Text
Copyright Northwestern University, 2007, all rights Reserved
Consulting and Project Office …What is the CPO?
The Consulting and Project Office provides support and assistance to all Northwestern University schools and departments in the acquisition of technology. This includes:
✓ Systems
✓ Software
✓ Development and Acquisition
Especially where the new systems are designed to comply with exchange protocol, data security, or other NU systems policies and/or initiatives.
Text
Copyright Northwestern University, 2007, all rights Reserved
Consulting and Project Office …How does the CPO serve NU?
• Contract Review, incl. Coordination with OGC (Office of General Counsel)
• Needs Analysis
• RFP Generation
• Vendor Management
• NUIT Resource
• Exchange Protocol Review
Text
Copyright Northwestern University, 2007, all rights Reserved
Coordinating Exchange Protocol Review Process
What is the purpose?
Local Management Information Systems (LMIS) frequently connect with, receive information from, or exchange data with Northwestern University systems of record. The institution recognizes these systems and the services they support as valuable parts of the community’s sharing of information. In support of these services, as well as the need to maintain integrity, consistency, and the most effective levels of service across University systems of record, Northwestern has established an Exchange Protocol that informs, guides and governs key elements of LMIS data sharing practices.
Text
Copyright Northwestern University, 2007, all rights Reserved
Coordinating Exchange Protocol Review Process
What is the purpose?
The purpose of this ... review is to provide current best practice information, conduct needed security analyses, and offer a functional review of the proposed data sharing. The process helps ensure that the University’s interests are protected, risk is appropriately managed, and that the University is in compliance with the relevant regulations.
Text
Copyright Northwestern University, 2007, all rights Reserved
Coordinating Exchange Protocol Review Process
What is the point?
• Data are gold
• Quality is important
• Change is costly
Text
Copyright Northwestern University, 2007, all rights Reserved
Coordinating Exchange Protocol Review Process
Why me?
Text
Copyright Northwestern University, 2007, all rights Reserved
Coordinating Exchange Protocol Review Process
•Who Participates?
Data Stewards
LocalUnits
NUIT
CPO
Text
Copyright Northwestern University, 2007, all rights Reserved
•What is the Process?
Review
ReviewDesignDesign AcceptanceAcceptance
Stage One: Design
• Scope and design with CPO and NUIT• Data Steward Review
Stage Two: Protocol Review
• Completion of Protocol Application• NUIT Review• Response
Stage Three: Formal Acceptance
• With Yearly Review• Appeal Process
Coordinating Exchange Protocol Review Process
Text
Copyright Northwestern University, 2007, all rights Reserved
•Common Issues• Ports What TCP/UDP ports are open and how they are allocated?• Processes What processes are running? (Only requiredprocesses running and only those ports necessary for data processing are exposed to the world.)• Patching What process is used to automate notifications?• People What persons have administrator access?• Phys Security Where are all the machines located? How are they secured?
What network security/firewalling is utilized?• Data Specifically, what information/data elements are being exchanged? How is data stored locally? Is critical data (e.g. non-public personally identifying information) encrypted?• Backup How are local backups secured?
Coordinating Exchange Protocol Review Process
Text
Copyright Northwestern University, 2007, all rights Reserved
•Common Issues
Planning for the necessary resources:
• Time• Change in underlying systems• Coordination with other initiatives
Coordinating Exchange Protocol Review Process
11
Text
Copyright Northwestern University, 2007, all rights Reserved
• Role of Project Office ...– Collection of Information– Facilitation of Process– Reporting and Tracking Results
Coordinating Exchange Protocol Review Process
Text
Copyright Northwestern University, 2007, all rights Reserved
Project Office ResourcesExternal• Academic: Educause (ICPL,PROJECT and EECM),
CIC• Professional: CAUCUS (Chicago and National), PMI
Institutional• Current and Anticipated NU experience, e.g. security,
SOA, etc.• NUIT, OGC and others
Text
Copyright Northwestern University, 2007, all rights Reserved
Cases
External Application Review
Alumni Information Review
Text
Copyright Northwestern University, 2007, all rights Reserved
Lessons LearnedMatch the Process to the Environment• Size• Style• Cost
Project Office Role• Arbitration• Documentation• Education• Supporting Materials -- “Working with ...”
Text
Copyright Northwestern University, 2007, all rights Reserved
Consulting and Project Office
• Frank Schleicher (312) 926-7042– http://www.it.northwestern.edu/policies/index.html