Project Closeout Report Project Name Integrated Retirement Information System (IRIS) Date 07/23/2008 Executive Sponsor Jan Goodwin Lead Agency NM Educational Retirement Board Project Manager Robert Rivera Agency Code 352 Schedule and Budget Planned Start Date 9/2001 Actual Start Date 9/2001 Planned End Date 06/30/2006 Actual End Date 06/30/2008 Planned Cost: (Budget) $9.8 Million Actual Cost: (Total) $9,156,963 Professional Services $7.3 Million Professional Services $7,141,660 Hardware $ 400,000 Hardware $376,600 Software $ 100,000 Software $129,590 Network Network Other $2 Million Appropriation History (Include all Funding sources, e.g. Amount Other $1,509,113 Federal, State, County, Municipal laws or grants) Funding Source(s) Fiscal Year FY07 $750,000 Educational Retirement Fund - – Laws of 2006, 2nd Session, Chapter 109, Section 7, Item 7 FY06 $300,000 Educational Retirement Fund - – Laws of 2005, 2nd Session, Chapter 33, Section 7, Item 5 FY05 $750,000 Educational Retirement Fund - – Laws of 2004, 2nd Session, Chapter 114, Section 8, Item 16 FY03 $2,000,000 Educational Retirement Fund - Laws of 2002, 2nd Session, Chapter 4, Section 7, Item 11 FY02 $3,000,000 Educational Retirement Fund - Laws of 2001, 2nd Session, Chapter 64, Section 8 FY01 $3,000,000 Educational Retirement Fund - Laws of 2000, 2nd Session, Chapter 5, Section 8 This is a controlled document; this version supersedes all other versions. Revision: 2/14/08 Page 1 of 5 Project Closeout Report Scope Verification Requirements Review Yes Were the project objectives (expected outcomes) accomplished? No Explanation/Notes X The Training deliverable for the Enhancement Project was not performed by the vendor as promised. ERB performed the training in house and did not pay for the deliverable. X Were all Deliverables submitted and accepted? Did the IV&V vendor verify that all deliverables met the requirements? Have all contracts been closed? Have all final payments been made (i.e., invoices paid) Has adequate knowledge transfer been completed? X X X X TRANSITION TO OPERATIONS: (DESCRIBE AGENCY PLAN TO MIGRATE PROJECT SOLUTION TO PRODUCTION. INCLUDE DOIT IMPACT IF DIFFERENT THAN PREVIOUS REPORT) The Integrated Retirement Information System (IRIS) Enhancement Project consisted of three main deliverables. They are as follows: Call Center Tab - The Call Center Tab is used by ERB’s customer service representatives and benefit analysts. This tab centralizes the most requested information accessed when members call in and should greatly improve speed and customer service. This tab has been integrated into the production version of IRIS. Web Interface – Member - this interface will allow members to access the retirement information online via a secure site. In addition members will be able to use their personal information in order to create estimates for retirement benefits, refunds and service credit purchases. In addition the site will have the capability to allow members to update demographic information. This site has a target date of August 1st, 2008 for roll-out. Web Interface – Employer – this interface will allow employers to transmit their monthly contribution reports online via a secure site. In addition employers will be allowed to view the transaction histories for previously submitted reports as well as account information such as school name, address, and contact information. This site has a target date of August 1st, 2008 for roll-out. The IRIS Enhancement Project will have no impact to DoIT. Maintenance/Operations Yes Are there recurring maintenance/operational costs for the product/service? X No Explanation/Notes $545k per Year Upgrades to the most recent versions of Oracle, Powerbuilder and IRIS are Are there any recommended enhancements or updates? X planned. These upgrades will be included with the maintenance agreement. Funding source for maintenance/operational costs? The cost of the maintenance agreement has been included in our base This is a controlled document; this version supersedes all other versions. Revision: 2/14/08 Page 2 of 5 Project Closeout Report budget which has been approved in our annual budget request and approved by DFA and LFC. BUSINESS PERFORMANCE MEASURES (COMPLETE FOR ALL PHASES) COMMENTS: PHASES COMPLETION DATE Initiation: 09/2001 Closeout: RESULTS Begin the IRIS Project. Successful Design and customize a system to replace ERB’s legacy pension application. Successful 03/2006 (Phase II) 06/13/2008 (Enhancement Project) Phase II – implement customized system Enhancement Project – implement online capability for members and add additional functionality to current system. Successful 06/30/2008 Officially accept the IRIS project and pay all remaining deliverables and retainage. Successful Planning: Implementation: GOALS/OBJECTIVES LESSONS LEARNED Many lessons were learned through the duration of this project however ERB feels three had the largest impact on this project. They are as follows: Creation of a Dedicated Project Team and Additional Resources – while ERB did create a project team of subject matter experts for this project none were every truly dedicated. The members of this team did an exceptional job in developing this system however they were forced to pull double duty and had to work their regular jobs as well. This project would have been done much quicker had the team had the opportunity to be truly dedicated. Data Conversion – ERB spent a great deal of time to ensure the accuracy of the data being converted. While the data in the system is accurate, time could have been saved by possibly hiring a separate vendor to handle the data conversion. Tier, who was the main contractor, was tasked with the conversion but also had many other areas of the project that they were responsible for. The conversion may have been done quicker had a vendor specializing in data conversion been brought in. IT System Analysis On this document, or as an attachment, provide a summary response, including changes, to the following IT infrastructure topics relating to this project: This document is attached. This is a controlled document; this version supersedes all other versions. Revision: 2/14/08 Page 3 of 5 Project Closeout Report Business Continuity Strategy On this document, or as an attachment, provide a summary response, including changes, of your business Continuity Strategy. The ERB has a business continuity plan in place and is constantly in the process of improving and updating the plan. The from an IT standpoint the plan currently consists of the following: A list of ERB’s mission critical and secondary applications. A list of necessary network hardware. ERB’s current backup strategy for weekly, monthly, and yearly backups. Configuration and setup of server rooms at both ERB locations. Three possible disaster scenarios and proposed resolutions. Diagram of ERB’s current WAN environment. Contact information for key personnel as well as vendors needed in the case of an emergency. Backup tapes and necessary copies of software and software license information are stored off-site at State Records Centers and Archives (SRCA). Issues currently being explored by ERB are ways to create a backup system for mission critical applications. Identifying ways to provide real time replication of data over a WAN environment and a more comprehensive backup system. Security Strategy (Application and Data Security Process, Plan, or Standard) ERB has deployed a layered approach to network security and taken numerous steps to improve network security within the agency. These products are as follows: Watchguard firewalls – deployed at both our Albuquerque and Santa Fe locations all incoming and outgoing traffic is controlled through these firewalls. In addition remote access for both employees and vendors are controlled by both the domain controller and firewall. Norton Antivirus Enterprise Edition 10.2 – this has been deployed to all desktops, laptops, and servers. This provides up-to-date antivirus protection for the entire network. Cisco Security Agent (CSA) – The CSA has been deployed on all desktops, laptops and servers. CSA goes beyond conventional endpoint security solutions and offers proactive protection and defense of targeted attacks, spyware, root kits, and day-zero attacks. Remote Infrastructure Management Systems (RIMS) – working with Integrity Networking Systems RIMS provides ERB with an additional layer of network security to detect security breaches, reduce the risk of data loss, desktop and server monitoring, automated windows software update services (WSUS), in-depth network audit capabilities, and enhanced security and reporting for the incoming IRIS Enhancement Project. ERB is currently using the State of New Mexico’s published standards on internet/email usage. In addition ERB has implemented policies concerning ERB hardware, software, anti-virus, and the access This is a controlled document; this version supersedes all other versions. Revision: 2/14/08 Page 4 of 5 Project Closeout Report of sensitive member information such as social security numbers and account numbers. ERB believes this process will be ongoing and will be looking to continually improve these policies. Project Sign Off The signatures below certify that this project has been completed in accordance to the specified budget, schedule, scope, and achieved the intended outcome. STAKEHOLDERS Executive Sponsor (or Designee) Lead Agency Head (or Designee) CIO IT Lead Project Manager NAME: SIGNATURE DATE ___________________________________________ Jeff Riggs, Deputy Director ___________________________________________ Jan Goodwin, Executive Director ___________________________________________ Greg Trujillo, IT Manager ___________________________________________ J. Robert Rivera, Project Manager This is a controlled document; this version supersedes all other versions. Revision: 2/14/08 Page 5 of 5