Project Investment Justification Version 03.31.15 Project .
Project Investment JustificationVersion 03.31.15A Statewide Standard Document for Information Technology ProjectsProject Title:ADC Active Directory Change AuditorAgency Name: Dept. of Corrections.Date: 05/22/15Agency Contact Name: Jerry BabaAgency Contact Phone:Agency Contact Email:Hover for Instructions
I.Project Investment Justification (PIJ) Type*YesxNo Is this document being provided for a Pre-PIJ / Assessment phase?If Yes,Identify any cost to be incurred during the Assessment phase.Based on research done to date, provide a high-level estimate orrange of development costs anticipated for the full PIJ. Explain:Click here to enter text.YesII.xNo Will a Request for Proposal (RFP) be issued as part of the Pre-PIJ or PIJ?Business CaseA.Business Problem*ADC currently has no Active Directory account auditing tool capable of tracking,reporting and alerting when vital configuration changes to the Active Directory occur.The solution alerts of changes being made. One example is hackers. Once they start togain access they will create new accounts, add them to admin groups, etc. This wouldbe VERY difficult to track down without CA. ADC does have a high volume of accountsbeing created and being disabled for legitimate business.B.Proposed Business Solution*Acquire a consumer off the shelf (COTS) account audit and protection tool for ActiveDirectory capable of enhancing security by reporting who made changes when, whereand from which workstation the changes were made, eliminating risks associated withthese modifications.C.Quantified Benefits*xxService enhancementIncreased revenueCost reductionProblem avoidanceRisk avoidanceExplain:This software will protect Active Directory by tracking user and administrator activitywith detailed information on who, what, when, where, which workstation andwhy the change events occurred, plus, send alerts enabling faster response tothreats.PIJ Form 2015-03-31Page 2 of 6
III.Technology ApproachA.Proposed Technology Solution*Change Auditor for Active Directory is software that provides information on who,what, when, where, which workstation and why the change events occurred, plus,send alerts enabling faster response to threats.B.Existing Technology EnvironmentThere is currently no change auditing ability in the ADC Active Directory environment.Active Directory is currently used as the central identity management system at ADC, ADprovides network controlled access for users, devices, VPN, and URL filtering.C.Selection ProcessThis software solution is available from two vendors on state contract for the same typeof product. Varonis and The Dell Change Auditor were considered. The Dell ChangeAuditor cost per seat was less than 5% the cost of the competing vendor. Both solutionsoffered very similar features.IV.Project ApproachA.Project Schedule*Project Start Date: 6/1/2015B.Project End Date: 7/17/2015Project MilestonesMajor MilestonesOrder SoftwareReceive SoftwareAdminister SoftwareGo live and close out reportC.Start Date06/01/1506/08/1506/22/1507/09/15Finish Date06/05/1506/19/1507/08/1507/17/15Project Roles and ResponsibilitiesClick here to enter text.Robyn ZepedaPurchasing AgentJerry BabaProject ManagerRandy NewmanChief Security OfficerADC IT Staff will install the softwareV.Risk Matrix, Areas of Impact, Itemized List, PIJ FinancialsPIJ Form 2015-03-31Page 3 of 6
VI.Project ApprovalsA.Agency CIO/ISO Review and Initials Required*Key Management Information1. Is this project for a mission-critical application system?2. Is this project referenced in your agency’s Strategic IT Plan?3. Have you reviewed and is this project in compliance with all applicable Statewidepolicies and standards for network, security, platform, software/application, and/ordata/information located at https://aset.az.gov/resources/psp? If NO, explain indetail in section “VIII. Additional Information” below.4. Will any PII, PHI, or other Protected Information as defined in the 8110 StatewideData Classification Policy located at https://aset.az.gov/resources/psp betransmitted, stored, or processed with this project? If YES, the Protected Datasection under “VII. Security Controls” below will need to be completed.5. Will this project migrate, transmit, or store data outside of the agency’s in-houseenvironment or the State Data Center? If YES, the Hosted Data section under “VII.Security Controls” below will need to be completed.6. Is this project in compliance with the Arizona Revised Statutes and GRRC rules?7. Is this project in compliance with the Statewide policy regarding the accessibilityto equipment and information technology for citizens with disabilities?B.YesXXNo InitsXXXXXProject Values*The following table should be populated with summary information from other sections of the PIJ.DescriptionAssessment Cost(if applicable for Pre-PIJ)Total Development CostTotal Project CostFTE HoursC.SectionI. PIJ Type - Pre-PIJAssessment CostV. PIJ Financials tabV. PIJ Financials tabSee Hover text for FTE HoursNumber or Cost 50,413.65 50,413.65250Agency Approvals*ApproverPrinted NameProject Manager:Jerry BabaAgency InformationSecurity Officer:Randy NewmanAgency CIO:Dwight CloudProject Sponsor:Michael KearnsSignatureAgency Director:PIJ Form 2015-03-31Page 4 of 6Email and Phone
VII.Security ControlsCollaboration with the ADOA-ASET Security, Privacy and Risk (SPR) team may be needed to completethis section, which is only required for those projects that involve data that is Protected or Hostedoutside of the Agency or State Data Center. Additional information can be found in the NISTFRAMEWORK section under RESOURCES at https://aset.az.gov/resources/psp or you may wish tocontact ASET-SPR directly at secadm@azdoa.gov for assistance.A.Protected DataClick here to enter text.B.Hosted DataCheck here if the rols-excelspreadsheet is attached. Otherwise explain below what information/ support isneeded to complete the spreadsheet and/or why no sheet is attached:Click here to enter text.Check here if a Conceptual Design / Network Diagram is attached. Otherwiseexplain below what information/support is needed to complete the diagram and/orwhy no diagram is attached:Click here to enter text.VIII.Additional InformationPIJ Form 2015-03-31Page 5 of 6
IX.AttachmentsA.B.C.D.X.Vendor QuotesArizona Baseline Security Controls spreadsheetConceptual Design / Network DiagramOtherGlossaryOther Links:ADOA-ASET WebsiteADOA-ASET Project Investment Justification Information Templates and ContactsEmail Addresses:Strategic OversightADOA-ASET Webmaster@azdoa.govPIJ Form 2015-03-31Page 6 of 6
May 22, 2015 · of product. Varonis and The Dell Change Auditor were considered. The Dell Change Auditor cost per seat was less than 5% the cost of the competing vendor. Both solutions offered very similar features. IV. Project Approach A. Project Schedule* Project Start Date: 6/1/2015 Project E
May 14, 2011 · Budget Justification Best Practices . A budget justification is a narrative explanation of each of the components of the budget, which “justifies” the cost in terms of the proposed work. The explanations should focus on how each budget item is required to achieve the aims of the project and how the estima
investment, industry of investment, year of investment and stage of investment. The parameter estimates show California as a location for investment is significantly different in scale, industry and stage of investment from other states. The investment bubble of 1999 and 2000 is found to have created different patterns
KENWOOD TS-940 PAGE Version 2: 4 April 2005, Version 3: 25 April 2005, Version 4: 27 May 2005, Version 5: 31May 2005, Version 6: 10 June 2005: Version 7: 16 June 2005: Version 8: 25 July 2005Version 9: 30 July 2005. Version 10: 4 August 2005, Version 11: 13 Sep 2005, Version 12: 18 October 2005, Version 13: 23 October 2005,
Slide 5 Justification & Sanctification Yet another aspect of the proper distinction of Law and Gospel is the relationship between justification and sanctification. Justification is all about my vertical relationship with God. I am right with God for one reason – Christ! For Christ’s sake, I am pleasing to the Father.
Planning Justification Brief – 1621158 Ontario Ltd. (Emery Investments) 2 Purpose of Report The purpose of this lanning Justification P Brief is to outline the nature of the proposed plan of subdivision and to evaluate the proposal in the context of the policies of the Provincial Policy .
Doxastic Justification (DJ): S has a doxastically justified belief in p iff (i) S has . It’s hard to see that we actually do base our perceptual beliefs on any such independent justifications, whether or not it is in principle possible for us to do so. So the Conservative may be forced to accept the moderate skeptical claim that
1.8. Section 2 describes the principle of justification of practices given in the BSS, those types of practice already deemed not to be justified and the relationship between the justification principle and its sister principle of optimization of protection and safety. Section 3 defines the responsibilities of the relevant parties. Section 4 .
continue to meet with strategy groups and conduct shared reading and guided reading groups with a focus on print strategies and fluency based on students [ needs. **Although the unit details 22 sessions, this unit could easily utilize 6 weeks of instruction within the reading workshop.
