Business Continuity Strategy - New Mexico Department of

advertisement
Project Closeout Report
Project Name
Voter Registration Election
Management (VREMS)
Date
09/15/09
Executive Sponsor
Mary Herrera
Lead Agency
SOS
Project Manager
Jose Hernandez
Agency Code
37000
PROJECT DESCRIPTION
The voter registration election management system is a statewide system that maintains voter registration files. Each county
clerk is responsible for the upkeep of their respective county.
The purpose of this project is to enhance and upgrade the Voter Registration and Election Management System to be more
user friendly and provide additional functionality for the County Clerk’s offices who are the primary users of this system.
Schedule and Budget
Planned Start Date
March 01, 2008
Actual Start Date
March 11, 2008
Planned End Date
July31, 2009
Actual End Date
July 31, 2009
Planned Cost: (Budget)
$150,000.00
Actual Cost:
(Total)
$150,000.00
 Professional
Services
VREMS Enhancements: $16,547.00
VREMS Enhancements: $15,500.00
Update Public List: $6,375.00
 Professiona
l Services
VREMS Enhancements:
$16,547.00
VREMS Enhancements:
$15,500.00
Update Public List: $6,375.00
 Hardware
Power Distribution Unit: $9047.40
 Hardware
Power Distribution Unit:
$9047.40
 Software
Server Development Suite: $1111.86
Oracle Software Licensing: $88,389.00
Citrix Licenses: $12,106.04
 Software
Server Development Suite:
$1111.86
Oracle Software Licensing:
$88,389.00
Citrix Licenses: $12,106.04
 Network
Network Switches: $857.66
 Network
Network Switches: $857.66
 Other
 Other
Appropriation History (Include all Funding sources,
Amount
e.g. Federal, State, County, Municipal laws or grants)
Funding Source(s)
Fiscal Year
FY 2009
$150,000.00
Laws 2008, Chapter 3, Section 7, Item 19
This is a controlled document; this version supersedes all other versions.
Revision: 8/20/08
Page 1 of 9
Project Closeout Report
Scope Verification
Requirements Review
Yes
Were the project objectives (expected outcomes) accomplished?
x
Were all Deliverables submitted and accepted?
x
Did the IV&V vendor verify that all deliverables met the requirements?
Have all contracts been closed?
Have all final payments been made (i.e., invoices paid)
Has adequate knowledge transfer been completed?
No
Explanation/Notes
x
x
x
x
TRANSITION TO OPERATIONS
The scheduled release of the new PowerProfile 10.0 on September 11, 2009 will deploy the absentee and election
module, job processor, petitions, political subdivisions, PowerLock, public service requests, street file and the voter
registration module addressing all the issues concerning the New Mexico voter transfer functionality into production of
the VREMS application. The production servers housing the VREMS application reside in the DOIT Simms data
center. A hot site mirroring the production servers for VREMS at the Simms building is located in Albuquerque, and is
managed by OSO Grande Technologies.
Maintenance/Operations
Yes
Are there recurring maintenance/operational costs for the product/service?
x
Are there any recommended enhancements or updates?
x
Funding source for maintenance/operational costs?
No
Explanation/Notes
$ 19,198.87 monthly cost for
maintenance and support
$175.00/hr for code upgrades
and enhancements.
The current server hardware
housing the VREMS
application at both DoIT and
OSO Grande has reached its
end of life and needs to be
upgraded to current blade
technology or better.
Operating Budget
This is a controlled document; this version supersedes all other versions.
Revision: 8/20/08
Page 2 of 9
Project Closeout Report
BUSINESS PERFORMANCE MEASURES (COMPLETE FOR ALL PHASES)
COMMENTS:
PHASES
COMPLETION DATE
Initiation:
03/01/08
GOALS/OBJECTIVES
The purpose of this project is to
enhance and upgrade the Voter
Registration and Election
Management System to be more
user friendly and provide additional
functionality for the County Clerk’s
offices who are the primary users of
this functionality and technology.
03/04/08
Testing and configuration updates of all
enhancements.
08/01/08
Citrix Licensing, network switches
setups and implementation.
AMOUNT
$75,000
Enhancements were
completed by ES&S as
requested by the SOS
office.
$25,000
Develop a secured
User Acceptance
Testing (UAT ) server
environment
$50,000
Increased county user
access and network
switch setup for
VREMS users
Planning:
Implementation:
Closeout:
09/24/09
RESULTS
$0.0
LESSONS LEARNED



Additional Citrix licenses were needed during election cycle due to the demand of the counties accessing the
VREMS systems.
The implementation of the hot site at OSO Grande Technologies mirroring VREMS services at DoIT was a
great benefit for the counties in the event of a systems failure at the Simms data center during election time.
Additional line speed and bandwidth of the counties was required in order to enhance productivity.
This is a controlled document; this version supersedes all other versions.
Revision: 8/20/08
Page 3 of 9
Project Closeout Report
IT System Analysis
o Hardware: A power distribution unit and additional switches were purchased in order
to handle the enhancements done to the VREMS application.
o
Citrix Licenses,
o
Where is this system hosted?

The VREMS is currently hosted at the Simms Data Center. This is the primary
site.

The secondary site is located in Albuquerque OSO Grande Technologies and
mirrors the primary site located at Simms Data Center.
 The enhancements of the VREMS project starting from the initiation phase up to the close out
phase was deployed from the production servers located at the Simms data center.
 Provide Application Architecture Schematic:
This is a controlled document; this version supersedes all other versions.
Revision: 8/20/08
Page 4 of 9
Project Closeout Report
Business Continuity Strategy
 Emergency and Disaster Management: In the event of a complete system failure at the DoIT
Data Center, the system will immediately switch over to OSO Grande technology hot site.
 Business Resumption: The following document describes a set of instructions created by the IT
director for business resumption and operations recovery in the event of a system failure at the
DoIT data center. The document was addressed to all New Mexico county clerks.
Date: August 22, 08
To:
County Clerks
From: Mary Herrera, Secretary of State
Subject: Disaster Recovery
This is a controlled document; this version supersedes all other versions.
Revision: 8/20/08
Page 5 of 9
Project Closeout Report
The purpose of this memo, is to provide instructions in the event of a disaster, in terms of
providing information services (VREMS – Voter Registration and Election Management
System) to the County Offices from the primary processing location of Santa Fe, New Mexico.
A disaster is defined as the interruption of information services between the Offices of the
County Clerks and VREMS System located in the Simms Building in Santa Fe, New Mexico.
This disruption can occur in two forms:
1) the VREMS operational platforms can be broken with no opportunity for an immediate
remedy;
2) all telecommunications links between the Offices of the County Clerks and the Simms
Building in Santa Fe are severed and there is no immediate remedy. In either case, processing
will cease and information technology services are not available from the primary processing
center.
In addition, there are two situations under which the disaster may be declared and that depends
upon the critical period of processing. The first period is during a major statewide primary and
general election. If an outage disrupts service to the Counties, and this disruption cannot be
restored within 30 to 45 minutes, a disaster will be declared and a switch to the alternate
system will be invoked. The second period is a non – election situation which may be in an
alternate year or in a period of time prior to the election, itself. In this case, if the disruption to
service cannot be restored within four business hours, a disaster will be declared to move the
processing from the primary to the business recovery site.
The following is a list of steps that must take place for the switching of services from the
primary services location of the Simms Building located in Santa Fe, New Mexico to the hot
site for business recovery at OSO Grande Technologies located in Albuquerque, New Mexico.
 When an outage is incurred and the assessment is that the service cannot be restored in
one hour, a decision will be made by the SOS Information Technology Director, that a
switch will be made to the backup recovery site.
 The SOS Director of Information Technology will, along with appropriate staff from
the SOS office, notify each of the County Clerks and their Deputy County Clerks if
available that the Office of the Secretary of State is declaring a disaster and that a
switch will occur to the alternate processing site.
 When the County Clerk or the Deputy County Clerk is notified by the calling SOS employee, they will receive a code which will validate that this call is authentic.
 Each County Clerk will receive, in advance, a sealed envelope which will include two
codes; one for a first call declaring a disaster, and a second code, that gives permission
to begin using the recovery site. The purpose of these codes is to validate and authenticate the phone calls that will be received.
 Once the first phone call has been validated, the County Clerks will wait until they receive a second phone call from the Office of the Secretary of State giving permission
to begin using a new URL that will allow access to the business recovery site. A second phone call and code will be given that will signify to the Counties that their personnel can begin using the business recovery site. The URL for the business recovery
site is https://www2.vrems.sos.state.nm.us . Every County whether they are connected via
an ISP or a T1 line must now connect via their internet provider using this new URL.
 Do not use this URL unless a disaster has been declared and you have received a second phone call from the Office of the Secretary of State and authenticated by a second
This is a controlled document; this version supersedes all other versions.
Revision: 8/20/08
Page 6 of 9
Project Closeout Report


code.
All County Clerks will be notified when processing will be initiated again at the primary processing site of the Simms Building in Santa Fe, NM. This will probably occur on
a weekend and be available on the following Monday morning. Calls and emails will
go out on that Monday morning and the County Clerks will begin using the original
URL for access to the primary processing system.
Only at that time, when all Offices of the County Clerks are deployed back to the primary processing system located in the Simms Building in Santa Fe, New Mexico, will
the disaster be declared to be over.
Should you have any questions on the subject of disaster recovery, please call me at 505-8273661.
Thank you for your cooperation on this very important matter.
SOS IT Management
Security Strategy (Application and Data Security Process, Plan, or Standard)
A complete Network Security Assessment was done for the Secretary of State’s Office by Computational
Analysis and Network Enterprise Solutions, LLC on June of 2009 as indicated in the document below.
Security strategies and processes for the SOS network infrastructure have been tightened and planned out by
the contractor and are available upon request to the SOS Office IT Management.
This is a controlled document; this version supersedes all other versions.
Revision: 8/20/08
Page 7 of 9
Project Closeout Report
This is a controlled document; this version supersedes all other versions.
Revision: 8/20/08
Page 8 of 9
Project Closeout Report
Project Sign Off
The signatures below certify that this project has been completed in accordance to the specified budget, schedule,
scope, and achieved the intended outcome.
STAKEHOLDERS
NAME: SIGNATURE
DATE
Executive Sponsor
(or Designee)
Mary Herrera
09/15/09
Lead Agency Head
(or Designee)
Don Francisco Trujillo II
09/15/09
CIO IT Lead
Kelli Fulgenzi
09/15/09
Project Manager
Jose Hernandez
09/15/09
This is a controlled document; this version supersedes all other versions.
Revision: 8/20/08
Page 9 of 9
Download