ANNUAL REPORT 2022-2023 INFORMATION TECHNOLOGY AND COMPUTING SERVICES

The ITCS Project Management Office (PMO) continues to streamline project delivery and initiatives at ECU. Working collaboratively with cross-campus departments and talented ITCS technical professionals, the PMO aims to provide project onboarding, guidance, support, coordination, monitoring, and reporting.

2023 Projects Completed by Classification (Run, Grow, Transform)

Developed by Gartner, the Run-Grow-Transform model supports IT planning and investment in IT products and services. Projects classified as “Run” maintain essential day-to-day business functions and capabilities. “Grow” projects enhance or expand existing IT systems in support of business growth. “Transform” projects are often innovative and focus on expansion into new markets or audiences.

Former ECU Student Employees . . . Now Full-Time ITCS Professionals!

We Value Our Current Student Employees!

Information Security Student Internships Completed

Redeveloped Security Awareness Training

ECU policy requires all employees to complete information security awareness training. The university's designated course to meet this biennial training requirement was substantially redeveloped over the year and was published in Cornerstone in July. Course content was revised throughout, including new learning content related to spear phishing, remote work best practices, and clean desk policy, and a new course assessment was created. The overall design was revamped, with emphasis on meeting ADA compliance. Audio narratives will now provide an alternate representation of text.

Cyber Security Incident Response Tabletop Exercise

The Information Security Office facilitated a Cyber Security Incident Response Tabletop Exercise involving subject matter experts from many ITCS teams. The exercise simulated a real world cyber threat scenario, and allowed participants the opportunity to examine, practice, and test response and recovery functions related to a cyber incident targeted against university IT systems and data. An After Action Report was developed and shared with participants and ITCS leadership.

GLBA Revised Safeguards Rule Requirements

ITCS implemented a project focused on the GLBA (Gramm–Leach–Bliley Act) Revised Safeguards Rule requirements, led by a project manager, with project team members including the Chief Information Security Officer (CISO), Chief Audit Officer, and multiple data stewards. The project team oversaw actions to meet new compliance requirements, including facilitating a data inventory with departments to determine what data is collected and where it is stored. This was followed by a risk assessment with involvement by departments to examine administrative, technical, and physical safeguards, how safeguards are monitored, and whether they're considered sufficient. New GLBA training was published in Cornerstone and a new GLBA website article with guidance for campus was developed and linked to the University Data Governance website.

Security Assessments by Third-Party Consultants

A trusted third-party consultant conducted several security assessments to provide ECU with an objective evaluation of the university's security posture, what weaknesses are present, how we stack up against best practices, and what things may need to be changed to better protect ECU against sophisticated cyber threats. Actions and remediation in response to the assessments will be part of an ongoing IT risk management project in FY24.

Secure Research Enclave

A secure enclave was established in Azure Gov space. The project was based on meeting a use case with Coastal Studies Institute that required a virtual infrastructure that met NIST 800-171 compliance, and researchers involved with that sponsored study are now utilizing the new secure enclave. Besides meeting the needs for this particular use case, the solution in Azure (based on Compliance Island) provides a proof of concept for potential future research needs. Presentations were delivered to colleagues from Research, Economic Development, and Engagement (REDE) and researchers involved with defense-related studies.

Phase 1 of Adopting MITRE ATT&CK Framework

The Information Security Office developed a proof of concept for leveraging the MITRE framework to enhance cyber resiliency. Work will continue over the next year to refine use cases for threat intelligence, attack detection, incident response, and vulnerability management programs.

Phishing Simulation Implementation and Monthly CISO Campus Security Outreach

The university's InfoSec IQ phishing simulation implementation was refined, including incorporation of security awareness content for remedial training, and tracking phishing rates over time. A monthly CISO email blast outreach to campus focused on highlighting security awareness training on a variety of topics, and featured Infosec IQ learning content integrated into Cornerstone.

Technology Security Assessment

The Technology Assessment Team grew in the number of members providing their expertise toward our TSA processes. Improvements in processes included revision of assessment instruments used, with updated scoring and questions optimized, and a tracking spreadsheet now monitors workflow. The team collaborated with data stewards to update compliance questions and worked to ensure smoother integration with Risk Acceptance processes.

SIEM Steering Committee

The former SIEM Steering Committee was revived to provide a broad group of subject matter experts to examine SIEM use cases and provide advice on SIEM needs assessment.

Leveraging Cisco Secure Endpoint for Lab Computers

The Cyber Security Operations Center (CSOC) helped to facilitate moving lab computers from an Audit only to Protected group setup, powered through new group policy, with an upgraded software agent running on all non-server endpoints.

Enterprise Backup Refresh

This year, ITCS assessed our existing enterprise backup infrastructure which was due for a hardware replacement and is engaged in a major replacement project. The initiative is significant in that not only will it deliver enhanced ransomware protection capabilities for our enterprise level backups, but the new architecture translates into significant yearly cost savings that essentially pays for the entire cost of the replacement over 5 years.

Progress with Vulnerability Management Processes

CSOC's charge includes facilitating the university's vulnerability management processes, focused on leveraging the security tool Rapid7 InsightVM. Over the course of the year, the Rapid7 Risk Score showed an improvement of a 28.4 percent decrease.

Improved Access Review Process

Reviewing access to information systems is a critical task that is needed to protect ECU data. In 2022, the Enterprise Information Systems (EIS) Xtender and Banner Security team worked closely with the ITCS Enterprise Data Services team and university data stewards to develop a new, standardized process for reviewing access to the University’s ERP and enterprise document imaging system. The new procedure streamlined the review process for data stewards while making the review more user friendly for supervisors.

CourseFIT

The Learning Technologies team continues to support ECU’s annual CourseFIT Institute sponsored through the Office for Faculty Excellence. This program allows faculty members from across campus to rebuild or revise a course that they will submit to Quality Matters (QM) for a chance at having their course certified.

During a week-long retreat, the Tech Training team supports and trains faculty on various technologies that are integrated with Canvas to allow these faculty to use these to their fullest to support teaching and learning. Additionally, course consultations focusing on instructional design and best practices for teaching online were provided to the faculty.

Technology Spotlight: H5P

H5P is an open-source, interactive content builder that makes creating, sharing, and reusing HTML 5 content within Canvas. This software is used by faculty to create interactive learning activities that engage students both inside and outside the classroom and allows students to practice the skills they are learning prior to a major assessment.

Microsoft Purview Data Governance Update

Enterprise Data Management Support Services (EDMSS) implemented the Metadata system Microsoft Purview in late 2022 and has begun the process of ingesting several of the most utilized data sources, like Banner and ODS, with additional sources planned. To date, over 371,000 metadata assets have been added to the data catalog. EDMSS also met with Data Stewards, data teams, and user groups to curate items in the Purview data catalog and enrich the business glossary. The glossary provides business term definitions that are used throughout the university. Over 400 terms have been added to the business glossary and includes contact information for the person(s) responsible for the term.

User Access Control Policy Update

The Enterprise Analytics team has created a series of reports to ensure compliance with the User Access Control policy. These reports notify supervisors and module owners at ECU about the security classes their employees hold for Banner, ODS, and Xtender. It is the responsibility of supervisors and module owners to review these classes and grant approval if they align with their employees' current job responsibilities. These approval processes take place twice a year and are crucial for maintaining the assigned security access for users.

Board of Governors at ECU and SACSCOC Accreditation Support

ECU hosted the Board of Governors (BOG) of the UNC System in our Main Campus Student Center (MCSC) in November 2022. ECU also hosted the Southern Association of Colleges and Schools Commission on Colleges (SACSCOC) On-Site Committee Visit in March 2023. SACSCOC is the body for the accreditation of degree-granting higher education institutions in the Southern states. ITCS Desktop Support East and AV Services and Support teams were tasked with supporting both visits. Both groups and sponsors raved about the support they received from our team!

Admitted Student Checklists

Receiving an ECU admissions acceptance offer can be an exciting moment for new Pirates, but it is also the beginning of a process that admitted students must complete prior to attending classes. Between joining the crew and mapping their voyage, an admitted student must complete a list of tasks prior to enrolling. In 2022-2023, the EIS New Technology Development Group assisted with this process by developing Admitted Student Checklists. Now, students can login to PiratePort to view a list of outstanding items that must be completed, view optional checklist items that may help, and track their progress by checking off items as they are finished.

Degree Works Update with a New Responsive Dashboard

Students and academic advisors use Degree Works to create degree plans and map the best academic pathway for students. Over the 2022-2023 year, the EIS Banner team worked in conjunction with the Registrar’s Office and several teams across ITCS (Enterprise Data Services, Enterprise Systems and Operations, Network Services, Client Engagement and Support) to upgrade Degree Works to a modern, responsive user interface. The new Responsive Dashboard provides a mobile friendly student dashboard with a clean look that displays across different devices, is American with Disabilities Act (ADA) compliant for accessibility, and has lots of new features.

Virtualization and Hardware Consolidation Initiatives

ITCS continues to accelerate and execute its strategy to consolidate hardware and drive virtualization to deliver operational efficiencies and generate cost savings. This year, ITCS was able to consolidate and decommission 50% of the hardware in one of our legacy blade infrastructures. Also, ITCS migrated our Banner application tier to our Virtual infrastructure thus saving over $280K on hardware replacement cost.

Operating System Upgrades

A large number of the university’s applications run on Microsoft Windows Server Operating Systems. As new versions of the OS are released Microsoft establishes end of support dates on older versions and thereby requiring organizations to migrate to newer versions for continued support and patching. This past year, ITCS Enterprise Systems and Distributed IT staff completed replacements for 115 servers.

Enterprise Application Upgrades

ITCS supports a vast array of applications that drive student success and are critical to the day to day functioning of the university. This past year, the Enterprise Applications team working with Enterprise Information Systems upgraded a multitude of core applications including Degree Works, Kronos, Citrix, Asset Works, and many others to deliver the latest enhancements and to stay current on vendor supported software versions.

Transition to Microsoft Endpoint Manager

ITCS completed the transition to the unified management platform Microsoft Endpoint Manager which includes a suite of powerful services and tools including Microsoft Intune and Configuration Manager. Endpoint Manager includes the services and tools we can use to manage and monitor mobile devices, desktop computers, virtual machines, embedded devices, and servers. Configuration Manager grants ECU faculty and staff access to key applications they need to remain productive, while also giving administrators the proper tools that they need to protect sensitive corporate information. Intune is a 100% cloud-based mobile device management (MDM) and mobile application management (MAM) provider for ECU’s apps and devices. It lets us control features and settings on Android, Android Enterprise, iOS/iPadOS, macOS, and Windows 10 devices. Project accomplishments include completion of extensive MS training for staff, build-out of servers, analysis of KACE to replace current jobs, completion of MS onboarding accelerator, creation of firewall boundary groups, transitioning of windows patching for all of campus and replacement of WSUS.

Classroom Inventory Project and Dedicated Funding

The AV Services and Support team completed an exhaustive inventory of all classrooms on campus, documenting 12,525 pieces of equipment. They also received new annual funding earmarked for the maintenance and support of ECU Classrooms.

Annual Computer Refresh

Computer Refresh Program is run by ITCS's Service Management team each year. The computer replacement/retirement program provides faculty and non-faculty staff with one (1) primary computer replacement for devices that are five (5) years old or older. The device utilizes centrally-supported systems including computer patching, active directory, encryption, vulnerability scanning and mobile device management where applicable to ensure the university meets its goals related to computer standards, information security, and cost management. The Fiscal Year Campus Computer Refresh totaled 1,084 computers ordered between Main Campus/East (815) and West/BSOM (269) which was a record number. The Service Management team also worked with departments to create a new Campus Refresh Database to increase efficiency of forecasting and ordering. Our goal is to be able to offer multi-year forecasting and increase speed and accuracy of refresh. Also, the team is reaching out to departments for feedback on improving satisfaction and continuous improvement of our program.

Annual Network Refresh

Each year, ITCS replaces network equipment to maintain the network infrastructure and increase network performance. Below is a summary of what was completed this past year:

• Increased bandwidth capacity for 58 switches from 1gb to 10gb switch uplinks improving bandwidth capacity throughout the network.
• Replaced 52 network switches in 21 buildings.
• Improved wireless network capacity by replacing older models with new access points that support up to 5gb bandwidth for increase in wireless network performance. ITCS maintains 843 total access points.

Firewall Hardware Replacements

These network security systems provide enterprise-wide network security through control of incoming and outgoing network traffic between and within ECU's network. These systems also provide faculty, staff, and students remote access to ECU resources. Intrusion prevention and detection systems are installed at the network edge to protect the enterprise from external threats. In addition, the systems are utilized to block known malicious, blacklisted, and P2P traffic.

Wired Network Access Control - Phase III

The purpose of this project is to implement Network Access Controls throughout ECU’s wired network. This provides greater visibility into devices on ECU’s network and increases security from malware and other malicious traffic. Additionally, this provides an access control mechanism that will require users to authenticate to ECU’s network thereby preventing unauthorized access to ECU resources. In Fiscal Year 2023, 802.1x authentication was applied to switches in 53 buildings across campus.

F5 Hardware Refresh

The F5 Hardware Refresh was completed this year to position ITCS for future growth, minimize administrative workload, and provide new security features including Advanced Web Application Firewall services and automated threat detection feeds. This solution provides services for application delivery and control through the use of load balancing, application and delivery controllers, and web application firewalls.

Uninterruptible Power Supply (UPS) Refresh

This year, ITCS completed 97 UPS updates in 60 building locations to help maintain continuity of power for network switches and power over ethernet devices such as access points and phones. The UPS provides power coverage for brown outs and brief power outages preventing the equipment from being damaged due to fluctuation in power and power loss.

ITCS staff continually hone their skills and expertise through a variety of professional development activities each year. This past year, several individuals obtained or renewed certifications and completed degree programs:

Client Engagement and Support

Tony Cooke, Chad Waters, awarded Extron AV Associate Certification

Jeremy Smith, awarded Extron AV Associate and Extron Control Specialist Certifications

Andy McGrail, awarded Extron AV Associate, Extron Control Specialist, and Crestron Programming P201 Certifications

Kristen Byrum, Adam Brewer, awarded CAPM (Certified Associate in Project Management) Certification

Julie Evans, awarded (CBAP) Certified Business Analysis Professional Certification

Ryan Kerry, David Creech, awarded Department of Defense Controlled Unclassified Information Training Certificate (DOD CUI Training)

Beth Breidigam, awarded Jamf 300 (Jamf Certified Admin) and ITCS PMO Project Management Certifications

Brian Davis, awarded Security+ and Jamf 300 (Jamf Certified Admin)

Kara Ousley, awarded Jamf 300 (Jamf Certified Admin)

Shelton Davis Jr., awarded ITCS PMO Project Management Certification and Dell Hardware Certification

Perry Vinson, awarded Dell Hardware Certification

Gustavo Zuniga, awarded ITCS PMO Project Management Certification

Nate Saunders, renewed CompTIA A+ certification and nominated for Student Supervisor of the Year

Darius Smith, nominated for Student Supervisor of the Year

Brianna Roberts, awarded Masters of Business Administration (MBA)

Vu Nguyen, awarded Masters in Network Technology: Information Security

Enterprise Data Services

Sarah Manley, ITCS PMO Project Management Certificate, awarded February 2023

Scotty Stroup, Masters degree, ECU Network Technology, awarded Spring 2023

Enterprise Information Systems

Matt Smith, Ronda Stroup, Mary Frances Stalls, Chris Finch, Devin Dotson, Kiara Barias, Patrick Dalton, awarded Adobe ColdFusion Certification

Enterprise Systems and Operations

Paul Raby, Gary Martin, F5 Advanced WAF Training completed

Jonathan Rose, awarded EDUCAUSE Senior Directors Institute Micro-Credential

Cloud Initiative

Cloud computing has been a hot topic and a driving force for change in the IT industry for several years. This year, ITCS created a Cloud Adoption Team to explore how cloud computing could benefit ECU’s overall IT strategy and how it could deliver new value and opportunities for ECU’s core research and education mission. The Cloud Adoption Team laid the groundwork for ECU’s cloud architecture in the Microsoft Azure cloud, which allows us to begin moving workloads into Azure and making it available for use by other campus departments. The Cloud Adoption Team, implemented a Secure Enclave in Microsoft Azure Government to allow researchers with Department of Defense grants or contracts to perform their work in compliance with Department of Defense security standards. And the team spent time evaluating Oracle’s cloud offering as a possible location for running ECU’s Oracle databases in the future. The future of cloud computing at ECU looks bright, and we’re excited to move our capabilities forward in the next fiscal year.

ECU Homepage to WordPress and Pantheon

The ECU homepage (www.ecu.edu) serves as the front door for the university and is frequently used to share information with Pirate Nation. It is critical that ITCS work to maximize the website’s up-time while being good stewards of our resources. In December 2022, the EIS Web Services team led the effort to move ECU’s homepage to the cloud. This transition assisted with university business continuity by guaranteeing 99.99% availability.

Computational Research and High-Performance Computing Initiatives

Demand for computational resources to support research across campus continues to accelerate. This year, ITCS has been engaged in several initiatives to offer multi-faceted options. Working with REDE, ITCS secured funding for a computational research pilot program that leverages Microsoft’s Azure and takes advantage of the NC HPC (High Performance Computing) Partner Program to provide near-term compute resources to campus researchers. These initiatives provide the possibility of future expansion depending on the outcomes of those pilots. Also, the Enterprise Linux team collaborated with select researchers to define workloads and worked extensively with top research computing vendors to draft architectural reference designs with budget projections for a universal campus solution. The goal is to offer a multitude of flexible options that empowers the ECU research community.