Industry_Day_Task_Area_Panels.pdf

FSA Industry Day: Task Area Panels February 2, 2016

Panel 1

February 2, 2016 2

Task Areas TA 1 Advisory CIO Services TA 2 Quality Management and Independent Verification and Validation TA 3 Strategic Planning and Enterprise Architecture TA 4 Program and Project Management

Panelists Loretta Burns, Deputy CIO for Programs Tonye Gross, Acting OCIO Chief of Staff Kara Cochran, Director for IT Budget and Acquisition Gerald Pattillo, Chief Architect

FSA OCIO Mission

To serve customers by providing innovative and secure technology solutions, services, and information that enable efficient, effective and sustainable delivery of agricultural programs.

FSA Information Technology Operating Model

Chief Information Officer/Deputy Chief Information Officer

Chief of Staff

Application Development

Operations & Testing

Web/Digital Services

Information Security

Budgets and Acquisitions

Aerial Photography/

Geospatial Services (GIS)

Architecture

SLCWDC KC KC/STL

FSA Information Technology Strategy

February 2, 2016 5

FSA IT Strategic Direction (4 Pillars for IT Improvement) Decision Framework Initiative Portfolios

1.USDA IT Governance (IITGF) 2.Analysis & Decision Factors •Business Changes •Business Capabilities Definition •Business Architecture Mapping

• IT Investment Planning •Architecture Alternative Identification •Cost / Benefit Analysis (Fiscal

Stewardship) •Risk Assessment

• Federal Architecture Alignment •Architecture Assessment and •Decision (Fit for Purpose)

1.Ensure Operational Availability, Security & Integrity

2.Simplify and Improve the FSA IT Portfolio

3.Partner on High Impact / Cross Agency Programs

4.Enhance Key IT Planning and Delivery Disciplines

1.New Business Model Support

2. Enablement of Business Process Improvements through Technology Innovation

3.Replacement of Outdated Technologies

4.Operations & Maintenance Improvements

FSA Information Technology Portfolio Management

1) Field Operations Portfolio

• 124 - Services and Outreach to Agricultural Communities

2) Farm Programs Portfolio 6) Management & Administrative Services Portfolio

• 009 - Cotton Management System

• 030 - Subsidy and Production Programs

• 097 - Farm Program Modernization - MIDAS

• 101 - Price Support Systems

• 102 - Consolidated Natural Disaster Relief Programs

• 104 - Tobacco Systems

• 105 - Conservation Systems

• 111 - Common Farm Program Systems

• 093 - Commodity Credit Corporation Budget Formulation

• 094 - Budget and Performance Management System

• 095 - Digital Communication Platform Support

• 098 - FSA Alignment to OMB’s Financial Management

• 106 - Consolidated Financial Management Information Systems

• 107 - Consolidated General Sales Manager

• 112 - Consolidated Administrative Services

3) Farm Loan Programs Portfolio 7) Information Technology Support Portfolio

• 090 - Comprehensive Loan Program

• 103 - Consolidated Farm Loan Program Information and Delivery Systems

FSA Provided IT Support Services

• 026 - Information Systems Security Program

• 109 - FSA Architecture, SDLC & Common IT Solutions

• 110 - FSA Data and Database Administration

• 115 - Infrastructure Operations & Services paid/provided by FSA USDA Provided Support Services

• 074 - USDA Green book and Working Capital Fund

• 114 - FSA Specific Infrastructure Services provided by CTS

• 117 - Optimized Computing Environment

• 120 - USDA Enterprise Data Center Hosting Shared Services

• 121 - USDA Enterprise Telecommunications Shared Services

• 122 - USDA Enterprise End User Shared Services

• 123 - USDA Enterprise Messaging Systems Cloud Services

4) Commodity Operations Portfolio

• 096 - Web-based Supply Chain Management

• 100 - Commodity Management Systems

5) Geospatial Services Portfolio

• 072 - Aerial Photography Field Office Requirements

• 084 - Geographic Information Systems

ADDITIONAL INFORMATION

FSA Organizational Operating Model Overview

• Office of the Chief Information Office (OCIO): OCIO provides overall leadership and management for the FSA IT Organization and includes Enterprise PMO services.

• Architecture & Management Center (AMC): AMC provides services such as enterprise architecture, solutions architecture, project management support, and systems development lifecycle process management.

• Applications Development Center (ADC): ADC provides development and maintenance of applications and solutions.

• Operating & Testing Center (OTC): OTC provides data architecture, database administration, testing / certification of applications, infrastructure management, technical operations, and the FSA help desk.

• Web/Digital Services: WSO operates and maintains FSA’s digital communications channels.

• Information Security Office (ISO): ISO provides security requirements/controls, authorization and accreditation, and user provisioning/access management.

• Budget & Acquisitions Office (BAO): BAO provides IT budget & financial management, IT acquisition, and vendor management services.

• Aerial Photography Field Office (APFO) & Geospatial Services: APFO provides the management, acquisition and maintenance of national imagery base maps and geospatial services.

Geographic Locations: FSA OCIO has offices in Washington, DC; Kansas City, MO; St. Louis, MO; and Salt Lake City, UT. The largest office is in Kansas City, which provides most of the technical application development, operations and security work. Application development for the Farm Loan business line is supported primarily out of St. Louis. The Aerial Photography Field Office (APFO) is in Salt Lake City. Washington DC primarily supports management functions such as Budget & Acquisition, Web/Digital Services and enterprise PMO.

February 2, 2016 8

Panel 2

February 2, 2016 9

Task Areas TA 6 Information Assurance, Security and Privacy TA 7 IT Operations TA 8 Test Management TA 9 IT Outsourcing TA 10 Enterprise Information Management and Data Management TA 11 Database Operations

Panelists Jeff Wagner, Acting Chief Information Security Officer Paul Chevalier, Director for Operations and Testing Kurt Benedict, Chief for Testing and Certification Sudhir Surendran, Chief for Database Management Damien Winters, Lead for Enterprise Service Desk Frank Mendez, Chief for Operations

Information Assurance, Security & Privacy

CIO

Information Security

Governance & Compliance

Information Security

Operations

CISO

Information Systems Security

Program Manager

(ISSPM)

Information Assurance Information Risk management External (IT controls) audits Internal control reviews Risk assessments System Security Plans RMF/Authorizations To Operate POA&Ms/CAPs Communications Training

Intrusion detection Vulnerability Scanning Penetration testing Digital forensics Contingency planning Digital certificates and tokens Identity & access management Security arch/app req.

Policy

CDM

Incident Response Data Calls

Tools

• CSAM

• Remedy

• Jira

• Encase

• Excel/Access

• Nessus

Annual Metrics

• 37 System ATOs (158 Subsystems) Maintained

• 1600+ Security Control Descriptions Reviewed

• 4+ Audits

• 130+ Audit Artifact Requests Processed

• 250+ Control Reviews Performed

• 1200+ Controls Assessed

• 750,000+ Account Permissions Reviewed

• 37 POA&Ms (3-year average)

• 150+ Cyber Security Incidents

• 60+ Digital Forensics and eDiscovery Requests

• 30,000+ Account Management Requests

FSA Components – SAP Focus - Production

Web-Based Apps

GIS

NFC

NITC

FSA Common SAP Environment

(*) There are other non-shared components in the O&M environments that will not be managed as part of the MIDAS baseline. Minimal use of ECC and BI is not currently used by FSA.

CRM

MDM

BODS

Portal

PI

BOBJ

CRM

FMMI Non Shared Components

PI

Portal

ECC

GRC

Active Directory eAuth (Prod)

Data Services

ADS SAP WebDispatcherApache Proxy

External F5 LB’s

Others (*)

Internal F5 LB’s

FMMIFSA Other

Component SAP Version OS Database

CRM 7.01 Ehp1 SP12 RHEL 6.7 Oracle 12.1.0.2

PI 7.30 SP05 RHEL 6.7 Oracle 12.1.0.2

Portal 7.30 SP09 RHEL 6.7 Oracle 12.1.0.2

Adobe 7.30 SP09 RHEL 6.7 Oracle 12.1.0.2

MDM 7.1 SP08 RHEL 6.7 Oracle 11.2.0.3

DQM 4.0 SP02 RHEL 5.7 Oracle 11.2.0.3

TREX 7.10.57 RHEL 6.5 -

Component Servers CPU’s Memory GB Storage GB

CRM* 27 180* 2300* 3600

PI 12 92 976 2300

Portal 12 52 256 150

Adobe 6 22 128 150

MDM 1 16 64 230

DQM 4 72 272 3100

TREX 4 32 96 400

FSA Components – SAP Focus – Non-Production

Web-Based Apps

GIS

NFC

NITC

FSA SAP Non Production Environment

(*) There are other non-shared components in the O&M environments that will not be managed as part of the FSA SAP. Very limited use of ECC and BI in non-prod environments

CRM

MDM

BOBJ/BODS

Portal

PI

BI ABAP

BI JAVA

ECC

GRC

Active Directory eAuth (Non Prod)

Data Services

ADS SAP WebDispatcherApache Proxy

External F5 LB’sInternal F5 LB’s

FMMIFSA Other

Component Servers CPU’s Memory Storage

CRM 33 312 2610 GB 19 TB

PI 19 106 712 GB 5.6 TB

Portal 22 86 400 GB 2.5 TB

Adobe 13 56 232 GB 1.3 TB

MDM 8 32 128 GB 1.8 TB

DQM 12 104 420 7.5 TB

FSA Components – Web-Based Applications Focus - Production

Component Servers OS

Java-Based Applications

79 RHEL 5.7 and 6+

.net 7 Windows 2008 and 2012

GOTS 25 Windows 2012

Control-M 1 RHEL 6

Jenkins 3 RHEL 6

Subversion 3 RHEL 6

Nexus 2 RHEL 6

Coveo 3 Windows 2012

MQ 6 Windows and Linux, various

Content Management 3 Windows 2012

Batch and FTP 3 Windows 2008 and 2012

HP ALM 1 RHEL 6.5

FSA Components – Web-Based Applications Focus – Non-Production

Component Servers OS

Java-Based Applications 126 RHEL 5.7 and 6+

.net 7 Windows 2008 and

GOTS 15 Windows 2012

Control-M 3 RHEL 6

Jenkins 9 RHEL 6 and Windows

Subversion 0 RHEL 6

Nexus 0 RHEL 6

Coveo 1 Windows 2012

MQ 30 Windows and Linux, various

Content Management 0 Windows 2012

Batch and FTP 4 Windows 2008 and

AppScan 2 Windows 2012

HP ALM 2 RHEL 6.5

FSA OTC External Interfaces

FSA SAP

(New Orleans/Boulder)

FSA Web-Based Applications (Kansas City)

SSA

External

Salesforce

Other Customers

RD

RMA

NRCS

SAM.Gov

Geospatial Imagery (Salt Lake City)

IRS

FSA Web-Based Applications

External

SSA

IRS

FSA SAP

Salesforce

RMA

RD

Sam.gov

Database Operations

Feb 2, 2016 17

The objective of Task Area 12 is to support FSA database operations and to provide support to development teams, production resources, and IT strategic planning resources.

40 97 49 82

Number of Databases by Platform Across all environments: Dev,Intgr,Cert,Acceptance,Automated Test,Stress,Training,Sandbox,Production

MS SQL Server MS SQL Server GIS IBM DB2 Mainframe CA IDMS Oracle Oracle - SAP IBM Informix

Feb 2, 2016 18

2 4 2

Dev Cert Stress Prod

Transactional: MS SQL Server, IBM DB2, CA IDMS, Oracle Business Intelligence/Warehouse: Oracle, Informix

MS SQL Server DB2/IDMS - IBM Mainframe MS SQL Server - GIS Oracle IBM Informix

Database Version Operating System Server Description Current SQLServer 2008 R2 Windows 2008 Virtual & Physical Server DB2 v10 z/OS 2.1 Mainframe Oracle 11g and 12C Solaris 5.1 and Redhat Linux 2.6 Virtual & Physical Server Informix 11.7 Solaris 5.10 Physical Server Future SQLServer 2014 Windows 2012 Physical Server Oracle 12C Solaris 11 Oracle Supercluster

Feb 2, 2016 19

MS SQL Server Daily Transactions Count Over Last 30 Days

Feb 2, 2016 20

Requests for Database Development & Operations Support Services

Production Incidents Requiring Resolution by Operations Management and On-Call Support ---

Enterprise Information Management

Feb 2, 2016 21

The objective of Task Area 11 is to provide data management services that enable business information/analytics support for the agency

Feb 2, 2016 22

The objective of Task Area 11 is to provide data management services that enable business information/analytics support for the agency

54 144

14271372

IBM InfoSphere DataStage

Oracle Data Integration

IBM Informix (stored procedures, Unix scripts)

Data Services SSIS

Data Integration / ETL Processes by Platform

Dev Intgr Cert Prod

0 50 100 150 200

EIM/DM Service Requests

EIM/DM Work Orders

Business Intelligence and Data Management - Work volume

Currently there are 26 projects with LOE>120 Hours Projects varies from 8 weeks 120+ Hours to 15 months 25,000+ Hours

Feb 2, 2016 23

Toolset – Supporting data transformation and reporting

Tool Version

IBM Infosphere DataStage 9.1

Oracle Data Integrator (ODI) 11.1

MS SQLServer Integration Services (SSIS) 2008

Oracle Enterprise Performance Management (EPM) 11.2

Oracle Business Information Enterprise Edition (OBIEE) 11.1

SAP Data Services 4.0 SP2

Service Desk Environment – End Users and Applications

02/02/2016 24

Employees

• 2,100+ offices

• 11,000+ employees

• All 50 states and territories

Customers

• Increasing number of applications for FSA/USDA customers

• Over 8 million USDA customers

• 35,000 customer accounts with validated ID and FSA customer number in USDA’s identity management tool

• 5,000 of those active since 10/2014

Applications

• 37 Systems with 158 sub-systems

• COTS, GOTS and custom-developed applications

Service Desk Environment – Ticket Metrics

02/02/2016 25

8.11%

91.89%

Incident Submission Method FY15

Agent Submitted

User Submitted

1,000

2,000

3,000

4,000

5,000

6,000

FY15 Incident Ticket by Month

FY15 Total submission = 24,304

Unclassified 6.3%

Incident 60.6%

Service Request 33.1%

Operations Categorization Tier 1 Jan-Mar 15

Service Desk Environment – Current Model and Process Maturity

02/02/2016 26

1.8

2.3

1.6

0 1 2 3 4 5

Incident Management and Service Desk

Request Fulfillment

Problem Management

Knowledge Management

FSA OCIO ITIL Maturity Rating by Process Area

FSA OCIO Assessment Survey Maturity Results Per survey responses, the maturity of the four ITIL® processes shown above range from 1.6 Repeatable to 2.3 Defined; where a Repeatable process is unpredictable and reactive and a Defined process is primarily characterized by being proactive.

Tier 1: USDA-OCIO-Client Technology Services (department level) provides Tier 1 call center and incident routing

Tier 2: FSA Incident and Problem Management

• 1 located in Washington, DC

• 1 located in Kansas City, MO

Tier 3: GIS application support, SAP BASIS support, FSA custom application support, etc.

Service Desk Environment – Tools

02/02/2016 27

Tools for Incident Management:

• Email

• Phone

• SharePoint

• Remedy 7.6.4

• Upgrading to 8.1 Summer 2016

• JIRA

• Excel

• Oracle Right Now CX

• Liberum

• Confluence

• Fax

• Business Objects (reporting)

Test Management

– Test preparation, execution, reporting:

• Web-based, SAP, GIS, COTS, Data Warehouse platforms

• Mobile and security testing (planning phases)

– Release management and environment support (FY15 metrics):

• 690 completed release packages to production

• 3,730 configuration items submitted to testing

• 6,681 tickets opened to support the testing environment and releases

– Audit support and compliance (4+ requests annually)

– Support of agency and internal tools (JIRA, HP ALM, SharePoint, LoadRunner and others as necessary)

Testing Release Management

Compliance Tools

Requirements Traceability Test Scripts Test Execution Defect Management Reporting

Deployment Plan Information Bulletin Web Transmittals JIRA Workflows Request for Action (RFA) Coordination Meetings

Security

IV&V

OIG/GAO

A-123 Controls SDLC/Technical IB 508 Compliance

HP ALM

HP Sprinter HP Unified Functional Testing

JIRA

SharePoint WorldSpace

Test Management - Performance

– Establishing baselines for new or modified applications prior to their production implementation (as needed)

– Re-validation of existing baselines for critical production applications with high utilization or visibility

– Measuring and tuning systems within the performance testing environment for the expected business operational volumes geared towards the scope of a given release as well as the expected number of users

– Validating that the network and hardware are processing at a capacity to support the number of users and the amount of processing required by the business processes per any applicable production Service Level Agreements (SLAs)

– Load Testing, stress, soak, spike and configuration

– FY15 project requests – does not reflect iterations of tests ran:

• 64 Project requests

• 150 Baseline testing cycles

• 72 Follow-on testing cycles

• 222 Tests per project

Test Management - Automation

– Test automation framework development

– Test automation scripting

– Test data query creation

– Cross platform validation and scripting

– Custom and ad-hoc test reporting

– Administration, setup and support for test automation tools

– ETL Automation testing (large data set comparison)

– Scripting efforts for FY15:

• 510 scripting efforts (VB and UFT)

• 28 unique applications and processes

Panel 3

February 2, 2016 31

Task Areas TA 5 Systems and Software Engineering, Design, Development and Integration Services TA 12 Digital Services TA 13 Geographic Information Systems (GIS) Services

Panelists Loretta Burns, Deputy CIO for Programs Doug Jones, Acting Director for Application Development Wade Wassenberg, Enterprise Application Architect Matt Tellado, Chief for Farm Records Group Shirley Hall, GIS Program Manager

FSA Information Technology Software Delivery and Digital Services

• Software Statistics

– Approximately 700 deliverables per year.

– 200 EAR files

– Approximately 9.5 million Lines of Code for Legacy Systems

– 37 Systems with Authority to Operate comprised of 158 Sub-Systems

February 2, 2016 32

FSA Information Technology Software Delivery and Digital Services – Custom Development

February 2, 2016 33

Architecture

Object Oriented Analysis and Design (OOA and OOD)

Service Oriented Architecture

(SOA)

Model View Controller (MVC)

Single Page Application (SPA)

Development

Java JEE 5

Spring (including IoC, MVC, and

JDBC)

Jasper & iText

Eclipse

Jira

EJB2.1, EJB3, and SOAP

Continuous Integration and

Production Delivery JBoss EAP 5

RHEL 6 with Apache

Jenkins

Subversion

Nexus

Maven

JUnit

FSA Information Technology Software Delivery and Digital Services – COTS Applications

February 2, 2016 34

GIS

Esri ArcGIS Desktop 10.x

Esri ArcGIS Server 10.x

SAP

ABAP

Java

CRM

PI

Salesforce

Service Cloud

Coveo

FSA Information Technology Software Delivery Delivery and Digital Services – Digital Services & Legacy Technologies

February 2, 2016 35

Digital Services

SharePoint 2010

Percussion CM1

Oracle RightNow CX

Oracle OPA

GovDelivery

SiteImprove

FSA Legacy Technologies

Cobol (MVS & DC)

Focus, Easytrieve, Culprit

ADSO

Web390

.NET