S ECURE M OBILE W ORKSPACES – N EXT G ENERATION D ESKTOPS E MPOWERING A GILE G OVERNMENT J EFF P ORTER - D IRECTOR P LATFORM TECHNOLOGY D IVISION D EPARTMENT OF I NFORMATION T ECHNOLOGY F AIRFAX C OUNTY G OVERNMENT

IT I NITIATIVES D RIVING S ECURE M OBILITY Fairfax County continues to evolve in its use of secure mobile technologies which is guided by the following County IT initiatives set by the Department of Information Technology’s CTO in the County’s IT Plan:  Mobility  Teleworking  Bring Your Own Device (BYOD)  Security  Operational Cost Efficiency  Continuity of Operations (COOP) Planning  Environment Stewardship and ‘Green’ IT FOSE 2014 – Fairfax County Government

A VAILABLE IT S ERVICE O FFERINGS TO E ND U SERS -Below are some of the technologies deployed within the County’s enterprise: -Hardware for Promoting Mobile Workspaces  Laptops  Tablets  Windows 8 To-Go (USB device which boots host machine to County’s Windows 8.1 image)  iPads  Secure Mobile Devices (iPhones, Androids, Windows Mobile Phones, Blackberry) FOSE 2014 – Fairfax County Government

A VAILABLE IT S ERVICE O FFERINGS TO E ND U SERS (C ONTINUED ) To enhance the user experiences while working remotely we have deployed the following IT services that are offered to all users. -Applications for Promoting Mobile Workspaces  Microsoft Lync Instant Messaging Desktop Sharing Phone/Conference Calls Video Calls  County App Store County approved applications to use for better business productivity and increased mobility.  Fairfax Remote The County has moved way from tokens to Validation and ID Protection (VIP). Users can access their standard Office Applications, Saved documents in ‘MyDocs’, and enterprise ERP system for accessing time and benefits (i.e. Employee-Self-Service and Manager-Self-Service).  Office 365 (Pending) Provides streamlined, integrated and cloud-based collaboration to the County. FOSE 2014 – Fairfax County Government

C OUNTY IT S ECURITY FOR A S ECURE M OBILE W ORKSPACE -The following applications have been deployed to ensure a secure mobile workspaces while increasing continuing to deliver an agile and scalable IT infrastructure:  Two-Factor Authentication Validation and ID Protection (VIP) for two-factor authentication of County IT systems. VIP implemented in fall of Delivers a second layer of authentication outside of user’s domain ID and password.  Encryption County uses encryption technologies to protect sensitive data being transmitted via electronic messaging.  Data Loss Prevention (DLP) Implementation underway. DLP reduces the risk/chance of loss of protected data or compromise from Outbound threats via hidden malicious attempts to mine county data.  Secure Mobile Device Management (MDM/MAM) Controls the use of mobile devices and addresses the challenges of data loss prevention and security on mobile devices, such as tablets and smartphones, which may access county data from remote networks. FOSE 2014 – Fairfax County Government

U SE C ASES AND H IGH L EVEL S TATISTICS High-Level Stats -At the beginning 2013, 20% of County end users were able to telework and access County services remotely. -Beginning 2014, at least 70% + of County end users are able to telework (given appropriate managerial approvals) and access County IT services securely using the Fairfax Portal with Validation and ID Protection (VIP). -In FY 2014 DIT upgraded the remote access portal to allow employees the ability to access the county’s ERP system ( FOCUS) functions (given their security profile) from anywhere over any device securely. Use Cases  Contractors Contractors providing support remotely off-site, and off-peak hours (i.e. weekends, night-time)  Employee Teleworking County employees are enabled to have flexible work arrangements while continuing to carry out County business functions in a productive, secure, and efficient manner.  BYOD Users can access the County network, systems, and applications from a personal device, allowing them to stay productive whatever their choice of PC or mobile device. FOSE 2014 – Fairfax County Government

N EXT S TEPS -Continue evangelizing IT service offerings (tablets, remote access, Windows 8 To-Go, etc.) which promote an increase to the mobile workforce. -Transition end users to a Single Point of Entry for secure and ease of access to all County IT Services (Fairfax Portal) via workstations and mobile devices. -Promote new hardware devices / standards as part of County PC Replacement Program (laptops and tablets) -Complete implementation of: Microsoft Office 365 Data Loss Prevention (DLP) FOSE 2014 – Fairfax County Government

D EMO OF S ECURE M OBILE W ORKSPACE IT S ERVICES Windows 8.1 To-Go FOSE 2014 – Fairfax County Government

THANK YOU! F OR Q UESTIONS P LEASE C ONTACT : JEFF. FAIRFAXCOUNTY. GOV J EFF P ORTER - D IRECTOR P LATFORM TECHNOLOGY D IVISION D EPARTMENT OF I NFORMATION T ECHNOLOGY