INFORMATION TECHNOLOGY AND COMMUNICATION COMMITTEE MEETING THURSDAY, FEBRUARY 4, :00 P.M. MINUTES

Transcription

1 INFORMATION TECHNOLOGY AND COMMUNICATION COMMITTEE MEETING THURSDAY, FEBRUARY 4, :00 P.M. MINUTES MEMBERS PRESENT: ALSO PRESENT: Commissioners Mike Hosey, Jim Osieczonek, Kent Austin, Brian Lautzenheiser, Barbara Rogers and Howard Spence Commissioners Blake Mulder and Jeremy Whittum; Jeff Parshall, Eric Daley, Claudine Williams, Keith Lambert and John Fuentes The February 4, 2016 regular meeting of the Information Technology and Communication Committee was called to order at 5:00 p.m. by Chairperson Hosey. Commissioner Lautzenheiser moved to approve the minutes of the January 7, 2016 meeting, as presented. Commissioner Rogers seconded. Motion carried. Keith Lambert, Lansing Economic Area Partnership (LEAP) and Claudine Williams were present to discuss LEAP's request for fee waiver to acquire County GIS data to use as a regional economic development tool on their website. Similar requests have been made to Clinton and Ingham Counties. The calculated fees for the data are approximately $22,000. Discussion held. Commissioner Spence moved to recommend approval of the enhanced access fee waiver for LEAP to the Board of Commissioners. Commissioner Osieczonek seconded. Motion carried. It was reported that an encryption solution had been identified and is being recommended by Technology Services to amend the 2015/16 project list to be implemented during the current budget. Discussion held. Commissioner Osieczonek moved to amend the 2015/16 approved technology projects, as recommended. Commissioner Austin seconded. Motion carried. Commissioner Rogers moved to remove the discussion regarding the creation of a Commissioner Recognition/Certificate Program from the table and let it die. Commissioner Spence seconded. Discussion held. Motion carried. An update was provided on the Court electronic docketing project and the user security training project. There was discussion regarding the impact of video data storage on the network capacity. Commissione.r Rogers moved to adjourn the meeting at 5:43 p.m. Commissioner Lautzenheiser seconded. Motion carried.

2 The next regularly scheduled meeting of the Information Technology and Communication Committee will be held on Thursday, March 3, 2016, at 5:00 p.m. or ten minutes following the adjournment of the Public Safety Committee meeting, whichever is later, in the Sheriffs Training Room located at 1025 Independence Blvd., Charlotte, MI Mike Hosey, Chairpt\son 2

3

4 Encryption Solution The HIPAA security plan as well as the CJIS policy guides require that communications need to be encrypted from sender to recipient. This was missed on the request I made for the use of Roll-Over money to fund non-budgeted projects last month. The Cyber Security Network Performance Monitoring software is a project that was defined in the Roll-Over funding. This was going to be purchased with a group of other applications as an add-on. The project is not as important to me as the Encryption Solution. I believe the Network Performance Monitoring Software can be requested again in next year s budget. The new HIPAA rules require this encryption and I feel that it is more important to implement this budget year than the Cyber Security Network Performance Monitoring Software. I would like to request a change to allow the purchase of the Encryption Solution this year. I contacted the other Michigan Government IT directors that belong to the Michigan Government Management Information Sciences (M-GMIS) organization about this. I asked for a list of criteria they used to define their choices in selecting an Encryption Solution. I also asked what choice of solution they made. I received 12 responses and have developed a criteria list from their advice as well as a few of our own. There were three solutions that they highlighted as what they use. Zix Mail, Brocade appliance and Cisco IronPort. The Cisco IronPort recently switch to use a hybrid version of Zix Mail that does only a portion of the full product. 9 of the 12 responders were using the full Zix Mail product. This made me more comfortable with the product. We decided that Zix Mail offered the most features and gave the best user experience over the other products. We looked at several other solutions, but decided not to focus on them, because they didn t meet enough of our criteria. The following table shows the Criteria we select and the results of our research. Manual and Automatic Encryption Can you mark an as encrypted and/or can the program identify is there is content in the that requires encryption. Policies for identifying data that requires encryption. Identify content of that may contain things like SSN, Account Number, Case Number, Offense Type, Patient Information, Drug Types, etc. Separate identification login Will the recipient be required to create a login and use this account to identify themselves each time they use the feature? What hardware/software will need to be installed? Identified as encrypted Can content be added to show that this is encrypted? Pricing structure Zix Mail Brocade Cisco IronPort Automatic & Manual Manual Manual Yes No No Yes No No A virtual server will monitor and encrypt s We would have to replace our Cisco ASA firewalls A virtual server will monitor if an has been marked for encryption. Yes No Yes $10,800 per year for up to 299 users $21,900 w/$1200 per year $18,450 w/$900 per year for maintenance

5 Executive Summary for Eaton County Zix Value Statement Zix provides outbound financial content filtering (DLP content scanning including attachments) that is the best in the industry as evidenced by Zix being the most used encryption solution in the healthcare, financial, and insurance verticals Zix provides automatic transparent inbox to inbox encryption to all other ZixCorp customers Superior TLS to connect transparently and securely to other business partners not part of the Zix network. Zix Reporting for encryption statistics and policy matching is the best on the market which again is used to prove compliancy in by our customers, including messages sent via TLS. The Zix mobile delivery experience is the easiest to use should your recipient need to pick up at your portal hosted via Zix versus the transparent delivery of Zix to Zix or ZixTLS to recipient TLS Your brand is fully shown on all pages of your secure messaging portal, including log in page for inbound secure via your partners Ease of implementation will free up resources to hit aggressive deadlines Zix provides the User Awareness Programs which greatly accelerates adoption of use for your encryption solution The ZixData Center is SOC 2, SOC 3, and PCI Certified/Compliant Zix is used by more than 1 in 4 banks in the USA, and lists the FDIC, FINRA, CFPB, SEC, OCC, and US Treasury as customers Business Impact Quick implementation (4 5 hours) means more time to focus on your critical business priorities End user transparency that leverages over 49 million public keys in the ZixDirectory Achieve compliance requirements and eliminates fines associated with non compliance Effective risk mitigation strategy through ecosystem Brand reputation enhancement on delivery/inbound portal Higher adoption by end users and minimized frustration with best in class recipient experience Reduced end user support costs through ease of use Services Discussed: ZixGateway policy based encryption for up to 299 or 449 users Content Scanning on entire domain Branded secure messaging portal (ZixPort) with compose, mobility, reply, etc. Transparent secure delivery to all other Zix customers and non Zix customers via TLS Branded User Awareness Program Zix Professional Installation ZixPort Gold level Support Administrator training deployment assistance Maintenance and help desk Comprehensive reporting with Dashboard Content filters (HIPAA, GLBA, SSN, Credit Cards, etc.) Zix Obligations Set Up Process: Zix will commit customer set up and configuration services to assist you in deploying and managing best practices for encryption services. Zix will assist with the following: Development and set up of service for encryption services On going Tier 2 and Tier 3 customer support for escalated issues

6 Training: Zix will provide remote training to your mail and security administration teams to maximize the effectiveness of the service Upgrade Notices: Notification of the availability of ZixGateway Upgrades and Releases will be provided to the Customer via posting on the ZixCorp website or by , fax or telephone. Support: ZixCorp Support is reasonably available to remotely assist Customers with the implementation of Service Upgrades and Releases at no charge or Customers may contract with ZixCorp s client services to perform on site implementations at ZixCorp s established rates. Documentation: Provide system documentation and access to on line FAQs

7 EATON COUNTY BOARD OF COMMISSIONERS Resolution of Tribute, Recognition, and Appreciation for MARSHA LORAINE SMALL Submitted by Eaton County Commissioner Howard T Spence Whereas the Eaton County Board of Commissioners is a public body recognized under the laws of the State of Michigan; and Whereas the Eaton County Board of commissioners develops and implements public policy for the benefit of the residents of Eaton County, and is responsible for the governmental oversight of public affairs and the welfare and benefit of residents of Eaton County; and Whereas Marsha Loraine Small was a long term resident of Eaton County who deceased in this county on November 3, 2015; and Whereas Marsha Loraine Small has a long and admirable history of community and public service both within Eaton County and also throughout the Greater Lansing, Michigan region; and Whereas Marsha Loraine Small has made many significant and valuable contributions to our community on various civic boards and agencies, including the Tri-County Regional Planning Commission, the Office for the Aging; and Whereas Marsha Loraine Small has served as a positive and valuable role model for many of the young people residing in Eaton County and throughout the area through the philanthropic work and scholarship encouragement - in particular through the contributions she made to her beloved Sorority, Zeta Phi Beta; and Whereas many in our county and community are indebted to Marsha Loraine Small for her energy, enthusiasm, excellent citizenship, compassion and concern for her fellow residents and their children; THEREFORE BE IT RESOLVED that this Resolution of Tribute and Appreciation be issued to the family of Marsha Loraine Smalls with the sincerest condolences and sympathy of the members of the Eaton County Community. By: Howard T. Spence Eaton County Commissioner Commissioner, Tri-County Regional Planning Commission

8 Certificate of Appreciation EATON COUNTY This is to certify that N AME OF RECIPIENT Is hereby awarded for outstanding service and contributions to the citizens of Eaton County, and is hereby honored and commended with my sincere appreciation for their years of service, dedication and commitment to improving the quality of life for the residents of the community. Signature Commissioner John Doe Date