Appendix 1 - Roadmap for ICT Infrastructure Development (FY 11/12) This Appendix details the work programmes required for the current financial year to meet the aspirations of the ICT strategy. Note that in the summary tables for each year, items that currently do not have funding allocated are highlighted in italics. Roadmap 20010/11 Outcome Project requests Project to IPSC (10/11) Head Count Enhance Networks in University Buildings 40745 Network segmentation Staff Allocation Priority 1=high, 2=Med, 3=Low Funding Source Time Estimate Funding Requested Funding Allocated Start Date End Date Network Team 1.0 FTE 7FTE (4) IPSC 3 Months £50,000 £0 01/05/2010 Not Funded 2 40744 Network/ Security 7FTE 1.0 FTE (3) IPSC 4 Months £50,000 £0 01/05/2010 Not Funded 2 Flexible Access 40743 Network Team 2.0 FTE 10FTE (6) IPSC 4 Months £50,000 £0 01/04/2010 Not Funded 2 Directory Integration 43805 Novell Team 2FTE 1 FTE (2) IPSC 6 Months £25,000 £0 01/11/2010 Not Funded WEB 2.0 Developments 43807 CS/MIS/TRG 2.5 FTE IPSC 6 Months £15,000 £0 01/11/2010 Not Funded 2 2 (5) Service Sustainability 40742 All teams 28FTE 2.5 FTE (6) IPSC 5 Months £80,000 £80,000 01/05/2011 Complete 1 DR/BC enhancements 40740 All teams 28FTE 3.0 FTE IPSC 6 Months £250,000 £250,000 01/05/2011 30/12/2011 1 (6) Student clusters 41777 Admin/Novel/ 0.33 FTE DST/DTT/TIG (1) 4FTE IPSC 4 Months £200,000 £200,000 01/04/2011 Complete 1 Teaching space upgrades MCU 2FTE IPSC 3 Months £100,000 £100,000 15/07/11 Complete 1 (8) (6) Investment 43111 Cost Consumables Staff Resource Cost Cost Capitalised Revenue 15.33FTE £430,000 £107,500 £200,000 Roadmap 2011/12 The items for 2010/11 have been extended and modified to take account of new strategic priorities and the opportunities presented by changes in the external environment and funding Enhancement of Campus LAN switching Infrastructure – Status Ongoing Continue to improve the network infrastructure within University buildings through the replacement of ageing Ethernet equipment. Priorities for this year include significant provisioning works, Router upgrades and additional Fibre Optic circuits required to support the VoIP project implementation. Benefits Dedicated bandwidth to the desktop, particularly for researchers, and specialised research facilities and enhanced Network security, quality of service and management tools (Ref. Information Strategy Universal Access Working Group, e-Science and the Grid working group, University Strategic Plan 1.6.3). Risks Users experience poor network and applications performance. Ageing equipment leading to increased failure rates and Network downtime. Inadequate network management and security capabilities requiring more staff effort to maintain service levels Network Segmentation – Status Ongoing Continue to implement Network segmentation to limit the exposure of key services and provide inherent containment measures against hacking, viruses, worms etc. (Ref. Information Strategy Information Systems Security Working Group and Universal Access Working Group; University Strategic Plan 3.3.5) Benefits Reduce key systems exposure and provide inherent containment measures against hacking, viruses, worms etc. (Ref. Information Strategy Information Systems Security Working Group and Universal Access Working Group; University Strategic Plan 3.3.5) Risks High risk of systems compromise, virus and worm propagation leading to potential loss of confidentiality, integrity and availability of the University’s information assets. Significant staff resources required for handling security incidents. Directory Integration – Status ongoing Continue to develop the infrastructure that will provide secure authentication and authorised access to IT resources for the individuals who are entitled to use them. Priorities for this year will include Guest account management system improvements for approved visitors and guests e.g., conference delegates, visiting academics etc. Ongoing Maintain Active Directory populated staff and student accounts serviced via the Identity Vault including password self service Additional Federated authentication services against central directories to promote GUID adoption. TRG to oversee. JISC sponsored ‘Shibboleth’ federated services and Public Key Infrastructure ‘PKI’ investigations - Ongoing (Ref. Information Strategy Authentication and Access Control Working Group; University Strategic Plan 3.3.4) Benefits Comprehensive Identity management system enabling a variety of current and future developments including CSCE, SSD, SSO, Shibboleth realms, Virtual organisations, portal developments and unified messaging including IP telephony Risks Poor or limited Identity management provisions will result in: Increased security incidents and staff efforts to resolve Proliferation of different authentication domains and systems Leading to Duplicated staff efforts and in-ability for staff in one authentication domain to access resources out with their domain In ability for the University to fully participate in national initiatives e.g., Athens realm, EScience collaborations and cross institutional federated services 2 National Middleware Initiatives – Dependant on Directory Integration Continue to implement and support the JISC framework for ‘national’ middleware services based on the open source, open standards Shibboleth framework, which is designed to integrate with institutional directories. Benefits Provide robust authentication and authorisation services for staff and student access to institutional services and also datasets and other sources of electronic information, which are held externally. It is intended that the X.509 certificates used by Grid middleware will be integrated into the national middleware initiative. Whilst HEFCE have allocated £3.2M for the rollout of Shibboleth in England, SHEFC have not indicated, as yet, that there will be commensurate financial commitment for Scotland. Progress to date includes the Athens replacement authentication system now being used by the Library, the Janet roaming service and Eduroam Risks Failure to participate in National developments will isolate the University and make it more difficult to for the University to participate in future collaborative projects including GRID/e-science research projects. Serviced Desktop for Staff and Students – Status ongoing Continue to develop and actively promote solutions for desktop systems management and security. This area was considered a significant concern in various information security audits carried out by Delloite’s. Priorities for this year include; Promoting Standard Staff Desktop (SSD) version 7 based on Windows 7 and AD SSD migration from Novell based file and print services to Active Directory (AD) managed servers. Promoting the SSD managed solution within Colleges and Schools Renew Sophos anti-virus site license Benefits Improve security, productivity and reduce IT support overheads so that some resources can be redeployed to value added activities at the faculty/departmental level (Ref Information Strategy Working Group Common Baselines and Delivery Platforms; University Strategic Plan 3.3.4) Risks SSD stagnation would result in poor uptake, increased security incidents and duplicated IT staff effort Wifi Flexible Access Provision – Status ongoing Continue to develop flexible network and IT infrastructure access solutions. Priorities for this year include replacing end of life access points (APs) and a complete service review to define and implement service improvements, making the service easier to use and able to support a wider range of Wifi enabled mobile devices. Benefits Allow staff, students and authorised visitors to use their own personal systems to access IT resources from a consistent, secure and reliable network infrastructure. (Ref. Information Strategy Universal Access Working Group; University Strategic Plan 3.3.4) Risks Ad hoc solutions will result in increased security incidents, inconsistent solutions across campus, duplicated efforts, confusion amongst users and higher capital and support costs 3 Service Sustainability – Status ongoing Priorities for this year include Server virtualisation to provide additional disaster recovery and business continuity capabilities and reduce the environmental impact of introducing new services Additional filestore to support SSD/CSCE/e-mail services Web Cache service replacement Background The web cache service was introduced to help reduce the University’s Network bandwidth charges. Changes in the way JANET(UK) levy Network charges has removed this requirement. However the web caches provide a valuable monitoring point to help with Acceptable use monitoring and incident investigation. It is also true to say that on occasions the web caches cause user frustration due to increased WWW page load times. Proposal: IT Services would like to remove the web cache service but preserve the ability to monitor AUP compliance and support incident investigations, without impacting WWW page load times. Establish a Moodle version 2.0 development environment. All Colleges and schools depend on the Moodle service to support their teaching and learning activities. In addition Moodle is a critical service with respect to the University’s ‘Student experience’. The current Moodle service has been stable for a number of years and it is imperative that major Moodle upgrades i.e., to version 2.0 is carried out in a manner that does not impact on the reliability and performance of the existing Moodle service. To facilitate this requires investment in an appropriate Moodle 2 development environment. The development environment would be used to identify and resolve barriers to Moodle migrations and determine the most appropriate server and application support infrastructure necessary to provide a robust, scalable and high performance Moodle 2 service. Designing sustainable services will require a higher initial investment however the expectation is that over the lifetime of the service the benefits in terms of the service levels provided will be greater and overall costs in terms of management and other support costs will be less. All too often services evolve from a basic level supporting a few users to a critical mass with many watersheds along the way that require significant support efforts, service downtime for upgrades and user dissatisfaction during periods of poor service performance. Benefits Service sustainability is about designing and improving services to ensure that they are: Robust and resilient Scale to meet user demand and legitimate expectations over time Provide continued high performance, availability and reliability Provide service assurance metrics that indicate when improvements, upgrades and replacements are required. This implies that suitable funding is made available for server upgrades and replacements. This would be analogous to the agreed workstation four-year replacement cycle. Are supportable and secure Risks Increased frequency of Systems and Applications failures Poor applications performance Leading to User dissatisfaction Poor business continuity and disaster recovery capabilities Increased support load on systems teams In ability to introduce new productivity features and other service enhancements Improve e-Science support Network – Status Ongoing Build on existing relationships between the National e-Science centre, e-Science researchers, GRID computing systems administrators and other GRID support personnel to establish an e-Science support team. No financial priorities for this year. Benefits Significant co-ordinated support network for GRID computing at the University Risks Disjointed approach to GRID/E-science computing, resulting in duplicated efforts amongst support staff and a loss of prestige in the e-science research community 4 Implement Disaster recovery and Business continuity solutions for Core infrastructure services Continue to review Disaster Recovery and Business Continuity plans for all Core services. Update and amend operational procedures and roles and responsibilities as appropriate. Expand the Boyd ORR building DR site to include systems that will provide DR and BC solutions for critical services as per DR/BC plans (Ref Information security/continuity working groups). Priorities for this year include; Increased power provision within the James Watt North, Boyd Orr and St Andrews server rooms and improved power protection. Additional backup capacity to support the increased data foot print for a wide range of core services Benefits Ensure core services continue to operate at acceptable levels during disaster situations affecting core sites or major hardware or network failures. Significant expansion of Standard Staff Desktop deployments and the exchange e-mail service will protect user file store and e-mail folders against local system failures. Expanding the central backup capabilities will allow IT services to provide an enhanced back up service for faculty and other units critical data. Risks Prolonged failure of core services or data loss will seriously impact the University’s ability to conduct business and fulfil its legal and statutory duties with respect to information processes. Lifecycle Replacement and Enhancement of Student (PC) Clusters Annual Student PC cluster replacement The 2011/2012 investment was brought forward to financial year 2010/2011, therefore no spend is anticipated this financial year. Benefits To ensure that reliable and modern workstations are available for student use and to improve the workstation to student ratio. (Ref. Information Strategy Provision of on-Campus Student C&IT Facilities Working Group; University Strategic Plan 3.3.6) Risks Increased failure rates on cluster systems would lead to higher support costs and increasing complaints from students re IT facilities. Unreliable and or slow workstations could cause difficulties for students to deliver assignments on time. Poor ratings in HE surveys Review File store and Server consolidation strategy Continue to measure the effects of the current file store consolidation and server consolidation strategies. Priorities for this year include, producing a joint IT services and College business case for sufficient central filestore provisions to accommodate College and school requirements. The Business case will be submitted to IPSC for consideration. Benefits Quantify the benefits obtained from a centralised file store and server consolidation strategy and propose future strategic direction. Reduced cost for file store and server provisions for all Colleges based on economies of scale, consolidated purchasing power, lower operating costs and reduced a reduction in staff resources allocated to file store management. Risks Inappropriate strategic direction leading to higher cost for core service deployments IT Staff Training Continue to implement the TRG working group recommendations for IT support staff training. Benefits The benefits would be improved skill sets, IT staff morale and productivity Risks IT support staff expected to perform technical, sensitive and critical functions without proper training and staff development 5 Review of Computer room provisions on campus – Status Ongoing Server and file store consolidation, Service sustainability and HPC cluster provisions are placing heavy demands on existing computer room (Data Centres) facilities including space, floor loadings, electrical provision/protection and air conditioning/handling. It is important to continue to review existing provisions to determine whether or not University strategies with respect to Disaster recovery, Business continuity, service sustainability and e-Science are likely to be compromised by inadequate computer room provision. Priorities for this year include increased power provision and protection within the James Watt North and Boyd ORR server rooms and installing power protecting for the St Andrews building communications room. It is projected that the existing computer rooms operated by IT services will have reached full capacity by 2012. Service outages caused by power overload and air conditioning deficiencies are increasing. Significant funds have been used to improved the environmental conditions within existing data centres however the fundamental problems associated with the poor condition and limited space of existing data centres remain a significant risk to core services. Benefits Identify the risks associated with the condition and capabilities of existing Data Centres to the University’s business and IT strategies with respect to Disaster recovery, Business continuity and service sustainability. Risks Poor computer room accommodation will result in significant risks to a progressive IT strategy and business continuity/disaster recovery planning. Unified communications and Web 2 developments Investigate and propose strategic solutions for end user access to integrated e-mail, diary management, telephony, fax, IM, document and applications sharing and other forms of personal communications. Priorities for this year include integrating a number of current projects to provide a true Unified communications environment. Benefits Unified communications will provide a more productive end-user communications environment and allow users to more quickly find and communicate with the people they need to. Developments in Web technologies are likely to provide a greater choice in the way IT applications are deployed and supported. It is therefore desirable for the University to be made aware of these developments and any measurable benefits that may impact the University’s ICT strategy. Areas of particular interest would be social networking and collaboration tools, Software as a service paradigm, Virtual desktops and a variety of productivity tools based on Rich Internet/Interactive Applications (RIAs) e.g., special purpose widgets, gadgets and sidebars. Risks Poor or badly integrated personal communications systems will frustrate users and lead to more time being spent managing communications channels and communications content Portal Services Continue to develop comprehensive Portal services for Staff and Students, based on SharePoint, and align with other infrastructure developments including SSO/Identity management, SLP, SSD and CSCE developments. Benefits Student portal services will be important to the student laptop scheme and would integrate WEB based student resources including Moodle, WebSurf, ExamSurf, e-mail, file store and print services Staff portal services would provide simplified access to web based resources including e-mail, diary management and other collaboration tools e.g., Desk Top conferencing, instant messaging, Wikis, Blogs and IP telephony Risks Without a robust portal service it will be hard to integrate, in a consistent way, the web based services that are being used or likely to be used to front end core applications. Poor or badly integrated Portal services will frustrate users and reduce the effectiveness of web-based applications. 6 Teaching Space Improvements – Status ongoing Continue to improve IT and A/V provisions within all centrally supported Teaching Space (TS) in accordance with the proposed Teaching Space strategy and associated roadmap. Priorities for this year include replacing old projectors, AV upgrades to various venues to support Lecture recording or Video Teaching and improving the effectiveness of the remote diagnostic and management systems. Benefits (within available budgets) Ensure that Teaching Space facilities are kept up-to-date with respect to technology and reasonable expectations Ensure that Teaching Space support is fully co-ordinated across all relevant service boundaries and measured against agreed performance indicators Ensure teaching spaces are flexible and capable of supporting new requirements e.g., lecture recordings, video teaching. Risks Teaching Space IT and A/V facilities remain inconsistent between venues and difficult to use Teaching Space support remains uncoordinated and inefficient Poor Teaching Space provisioning and support leading to significant user dissatisfaction Review of Student e-mail provision The focus for this year will be to review the operation of the Microsoft Exchange based student email and calendaring solution. Options for cost savings will be explored including service provisioning using lower cost disks and the possibility of externally hosting the service at Microsoft’s live.edu or Google’s G-mail. Benefits The Student e-mail service is embedded as a pivotal service within the University’s Student IT provisions. Most out of band communications between University departments and the Student population occurs via e-mail and indeed it is viewed as a critical means of communications for important alerts such as exam reminders, assessment reminders, tutorial and lecture changes etc. Our student e-mail provision should provide the following: High Performance and sufficient mail box size User friendly interface and functionality including spell checking, address books and diary management Integration with other student IT facilities e.g., VLE, SRIP, Portal etc Risks Failure to address future Student e-mail provisions will result in the following: Deterioration of existing service Potential inability to deliver important messages when needed User dissatisfaction leading to ad-hoc uncontrolled solutions Software Licence Policy Management – Status ongoing Continue to review the implementation of the software licence policy management project. Specific objectives for this year will be the continued role out of the auditing tool, based on Microsoft’s Systems Centre Configuration Manager, to all SSD and CSCE desktops and establish a robust auditing and reporting process. Benefits Reduce the University’s exposure to the risk of litigation due to software copyright infringements. (Ref. Implementation of Software Licensing Policy approved by Court) Risks Copyright infringements resulting in significant staff time to resolve and potential legal actions against the University 7 Projected Costs for 2011/12 – All Priorities. Activity Project Cost Cost Cost Capitalised Revenue Consumables Source Priority 1=high, 2=Med, 3=Low Enhance Networks in University Buildings 40745 £50,000 £12,500 University 2 Network segmentation 40744 £50,000 £12,500 University 2 Flexible Access 40743 £50,000 £12,500 University 1 Directory Integration 43805 £25,000 £6,250 University 2 Student clusters 41777 £0 University 3 Unified communications and WEB 2.0 Developments 4306 £15,000 University 2 Software Licensing 40739 University 2 IT Staff Training 40737 University 2 Service Sustainability including Moodle 2 developments and web cache replacement 40742 £160,000 £40,000 University 1 Disaster recovery/Business continuity including Power upgrades* 40740 £275,000 £68,750 University 1* Increased central file store provision 40742 £150,000 £37,500 University 1** Teaching space upgrades 43111 £100,000 £25,000 University 1 Sophos ant-virus renewal 40739 University 1 Totals £10,000 £2,500 £25,000 £20,000 £870,000 £217,500 Funds Requested £60,000 Revenue Plus £277,500 Consumables * Power upgrades and increased power protection are budgetary estimates and implementation should be handled via E&B. Projected Costs for 2011/12 – Priority One elements only Activity Project Cost Cost Cost Capitalised Revenue Consumables Source Priority 1=high, 2=Med, 3=Low Flexible Access 40743 £50,000 £12,500 University 1 Service Sustainability 40742 £160,000 £40,000 University 1 Disaster recovery/Business continuity 40740 £275,000 £68,750 University 1 Increased central file store provision 40742 £150,000 £37,500 University 1** Student clusters 41777 University 1 Teaching space upgrades 43111 University 1 Sophos antivirus renewal 40739 University 1 Totals £0 £100,000 £25,000 £20,000 £735,000 £183,750 Funds Requested £20,000 Revenue Plus £203,750 Consumables 8 Project requests to IPSC (11/12) Head Count Staff Allocation Enhance Networks Network Team 1.0 FTE in University 7FTE Buildings Time Estimate Funding Requested Funding Allocated Start Date End Date Priority 1=high, 2=Med, 3=Low (4) IPSC 5 Months £50,000 £0 01/05/2012 30/09/2012 2 Funding Source Network segmentation Network/ Security 7FTE 1.0 FTE (3) IPSC 5 Months £50,000 £0 01/05/2012 30/09/2012 2 Flexible Access Network Team 2.0 FTE 10FTE (6) IPSC 5 Months £50,000 £0 01/06/2012 31/10/2012 2 Directory Integration Novell Team 2FTE 1.0 FTE (2) IPSC 7 Months £25,000 £0 01/03/2012 30/09/2012 2 WEB 2.0 Developments CS/MIS/TRG 0.5 FTE IPSC 6 Months £15,000 £0 01/04/2012 30/09/2012 2 IPSC 6 Months £10,000 £0 01/04/2012 30/09/2012 2 2 Month £25,000 £0 01/05/2012 30/06/2012 2 (5) Software Licensing DST 1.0 (2) IT Staff Training Admin/Help 0.1 FTE Desk/Training 4FTE Service Sustainability All teams 1.0 FTE (6) IPSC 6 Months £160,000 £0 01/05/2012 28/10/2012 1 DR/BC enhancements All teams and 2.5 FTE IPSC 6 Months £275,000 £0 01/04/2012 30/09/2012 1 Student clusters Admin/Novel/ 0.0 FTE DST/DTT/TIG (1) 4FTE IPSC 0 Months £0 n/a 01/04/2012 28/07/2012 3 Business case for central file store provision SST/TRG 1.5 FTE IPSC 9 Months £150,000 £0 01/02/2012 28/10/2012 1** 7FTE (4) Teaching space upgrades AV/IT 2FTE IPSC 3 Months £100,000 £0 15/07/2012 15/09/2012 1 (8) (6) Sophos DST 0.1FTE IPSC 1 Month £20,000 £0 1/07/2012 1/08/2012 1 antivirus (4) (1) Investment 28FTE E&B (1) IPSC (6) Cost Consumables Staff Resource Cost Cost Capitalised Revenue 13.7FTE £870,000 £217,500 £60,000 9 Project - Other Head Count road map projects with staff commitments National middleware initiatives (Shibboleth) Staff Allocation Novell/Server/ 0.5 FTE MIS/E-science (5) 5FTE Start Date End Date Priority 1=high, 2=Med, 3=Low Funding Source Time Estimate Cost IT Services Ongoing N/A 1 Serviced Desktop Novell/DST/ for Staff and Server Students 9FTE 4.0 FTE (9) CS Ongoing N/A 1 Improve e-Science Server Team support Network 2FTE 1.0 FTE (2) CS Ongoing N/A 2 IP Telephony 3.0 FTE (8) CS Ongoing N/A 1 CS 1 Month N/A 1 MCU/E&B 2.5 FTE Continue to review Server/ 0.25 FTE file store and Netware 3FTE (3) server consolidation strategy Investment 8.75 FTE Totals 22.45 FTE 10 Appendix 2 – TRG short life working group reports The following TRG reports have been produced Report on Professional Development of Distributed IT Support Staff Report on Software Audit Tool Report on Student Clusters Report on Patch Management Report on Platform Flexibility Report on Multimedia Communications Report on E-mail, Diary Management and unified messaging direction Review of file store and server consolidation strategy Review of Computer room provisions Report on Flexible access provisions for teaching, research and administration support Teaching space strategy Future TRG reports may include Review of file store and server consolidation strategy Report on Domain Name Service and IP address management direction Report on Apple OSX requirements and support Report on Linux requirements and support Report on Open Source Software solutions Report on Authentication and Authorisation services on campus and with other Institutions Report on Network and Information systems security Report on e-Science support Report on Web2.0/3.0 and the potential impact on the University’s ICT strategy, IT support and the services and applications that would be relevant to the University’s IT user base 11