Security and Policy Proposed efforts FY Roadmap Presentations for Committee on Technology and Architecture February 2011 David Rusting Information Security Officer

2 Project Portfolio for ) Guidance/Research/”Leverage” –This will be done by sub-groups based on interest –Additional contract staffing to support this to be proposed under ITS budget (for enterprise solutions) 2.) Solutions to problems –A.) Integration of Macs and Unix into Active Directory –B.) Digital Signatures –C.) Central logging (incident response) SECTION HEADING

Top three priorities Criteria: –Addresses serious or critical security exposure –Aligned with UCSF mission and IT goals –Issue raised within the community (multiple sources) Describe scope of top three projects Describe expected impact or value to the university for each project 3

Mac/Unix Integration to Active Directory Estimated year 1 cost of project cost: $840K –Payroll: $210K –Non-Payroll: $630K Estimate over 3 years : $1.3M Value – $3M cost avoidance from breaches due to consistent access management and enforcement of policy across platforms –Audit/compliance will force this. Enables AD expansion for SSO – users happy 4

Projected Budget – Mac/Linux AD 5 Project Budget YearFY FY FY PAYROLL EXPENSES Architect (50%, 25%, 25%) 75,000 25,000 Project Manager (50%, 15%., 15%) 60,00020,000 Analyst (50%, 75%, 75%) 50,00075,000 QA and Operations (25%, 25%, 25%)25,000 Payroll Total 210, ,000 Non-Payroll Hardware50,000 10,000 Software250,000 50,000 Consulting300,00025,000 Supplies10,000 Training 20,000 5,000 Non-Payroll Total 630, ,000 Total Budget 840, ,000

Central Logging (incident) Estimated year 1 cost of project cost: $985K –Payroll: $235K –Non-Payroll: $750K Estimate over 3 years –$1.43M Value – Resolve incidents 30% faster –Cost avoidance: $1.5M compliance/audit –Lower staff augmentation: 800K 6

Projected Budget 7 Project Budget YearFY FY FY PAYROLL EXPENSES Architect (50%, 25%, 25%) 75,000 25,000 Project Manager (50%, 15%., 15%) 60,00020,000 Analyst (50%, 75%, 75%) 50,00075,000 QA and Operations (50%, 50%, 50%)50,000 Payroll Total 235, ,000 Non-Payroll Hardware100,00020,000 Software350,00060,000 Consulting250,00050,00025,000 Supplies10,000 Training 50,00010,000 Non-Payroll Total 750, ,000 Total Budget 985, ,000

Digital Signature Estimated year 1 cost of project cost: $265K –Payroll: $185K –Non-Payroll: $80K Estimate over 3 years : $645K Value – Researcher, departments, and staff would avoid scanning, routing, faxing, etc. –Hidden cost, but if each person spends, on average, 1 hour a year doing this, that’s $1.5M per year. –Legal non-repudiation –Easy to use outside of UCSF –Enterprise level = fewer orphaned documents, better compliance –Multi-platform, easy, removes hassle. 8

Projected Budget – Digital Signature 9 Project Budget YearFY FY FY PAYROLL EXPENSES Architect (IAM) (50%, 10%, 10%) 75,000 15,000 Product Manager (50%, 25%, 25%) 60,00030,000 Analyst and Support (50%, 50%, 50%) 50,000 Payroll Total 185,000 95,000 Non-Payroll Service (SaaS)30,00050,000100,000 Consulting and Integration50,00010,000 Training 10,000 Non-Payroll Total 80,000 70, ,000 Total Budget 265, , ,000