MHBE Board Meeting October 16, 2017 IT Update Presented by: - - PowerPoint PPT Presentation
MHBE Board Meeting October 16, 2017 IT Update Presented by: - - PowerPoint PPT Presentation
MHBE Board Meeting October 16, 2017 IT Update Presented by: Venkat R. Koshanam, CIO, MHBE Greg Yaculak, CISO, MHBE Agenda 1 IT Outlook 2 Open Enrollment Readiness 3 Cyber Security Strategy 4 Salesforce Licenses Review Akamai
Agenda
IT Outlook
1
Open Enrollment Readiness
2
Cyber Security Strategy
3
Salesforce Licenses Review
4 5
Akamai Procurement
IT Outlook
11/01/2017 – 12/15/2017 Open Enrollment Period
SEP OCT NOV JAN FEB
9/22: Release 19.0 >Java Upgrade >Provider Directory Enhancement
DEC
2017 2018
9/29: Release 19.1 >Mobile Push Notification >Plan Upload, Anonymous Browsing, Renewals and OE changes 10/15: >Complete QHP Auto- Renewals > OE Testing 10/06: Release 19.1.1 >OE Fixes Release SFR 3.0 >SF PROMIS
Code Freeze
01/26: Release 20.0 >MA Enhancements 01/31: >1095-A/B
Open Enrollment Readiness
IT Command Center
- Hosted at MHBE Linthicum Office
1
Infrastructure & System Operations
- Capacity Improvements
- Database, Content Management & Security Stack Upgrade
- Akamai Waiting Room
2
Applications & Testing
- Applications Tuning, OE Enhancements and Fixes
- Load Testing, OE Time-travel Testing, OE Day 1 Validation
3
Carrier Management
- Data Reconciliation
- QHP Auto-Renewals
4 5
Reporting
- CMS Daily/Weekly Reports and touch-point calls
- Executive and Stakeholder Reports
MHBE Cyber Security Framework
MARS-E version 2.0 (Minimal Acceptable Risk Standards for Exchanges) Published November 10,2015 Replaced MARS-E version 1.0 (published August 1, 2010) Influential Regulations affecting MARS-E version 2.0 National Institute of Standards and Technology (NIST) Special Publication (SP) 800-53 Rev 4 Added a catalog of Privacy Controls Consistency with Department of Health and Human Services ACA Regulations (45 CFR §§155.260 and 155.280) Revised IRS Publication 1075 changes
MHBE Security Compliance
Compliance with CMS and IRS Regulations Plan of Action and Milestones (POA&M) Privacy Impact Assessment (PIA) Information Security Risk Assessment (ISRA) Interconnection Security Agreement (ISA) Internal Revenue Service – Safeguard Security Report (SSR), Safeguard Review Report (SRR), Corrective Action Plan (CAP) Security Compliance Audit (SCA) / Security Assessment Report (SAR) Computer Matching Agreement (CMA) System Security Plan (SSP) Annual Attestation (AA) Information Exchange Agreement (IEA) Authority to Connect (ATC)
Salesforce Licenses
Salesforce License Description Quantity Salesforce Service Cloud Enterprise Edition Customer Resource Management (CRM) Solution and Learning Management System (LMS) Internal Users 400 Customer Community 20,000 Logins Per Month LMS CAW Users, MHBE Timesheet users 1 Partner Community 100 Members MDH LHD Users and MCO External Users 2 Salesforce Knowledge MHBE Knowledge Base Solution Managers 20 Salesforce Full Sandbox Replica of Production Environment Including Data to Act as Staging Environment 1 Salesforce Government Cloud Hosting Salesforce solutions on Government Cloud 1 Salesforce Marketing Cloud (SFMC) Exact Target - Corporate Edition Additional Contacts - Corporate Edition Super Messages Exact Target Premier Success Plan 1 495 30,000 1