objectives Contract costs for the current website management tools for the state have increased, and there is an increasing amount of support time for SITSD staff required for the tool. Cascade CMS was selected to reduce costs and streamline support of agency website management.
State Strategic Plan Goal/Objective Reference Website Enhancements and Strategy / Objective: Improve and enhance website accessibility and security across the State
Estimated Start 1/1/2020 Estimated Delivery 6/30/2021
Estimated Cost 44,000 Comment
HB 10 Request No Funding Sources Proprietary 06522: 44,000 - Comment:
Annual Costs Upon Completion 8,000 Comment
Status of the project as of March 31, even numbered years. Indicate % completed and status of funds expended. SITSD staff are creating training for agency personnel. Agencies are entering tickets to begin work in the development environment. Approximately 10% complete, and all funds have been expended.

Division State Information Technology Servics
Project / Program Purpose and Objectives Cortex XDR is a security detection and response application that assists in stopping sophisticated cyberattacks and will enable SITSD to automate the investigation and mitigation of security incidents.
State Strategic Plan Goal/Objective Reference Cybersecurity Enhancements and Strategy / Objective: Utilize the National Institute of Standards and Technology (NIST) Cybersecurity Framework to manage and reduce cybersecurity risks to the State
Estimated Start 4/1/2020 Estimated Delivery 4/1/2021
Estimated Cost 396,000 Comment
HB 10 Request No Funding Sources Cybersecurity general fund 01100: 396,000 - Comment:
Annual Costs Upon Completion 396,000 Comment
Status of the project as of March 31, even numbered years. Indicate % completed and status of funds expended. Currently in early planning stages. Need statement of work and charter approval. Project is 5% complete and all funds have been expended.

Division State Information Technology Services
Project / Program Purpose and Objectives To optimize risk and compliance management by detecting emerging threats faster, making informed decisions, and responding with targeted solutions.
State Strategic Plan Goal/Objective Reference Cybersecurity Enhancements and Strategy / Objective: Utilize the National Institute of Standards and Technology (NIST) Cybersecurity Framework to manage and reduce cybersecurity risks to the State
Estimated Start 9/1/2019 Estimated Delivery 7/31/2020
Estimated Cost 285,805 Comment
HB 10 Request No Funding Sources Cybersecurity general fund 01100: 285,805 - Comment:
Annual Costs Upon Completion 0 Comment
Status of the project as of March 31, even numbered years. Indicate % completed and status of funds expended. System design is in place, working on implementation. The project is about 60% complete, and all funds have been expended.

Division State Information Technology Services
Project / Program Purpose and Objectives Implement a new Web Application Firewall to protect the State’s web applications, sites, and data.
State Strategic Plan Goal/Objective Reference Cybersecurity Enhancements and Strategy / Objective: Utilize the National Institute of Standards and Technology (NIST) Cybersecurity Framework to manage and reduce cybersecurity risks to the State
Estimated Start 8/31/2019 Estimated Delivery 12/31/2020
Estimated Cost 503,450 Comment
HB 10 Request No Funding Sources Proprietary 06522 : - Comment: Cybersecurity general fund 01100: - Comment:
Annual Costs Upon Completion 83,000 Comment
Status of the project as of March 31, even numbered years. Indicate % completed and status of funds expended. New equipment is ready, old equipment has been retired. Preparing to move agencies into the environment. The project is about 40% complete and all funds have been expended.

Summary of Hardware

I have reviewed all of my agency's systems in Assurance CM and certify that it is accurate: Yes

Total Number of Appliances 2,574
Total Number of Physical Servers 234
Total Number of Virtualized Servers 3,708
Total Usable Storage Space 5.67 GB
Device Type Quantity Estimated Replacement Value Comments
Desktops 250 262,500
Laptops 245 355,250
Mobile Devices 176 45,919
Printers 0 0
Cameras 20 700

Agency Contact Information

Agency Director / Administrator
John Lewis
406-444-2032
JohnLewis@mt.gov
PO Box 200101 Helena, MT 59620
IT Contact (CIO / IT Manager)
Tim Bottenfield
406-444-2700
Tim.Bottenfield@mt.gov
PO Box 200101 Helena, MT 59620
Information Security Manager
Andy Hanks
406-444-9127
Andrew.Hanks@mt.gov
PO Box 200101 Helena, MT 59620