IT governance roundup

Architecture and New Technology Committee (ANTC)

August 27, 2018 • Agenda and Summary

• Dan Archer, director for the University of Utah Campus Store, and Eric Goodrich, executive manager of Copier Fleet Services, gave an update on an initiative to provide a centralized Managed Print Service (MPS) solution for the university community. A new vendor contract is expected to be finalized by spring 2019. Archer said changes to the new RFP process will include more closely evaluating categories and a change to scoring vendor presentations.
• Chief Information Security Officer Randy Arvay discussed the creation of a Community of Practice (CoP) to address controlled access to university networks. Arvay said that a growing number of organizations are turning to controlled access solutions in response to the proliferation of Internet of Things (IoT) devices. It was suggested that the university’s Network Architecture Community of Practice (NACoP) could begin to focus on network access control, rather than creating a brand new CoP to review this topic. 
• Trevor Long, associate director for UIT Network & Core, updated the committee on the rollout of ULink, the U’s newest wireless network for IoT devices. UIT completed the pilot phase of ULink, which focused primarily on campus housing, during a soft go-live on August 16. As of August 21, Long said that 598 devices were onboarded to ULink.
• Mike Ekstrom, director for UIT Network & Communications Infrastructure, presented an update on Utah SB189, the Small Wireless Facilities Deployment Act, which passed this last legislative session. The bill gives wireless cell carriers the right to petition cities for access to install small-scale antennas on existing infrastructure, under certain conditions.

• Dave Packham, manager for UMail and Collaboration with UIT Network and Communications Infrastructure, presented a proposed change to update the existing UMail Outlook Web Access (OWA) login page to a Central Authentication Service (CAS)-based model and provide single sign-on capabilities.

• The next ANTC meeting will be held on Monday, October 22, 2018 from 10:00 a.m. to 12:00 p.m. in the Dumke Conference Room, Eccles Broadcast Center.

Enterprise Web Advisory Council (EWAC)

September 13, 2018 • Agenda

• Pat Hanna, professor of linguistics, and Ken Pink, deputy chief information officer, provided an update on World Wide Web policy 4-003, which is in the process of being rewritten. Pink asked council members to review and provide feedback as soon as possible. Both said they would like to submit it to the Academic Senate’s Executive Committee before the end of the year, and have it in place by February or March 2019.
• Pink opened the floor for discussion on content management system (CMS) utilization across campus. After much discussion about centralizing CMS services, as recommended by Deloitte Consulting in 2015, the council nominated three members to draft a five-page executive summary to be presented to the Strategic Information Technology Committee (SITC). The document would identify specific problems with the university's decentralized web services and provide recommended solutions. The subcommittee will comprise Nate Tanner, director of marketing and sales for Interactive Marketing and Web; Barb Iannucci, associate director for content management and usability for University Information Technology; and Scott Troxel, director of digital strategy for University Marketing & Communications. An initial draft is due at the next EWAC meeting. Pink also suggested bringing in Paula Millington, director of the Strategic Planning & Process Team, to give a refresher on a related seminar that outlined many of the issues that EWAC is trying to address.
• The next EWAC meeting will be held on Thursday, October 11, 2018 from 11:00 a.m. to 12:00 p.m in the Dumke Conference Room, Eccles Broadcast Center.

Strategic Information Technology Committee (SITC)

September 18, 2018 • Agenda

• CISO Randy Arvay gave on update on two Duo-caused outages in August. In both instances, Duo reported intermittent issues affecting its DUO1 cluster customers, including the University of Utah. Arvay said that Duo touts redundancy between regional data centers provided by Amazon Web Services, but recent events have exposed a vulnerability in failover security for its DUO1 cluster. Negotiations with Duo are underway in an effort to prevent this issue from occurring in the future.
  Update: On 10/03/2018, Duo will migrate the university from the DUO1 server cluster to a new instance.
• Chris Stucker, associate director of Identity and Access Management, discussed the management of user accounts, specifically Active Directory accounts that have seemingly been orphaned. Stucker noted that a significantly large number of accounts have not been accessed in more than 10 years, which is costly to the university in terms of cybersecurity attack exposure and licensing-based fees. The committee endorsed UIT developing a communications plan to identify exceptions and archive all other unused accounts, which will be brought back to SITC for a vote.
• UIT Network & Communications Infrastructure Director Mike Ekstrom updated the committee on a plan to change the UMail Outlook Web Access (OWA) login page to a Central Authentication Service (CAS)-based model, a proposal presented and approved at the August ANTC meeting. SITC also voted to approve the measure.
• Following up on numerous Software Anywhere subcommittee meetings held since the group's formation in January 2018 by ANTC, Deputy CIO Ken Pink presented recommended next steps for SITC to consider. The subcommittee has conducted student focus groups, in addition to engaging the U's Spark Labs, to gauge student interest regarding software distribution. The committee voted to approve moving forward with either a Request for Information (RFI) or Request for Proposal (RFP) process (whichever is ultimately approved) to identify costs and return with a recommendation at a future meeting.
• During open floor, CIO Steve Hess gave an overview of UIT's Strategic Goals for FY2019, which follow recommendations brought forth by Deloitte Consulting, and explained how they align with the U's Strategic Goals.
• The next SITC meeting will be held on Tuesday, November 20, 2018 from 1:00 p.m. to 2:45 p.m. in the Winder Boardroom, Park Building.

Teaching and Learning Portfolio (TLP)

• The Portfolio did not meet in August. The next TLP meeting will be held on Wednesday, September 26, 2018 from 2:00 p.m. to 3:30 p.m. in MLIB 5201, Marriott Library (agenda).

 

Node 4 Search