Department of Administration

Goals

Update: Protected citizen's data and provided a secure computing environment for the State to conduct business and deliver services to our citizens.

Objectives

  • Implement system governance strategies and industry best practices, including ITIL frameworks.
    Update: The information security program utilizes frameworks and methodologies to align objectives with business needs; allocate the people, processes, and technology supporting the program; and monitor the effectiveness of the program. The information security program is based on the NIST Cyber Security Framework and the NIST Risk Management Framework and is enhanced through the implementation of best practices as recommended by the MT-ISAC Best Practices Workgroup and adopted by the CIO.
  • Provide and promote transparency in IT security operations.
    Update: The information security program facilitates the collaboration of public/private partners to evaluate potential enterprise security technologies. The program provides visibility to each agency to enhance their capabilities to protect, detect, and respond to threats against their information systems. The CISO holds monthly meetings with all agency information security officers to discuss current priorities and projects, and to collaborate on common challenges.
  • Engage with CIO to determine optimal long-term security strategies and system security plans.
    Update: Strategic security objectives are defined and implemented to achieve business goals and mature the information security program. The CISO reviews the strategic plan with the CIO to ensure alignment with technology roadmaps and financial plans and to update the security strategic plan based on technical and financial changes. Various models and methodologies are utilized to assess and optimize the information security program and its objectives.

Update: SFSD worked with MDT to add additional modules to SABHRS relying
on the existing infrastructure and staff. State HR made Oracle LMS
available to agencies and was used for the statewide cyber security training.

Objectives

  • Utilize IT in a manner that aligns with the State’s strategic IT goals.
    Update: DOA has worked to be early adopters in new technology that aligns with the State's strategic plan striving to model technology implementation that other departments can use. Due to the diverse nature of services delivered by DOA divisions to other agencies we are able to develop new solutions the drive alignment to the State's strategic plan.
  • Leverage existing system capabilities to deliver enhanced functionality to customers.
    Update: The department used it's core systems SABHRS, gov delivery, ServiceNow and Microsoft O365 to deliver additional services to it's customers over the last two years.

Update: DOA continues to drive enterprise class services to it's customers in a start small and scale out process using state of the art systems, products and vendors while striving to limit the use of legacy technology in all areas of the department where possible.

Objectives

  • Deliver and promote best of class Enterprise services to partners.
    Update: DOA completed a rebranding effort across the division including standardized gov delivery templates that are used by DOA divisions to advertise it's services.
  • Implement scalable technology that meet customer demands.
    Update: The department deployed multiple services starting small and scaling out to customers including, additional services in SITSD's private cloud, ServiceNow, GSD document scanning services, GSD printer and copier contract.
  • Evaluate and enhance or replace legacy systems.
    Update: The department completed it's move off the mainframe for application services and application integration services. We also completed the transition off Oracle forms and reports, moving to modern .Net systems.
    As skype for business neared end of life DOA was the first agency to move fully to teams.

Agency Contact Information

Agency Director / Administrator
John Lewis
406.444.3033
JohnLewis@mt.gov
PO Box 200101, Helena, MT 59620
Information Technology Contact
(CIO / IT Manager)
Tim Bottenfield
406.444.2700
Tim.Bottenfield@mt.gov
PO Box 200113, Helena, MT 59620
Information Security Manager
Andy Hanks
406.444.9127
Andrew.Hanks@mt.gov
PO Box 200113, Helena, MT 59620