Infrastructure and Operations Strategic Plan

Infrastructure and Operations Strategic Plan

    Add a header to begin generating the table of contents

    SUMMARY

    The Infrastructure and Operations department is responsible for several enterprise-wide systems and services for the district and includes the following units:

    • Platform Services
    • Physical Security
    • Unified Communications
    • Cybersecurity

    From a network perspective, the department provides wired and wireless intranet, filtered internet, and secure extranet access for every networked device in all district locations.

    From a server perspective, the department provides secured compute and data storage services for all enterprise applications, virtual desktop infrastructure, and staff and group file storage.

    From a telecommunications perspective, the department provides management and support of all telephones, leased telephone lines, voice mail, the district’s Voice over IP (VoIP) system, and the enterprise fax service.

    From an audio/visual perspective, the department provides management, repair and support of all audio/visual equipment, including all Public Address (PA) systems, televisions, and laminators. This includes technical consultation and hands-on assistance with setting up equipment for events.

    Network Infrastructure

    Goal 1

    Provide a robust wireless infrastructure and ubiquitous user experience that is highly accessible, easily maintained, and secure.

    Outcome:

    • Elimination of centralized wireless routing and single points of failure for wireless traffic at targeted locations.

    Outcome:

    • Enable new features, enhancements, and security capabilities within the wireless management system and increasing efficiency and security of wireless infrastructure.

    Outcome:

    • Increase wireless network security and eliminate unauthenticated access to all district resources.

    Goal 2

    Implement a district-wide fiber optics WAN infrastructure to increase bandwidth and scalability and improve redundancy and resiliency, while decreasing operational costs.

    Outcome:

    • AISD locations have access to increased bandwidth and improved WAN redundancy, increasing connectivity speeds and reducing unplanned outages.

    Outcome:

    • AISD locations receive a more robust WAN network with multiple redundant paths, greater scalability, and increased bandwidth capability.

    Goal 3

    Leverage the E-Rate program to perform upgrades of district wired and wireless infrastructure at various schools and district locations.

    Outcome:

    • Network and wireless infrastructure upgrades are complete at targeted schools.

    Outcome:

    • School Board approves E-Rate RFP funding bid proposal and request is submitted to USAC for funding approval.

    Platform Infrastructure

    Goal 1

    Provide a highly available, scalable platform infrastructure that meets current and future needs of the district and leverages modern technology architectures.

    Outcome:

    • Server patch management is highly automated, decreasing manual patching cycles intervention requirements with more intuitive reporting and insight.

    Outcome:

    • A recommendation to purchase is made to acquire infrastructure that re-envisions existing Data Center architecture to be more scalable, modernized, and take advantage of emerging technologies and opportunities available to meet current and future needs of the infrastructure district.

    Goal 2

    Provide high-end, accessible virtual endpoints and workstations for students to support specialized and hybrid learning scenarios.

    Outcome:

    • Targeted CTE courses will have high-end virtual workstations available to all CTE students to run required graphics intensive, high-end software packages needed for coursework and certification.

    Outcome:

    • Existing load balancing infrastructure will be evaluated, and a recommendation has been presented to Senior Technology Staff.

    Outcome:

    • Existing virtual workstation Antivirus software will be evaluated, and a recommendation has been presented to Senior Technology Staff.

    Goal 3

    Augment and enhance existing Disaster Recovery strategy to ensure Business Continuity across Tier 1 and Tier 2 technology platforms.

    Outcome:

    • As a result, the new backup infrastructure will be more highly automated, will decrease the need for constant oversight, manual configuration, intervention, and recovery, will provide stakeholders with more intuitive and insightful reporting, and will provide a more robust architecture to protect against data loss and corruption.

    Outcome:

    • Server and Platform infrastructure disaster recovery procedures and strategies are routinely tested and measured against industry best practices and standards with status reports presented to Senior Technology Staff.

    Outcome:

    • Both data centers are independently monitored by environmental tools and hardware that are managed by IT staff, and immediately alert IT staff to any environmental abnormalities.

    Outcome:

    • Data Center UPSs are routinely monitored and serviced by a third party to preserve infrastructure integrity in the event of a disaster or outage; new batteries are purchased to replace aging ones for approximately 30 – 40% of existing UPS hardware.

    Goal 4

    Implement file and email data retention rules and policies as established by Records Management and Legal departments.

    Outcome:

    • All data storage platforms are configured with data retention settings that are aligned with state and local guidelines.

    Goal 5

    Research and develop strategies to offload home folders and local data storage shares to existing online platforms that allow for secure, remote file accessibility.

    Outcome:

    • File share data resides on Data Domain and Isilon and is presented to user stakeholders to provide a more robust and more easily managed data storage platform infrastructure to users.

    Outcome:

    • User home folder data resides on a more resilient cloud-based storage platform, data is accessible anywhere and on any compatible endpoint device.

    Outcome:

    • The server footprint is reduced to free up resources that can be reallocated as needed to support future initiatives; the overall vulnerability footprint is reduced, improving manageability, reducing licensing costs and system complexity.

    Outcome:

    • Locally stored data can be accessed remotely across any compatible endpoint device in a more secure and manageable way.

    Cybersecurity

    Goal 1: PROTECT

    Develop and implement appropriate safeguards to ensure delivery of critical services.

    Outcome:

    • Server environment is more secure and server hardening measures align with security and industry best practices, reducing the overall vulnerability of AISD’s infrastructure.

    Outcome:

    • All authorized remote access use now aligns to a district-adopted Remote Access Policy, and authorized users use MFA for remote access.

    Outcome:

    • All AISD staff receive Cybersecurity awareness training communication and are routinely phished to determine overall district Cybersecurity competency.

    Outcome:

    • Critical AISD infrastructure will be protected within a De-militarized Zone (DMZ) which provides more flexibility and increased security when deploying infrastructure to the perimeter.

    Outcome:

    • All AISD staff and students participate in an established password security policy and practice that aligns with industry standards and best practices.

    Outcome:

    • DLP policies have been created and adopted by AISD district leadership.

    Outcome:

    • All privileged accounts are centrally managed and routinely audited for QA.

    Outcome:

    • New vendor requests and onboarding follow established procedures and guidelines approved by the district.

    Goal 2: IDENTIFY

    Develop an organizational understanding to manage cybersecurity risk to systems, people, assets, data, and capabilities.

    Outcome:

    • A Vulnerability Management Program is adopted and is vulnerabilities are periodically reviewed by relevant team members.

    Outcome:

    • DLP policies have been created and adopted by AISD district leadership.

    Goal 3: RESPOND

    Develop and implement appropriate activities to take action regarding a detected cybersecurity incident.

    Outcome:

    • The district has adopted an Incident Response program that aligns to the Texas DIR framework.

    Goal 4: DETECT

    Develop and implement appropriate activities to identify the occurrence of a cybersecurity event. 

    Outcome:

    • Active Directory and Azure environment systems are monitored and logs are saved and reviewed on a periodic basis.

    Unified Communications

    Goal 1

    Create, organize, and consolidate documentation for all Telephony and Unified Communications systems.

    Outcome:

    • All Unified Communications departmental documentation is stored in a centralized, online repository that can be accessed anywhere from any device.

    Outcome:

    • End user support documentation has been created and uploaded to the self-service portal to help users self-troubleshoot and resolve issues.

     

    Outcome:

    • All PA systems have been documented and housed in a centralized repository.

    Goal 2

    Research the efficiency of existing systems to identify needed changes and improve end user experience.

    Outcome:

    • Existing SOP procedures and avenues of support have been evaluated and reported to Technology Senior Leadership for review.

    Outcome:

    • Team members receive daily and weekly reports that outline team productivity and response metrics.

     

    Outcome:

    • Users are presented with a more streamlined interface for submitting UC-related requests for support.

    Outcome:

    • The current email environment has been audited by a third-party engineer and recommendations have been presented to technology staff.

    Goal 3

    Upgrade existing Unified Communication infrastructure systems.

    Outcome:

    • Seguin HS has a new, modernized, and integrated PA system. The listed schools have a new, modernized, and integrated PA system.

    Outcome:

    • Old, outdated handsets have been refreshed at Arlington HS.
    • Old, outdated handsets have been refreshed at the listed schools.

     

    Goal 4

    Develop District standards for Unified Communications.

    Outcome:

    • AISD technical support personnel have been trained on troubleshooting methods and configuration for various PA systems that are installed in the district.

    Outcome:

    • Technology leadership has been presented with requested training opportunities for technical staff members.

     

    Outcome:

    • Technology leadership has been presented with requested training opportunities for technical staff members.

    Physical Security

    Goal 1

    Provide a modern, robust video surveillance infrastructure environment to enhance the safety and security of the district.

    Outcome:

    • All Phase 1 sites utilize a more robust video surveillance system and an improved and enhanced camera infrastructure.

    Outcome:

    • All Phase 2 sites utilize a more robust video surveillance system and an improved and enhanced camera infrastructure.

     

    Outcome:

    • All Phase 3 sites utilize a more robust video surveillance system and an improved and enhanced camera infrastructure.

    Outcome:

    • All Phase 4 sites utilize a more robust video surveillance system and an improved and enhanced camera infrastructure.

    Outcome:

    • All Phase 5 sites utilize a more robust video surveillance system and an improved and enhanced camera infrastructure.

    Outcome:

    • All Phase 6 sites utilize a more robust video surveillance system and an improved and enhanced camera infrastructure.

     

     

    Outcome:

    • All SPED sites utilize a more robust video surveillance system and an improved and enhanced camera infrastructure.

    Outcome:

    • Berry, Jones, and Shackelford schools are converted to the new video surveillance system and are using a more robust and reliable security infrastructure.

    Outcome:

    • All schools with legacy cameras will utilize a more robust and reliable video surveillance system.

    Goal 2

    Provide each location with a modernized, fully integrated, access control system to establish more secure perimeter protection at buildings and campuses.

    Outcome:

    • All Phase 1 locations will utilize a more robust access control system that is fully integrated with the video surveillance system.

    Outcome:

    • All Phase 2 locations will utilize a more robust access control system that is fully integrated with the video surveillance system.

     

    Outcome:

    • Planning and evaluation will be complete for all Phase 3 locations to prepare for new access control system integration.

    Goal 3

    Evaluate and document the district’s existing emergency radio communication systems and train appropriate staff to continue its support.

    Outcome:

    • IT Security has current, relevant documentation of existing radio communication systems that is stored in a centralized documentation repository.

    Outcome:

    • End user troubleshooting and support documentation is published and available for system users in the IT support portal.