Rsa securid self service portal

EOS-RSA AUTHENTICATION SERVER UPGRADE 1

EOS-RSA AUTHENTICATION SERVER UPGRADE 12

EOS-RSA Authentication Server Upgrade

Project Scope, Schedule, and Budget

PM 598 – PM Mgmt. Capstone - Week 2

May 23, 2016

Project Description

The project End Of Support RSA Authentication servers is a project by the Bank of Tokyo which has been started so that the bank client’s and customer can have authentication services which will enable them access the bank internet applications, the RSA Authentication will also enable remote access through a RSA securID token.

The project will also have a Helpdesk Administration Portal which will enable Administrators to efficiently perform support activities to internal users. Finally, the project will also have a Standard Operating Procedure which will be used in approving and deploying RSA securID Soft Tokens which will eliminate cost associated with mailing or replacement of Hard Tokens to Internal Users.

Problem & Result Statement

The current version of RSA comes to End-of-Support on 12/31/2016. In the event of an RSA failure that requires technical support, customers will not be able to access Bank's Internet-facing systems. Some of the remedy to the problem statement will be:

· Reduce the RSA SecurID maintenance and RSA Administration costs

· Enhance and automate the process of deploying RSA SecurID

· Building a RSA Architecture needed to support RSA SecurID soft and hard token distribution

Project Justification

The Bank End-of-Support upgrade of the RSA environment was done in order to leverage the Enterprise plus license so as to reduce the cost of maintenance. The EOS-RSA Authentication Server Upgrade Project is the best because it will lower the cost of maintenance and also it will be able complete the activities which were started by Alternate Web Hosting Project and it has a RSA Architecture that will allow remote access to the environment by internal and external customers. As compared to other alternatives the EOS-RSA Authentication Server Upgrade Project is the best one to minimize the cost and allow support services to be efficiently performed.

Project Scope Statement

IN SCOPE

The following items are considered to be in scope for this project:

· Complete the replacement and configurations of the RSA Authentication Servers so that RSA Enterprise Plus Licenses can be installed, which will reduce the overall RSA license annual maintenance cost

· Provide a Self-Service Portal for internal users of the RSA environment.

· Ensure that the portal can be accessed on all bank owned devices, and on all bank approved personal devices

· Ensure that the self-service portal can be accessed on all bank supported browsers and on all supported browser versions.

· Provide an Admin Portal for the Helpdesk to more efficiently perform remote Internal User support activities

· Create a test environment so that future updates and fixes can be tested without interrupting Production.

· Ensure no service interruption in the event of either a Component or Data Center failure

OUT OF SCOPE

The following items are not within scope of this project:

· Implementing RSA Enterprise Plus licenses and a self-service portal for MUB and ISA-West Coast users.

· Providing a self-service portal for external customers.

Out of scope items will be considered in future projects

Major Project Deliverables

· Install the remaining RSA Authentication Servers in both the Harborside and Sterling Forest Data Centers

· Purchase new hardware and software for hosting a Self-Service and Helpdesk Portal for Internal Users

· Leverage the Enterprise Plus License structure to reduce license maintenance costs

· Install new RSA Self-Service Portals to reduce ongoing administrative and overhead costs, and improve the end-user experience of Internal Users

· Deploy a Self-Service Portal so that Internal Users working remotely can reset their RSA Token PIN without having to call the Helpdesk.

High level Milestones and significant event

The current high level milestones completion dates are as follows:

Planning

July 6, 2016

Design

August 7, 2016

Build & Configure Portals

September 18, 2016

Testing-Portals

November 13, 2016

Implementation: Portals

December 14, 2016

Build & Configure Soft Tokens

January 15, 2017

Testing: Soft Tokens

February 5, 2017

Implementation: Soft Tokens

February 22, 2017

ID

Milestone

Planned Completion

3

Project Initiation Request (PIR) Approved

4/17/2016

4

Kick-Off Security Risk Assessment

04/29/16

6

Obtain Initial Security Assessment Cost Estimations

05/08/16

8

Create BRD

05/04/16

11

BRD Sign-Off

05/15/16

13

Complete Initial Security Risk Assessment Spreadsheet

05/08/16

14

Review initial Security Risk Assessment (RSA)

05/15/16

15

Scope Pentest & Technical Security Standard Requirements

05/29/16

17

Provide Final Security Risk Assessment Cost Estimations and Quotes

06/05/16

25

Create Project Plan Document

06/12/16

26

Create WBS & Resource Plan

06/11/16

28

RINGI (Budget) Approval

07/22/16

30

EIS Planning Activities for Remaining Project Phases

07/06/16

36

Design Phase

07/06/16

85

Development Phase

07/06/16

146

Testing Phase

05/13/16

180

Pre-Implementation Phase

07/06/16

Items

Amount

Expected Semester Payment Term

2016/1

2016/2

2017/1

Investment

Hardware Purchase

$91,883.23

$91,883.23

S/W Development (Ext'l Consultant)

$140,215.00

$107,615.00

$32,600.00

S/W Purchase

$220,524.44

$220,524.44

Other

$16,597.10

$16,597.10

S/W Development (ISA Resources)

$75,446.82

$50,342.09

$25,104.73

S/W Development (ISA Resources Mark-Up)

$6,395.98

$4,262.08

$2,133.90

Sub Total

$551,062.57

$491,223.94

$59,838.63

Expense

Sales Tax

$21,372.49

$21,372.49

Sub Total

$21,372.49

$21,372.49

Grand Total

$572,435.06

$512,596.43

$59,838.63

$0.00

Project Schedule

Task Name

Duration

Start

Finish

Resource Names

EOS-RSA Authentication Server Upgrade

55.86 days?

Fri 5/20/16

Fri 8/5/16

Planning Phase

55.86 days?

Fri 5/20/16

Fri 8/5/16

Preview Milestones

10.29 days

Fri 5/20/16

Fri 6/3/16

PIR Approved

0 days

Fri 5/20/16

Fri 5/20/16

Kick-off Security

0 days

Sun 5/22/16

Sun 5/22/16

Complete EIS SRE Questionnaire

2 days

Sun 5/22/16

Mon 5/23/16

Kun Jiang

Obtain Initial Security Assessment Cost Estimations

0 days

Thu 6/2/16

Thu 6/2/16

Business & Infrastructure Requirements

10.29 days

Mon 5/30/16

Mon 6/13/16

Create BRD

5 days

Mon 5/30/16

Fri 6/3/16

Peter Tse (Koon Hing Tse)

Review BRD with SOE Management

0 days

Mon 5/30/16

Mon 5/30/16

Review BRD with QA and Obtain Approval

0 days

Wed 6/1/16

Wed 6/1/16

BRD Sign-off in ePLC

0 days

Thu 6/2/16

Thu 6/2/16

EIS Planning Phase Requirements & Activities

26.71 days

Mon 5/30/16

Tue 7/5/16

Complete Initial Security Risk Assessment Spreadsheet

5 days

Mon 5/30/16

Fri 6/3/16

Roger Brinkley, Kun Jiang

Review Initial Security Risk Assessment(SRA)

0 days

Thu 6/9/16

Thu 6/9/16

Scope Pentest and Technical Security Standard Requirements

10 days

Mon 6/13/16

Fri 6/24/16

Nikolay Belov

Scope BR and BCP Requirements

10 days

Mon 6/13/16

Fri 6/24/16

Peter Tse(Koon Hing Tse)

Provide Final Security Assessment Cost Estimations and quotes

5 days

Sat 6/25/16

Thu 6/30/16

Nikolay Belov

SME Reviews

10.29 days?

Mon 6/13/16

Mon 6/27/16

Create High Level Design Document

7 days

Mon 6/13/16

Tue 6/21/16

Kun Jiang, Peter Tse(Koon Hing Tse)

Conduct SME High Level Design Review Meeting

3 days

Fri 6/17/16

Tue 6/21/16

Kun Jiang

Submit SME Summary Sheet in ePLC

0 days

Mon 6/20/16

Mon 6/20/16

Ringi

30.86 days

Mon 5/30/16

Mon 7/11/16

Document Approach, Testing and Migration Strategy for Project planning

10 days

Mon 5/30/16

Fri 6/10/16

Kun Jiang, Peter Tse(Koon Hing Tse)

Obtain Cost Estimations & Quotes/SOWs

0 days

Fri 6/17/16

Fri 6/17/16

Create Project Plan Document and ePLC Deliverables

11 days

Wed 6/8/16

Wed 6/22/16

Create WBS and Resource Plan for Phase 2 to Phase 5

10 days

Wed 6/8/16

Tue 6/21/16

Submit Project Ringi

0 days

Mon 6/20/16

Mon 6/20/16

Ringi Local Approval in ePLC

0 days

Sat 7/2/16

Sat 7/2/16

Planning Activities for Remaining Project Phases

17 days

Sat 6/25/16

Mon 7/18/16

Kun Jiang, Peter Tse(Koon Hing Tse)

EIS Planning Activities for Remaining Project Phases

17 days

Sat 6/25/16

Mon 7/18/16

Nikolay Belov, Philip Norman

End of Planning Phase

0 days

Sun 7/17/16

Sun 7/17/16

Design Phase

1 day

Tue 8/2/16

Tue 8/2/16

Development Phase

1 day

Tue 8/2/16

Tue 8/2/16

Testing Phase

1 day

Tue 8/2/16

Tue 8/2/16

Pre-Implementation

0

Tue 8/2/16

Tue 8/2/16

Time-Phase Budget

Planning phase

Design Phase

Implementation

May-16

Jun-16

Jul-16

Aug-16

TOTAL

DIRECT COST

Supplies

$ 5,000.00

$ 3,000.00

$ 1,000.00

$ 1,000.00

$ 10,000.00

Developers salaries

$ 40,000.00

$ 40,000.00

$ 20,000.00

$ 20,000.00

$ 120,000.00

Materials

$ 100,000.00

$ 80,000.00

$ 180,000.00

Equipment

$ 10,000.00

$ 10,000.00

$ 90,000.00

$ 110,000.00

Consultancy cost

$ 2,000.00

$ 3,000.00

$ 4,000.00

$ 9,000.00

Travel expenses

$ 1,000.00

$ 2,000.00

$ 1,000.00

$ 4,000.00

Communication cost

$ 1,000.00

$ 500.00

$ 750.00

$ 1,000.00

$ 3,250.00

INDIRECT COST

Administration expenses

$ 5,000.00

$ 5,000.00

$ 5,000.00

$ 5,000.00

$ 20,000.00

Stakeholders Salaries

$ 2,500.00

$ 2,000.00

$ 2,000.00

$ 2,000.00

$ 8,500.00

Legal cost

$ 1,000.00

$ 500.00

$ 500.00

$ 500.00

$ 2,500.00

CUMULATIVE COST

$ 55,500.00

$ 165,000.00

$ 122,250.00

$124,500.00

$ 467,250.00

Work Breakdown Structure (Howard, 2013)

image1.png image2.png

REFERENCES
Howard, B. (2013). Microsoft Project 2013. Sebastopol, California : O'Reilly Media.

Kerzner, H. (2001). Project management : a systems approach to planning, scheduling, and controlling. New York: John Wiley.

Mehta, R. C. (2007). Project management. Jaipur: Aavishkar Publishers.

Grading Guide

Content

Met

Partially Met

Not Met

Comments:

Project scope is refined from Week 1’s charter.

X

A work breakdown structure is created.

X

WBS looks great.

A project schedule and budget is created.

X

A schedule is created for the project lifecycle in Microsoft® Project®.

X

The schedule is a good start. There are multiple levels. The task durations appear to be reasonable. Predecessor information needs to be setup for all tasks. Resources are defined and assigned.

Specific tasks and milestones are included with time and resource estimates.

X

A time-phased budget is created using Microsoft® Excel®

Using Microsoft® Excel®, create a time-phased budget containing cost estimates. Include direct and indirect costs for labor, machinery, equipment, supplies, and other elements applicable to the project.

X

The budget is contained within Project.

Total Available

Total Earned

7

6.5

Writing Guidelines

Met

Partially Met

Not Met

Comments:

The paper—including tables and graphs, headings, title page, and reference page—is consistent with APA formatting guidelines and meets course-level requirements.

X

Intellectual property is recognized with in-text citations and a reference page.

X

.

Paragraph and sentence transitions are present, logical, and maintain the flow throughout the paper.

X

Sentences are complete, clear, and concise.

X

Rules of grammar and usage are followed including spelling and punctuation.

X

Total Available

Total Earned

3

3

Assignment Total

#

10

9.5