MHBE Board Meeting October 16, 2017 IT Update Presented by: - PowerPoint PPT Presentation

MHBE Board Meeting October 16, 2017 IT Update Presented by: Venkat R. Koshanam, CIO, MHBE Greg Yaculak, CISO, MHBE

Agenda 1 IT Outlook 2 Open Enrollment Readiness 3 Cyber Security Strategy 4 Salesforce Licenses Review Akamai Procurement 5

IT Outlook 2018 2017 FEB JAN DEC OCT NOV SEP 01/26: 9/22: 10/06: 11/01/2017 – 12/15/2017 Release 20.0 Release 19.0 Release 19.1.1 Open Enrollment Period >MA Enhancements >OE Fixes >Java Upgrade 01/31: Release SFR 3.0 >Provider Directory Code Freeze >1095-A/B >SF PROMIS Enhancement 9/29: Release 19.1 10/15: >Mobile Push Notification >Complete QHP Auto- >Plan Upload, Renewals Anonymous Browsing, > OE Testing Renewals and OE changes

Open Enrollment Readiness IT Command Center 1 - Hosted at MHBE Linthicum Office Infrastructure & System Operations 2 - Capacity Improvements - Database, Content Management & Security Stack Upgrade - Akamai Waiting Room Applications & Testing 3 - Applications Tuning, OE Enhancements and Fixes - Load Testing, OE Time-travel Testing, OE Day 1 Validation Carrier Management 4 - Data Reconciliation - QHP Auto-Renewals Reporting 5 - CMS Daily/Weekly Reports and touch-point calls - Executive and Stakeholder Reports

MHBE Cyber Security Framework MARS-E version 2.0 (Minimal Acceptable Risk Standards for Exchanges)  Published November 10,2015  Replaced MARS-E version 1.0 (published August 1, 2010) Influential Regulations affecting MARS-E version 2.0  National Institute of Standards and Technology (NIST) Special Publication (SP) 800-53 Rev 4  Added a catalog of Privacy Controls  Consistency with Department of Health and Human Services ACA Regulations (45 CFR §§155.260 and 155.280)  Revised IRS Publication 1075 changes

MHBE Security Compliance Compliance with CMS and IRS Regulations  Plan of Action and Milestones (POA&M)  Privacy Impact Assessment (PIA)  Information Security Risk Assessment (ISRA)  Interconnection Security Agreement (ISA)  Internal Revenue Service – Safeguard Security Report (SSR), Safeguard Review Report (SRR), Corrective Action Plan (CAP)  Security Compliance Audit (SCA) / Security Assessment Report (SAR)  Computer Matching Agreement (CMA)  System Security Plan (SSP)  Annual Attestation (AA)  Information Exchange Agreement (IEA)  Authority to Connect (ATC)

Salesforce Licenses Salesforce License Description Quantity Customer Resource Management (CRM) Salesforce Service Cloud Solution and Learning Management System 400 Enterprise Edition (LMS) Internal Users Customer Community 20,000 LMS CAW Users, MHBE Timesheet users 1 Logins Per Month Partner Community 100 Members MDH LHD Users and MCO External Users 2 Salesforce Knowledge MHBE Knowledge Base Solution Managers 20 Replica of Production Environment Including Salesforce Full Sandbox 1 Data to Act as Staging Environment Hosting Salesforce solutions on Government Salesforce Government Cloud 1 Cloud Exact Target - Corporate Edition 1 Salesforce Marketing Cloud Additional Contacts - Corporate Edition 495 (SFMC) Super Messages 30,000 Exact Target Premier Success Plan 1