Government Technology

Virtual Conference
March 19, 2015

Executive Summary
Clark County NV is a complex government organization for which an
identity and access management (IAM) strategy will have major
operation and strategic value.
IAM is about giving the right people the right access (to systems) at
the right time for the right reasons.
We have started, in earnest, building a foundation of understanding
why an IAM program is necessary and how it will benefit County
employees and the citizens of Clark County.
We have engaged some expertise to help us build our foundation.

About Clark County, NV

Clark County
Clark County is the 12th most populous county in the
United States.
The county is 8,000 square miles in area.
We have a population of 2.1 million residents.
We average about 39 million visitors annually.

The cities within the boundaries of Clark County include

Las Vegas, Henderson, North Las Vegas and Mesquite.

Clark County
The population of the City of Las Vegas is about 600,000; the
population of unincorporated Clark County is about 800,000.
There are 38 departments in Clark County; we provide
traditional county services like property tax assessment and
official document recording (marriage licenses, deeds, etc.),
but also municipal services such as parks and rec, building
permits and business licensing.
IT is decentralized in Clark County. A few agencies -- the
county hospital, airport and county sheriff's office have their
own CIOs. About 6 smaller departments have a handful of IT
employees that report to their departments.

Clark County
Little known fact: The Las Vegas Strip is actually in
unincorporated Clark County, not in the city limits of the
City of Las Vegas.

What is
Identity Access Management?
Identity and Access Management (IAM) is
about: Providing the right people with the
right access at the right time for the right
reasons

10

IAM Benefits for Clark County

Improve IAM-related services available
to staff and citizens

Improve end-user experiences via:

Citizens portal
Enterprise white pages lookup capabilities
Reduced sign on
Simplify deployment of shared enterprise applications

Reduce risk of:

Breaches
Compliance violations, potential fines

Service Delivery

Enhanced Security/
Mitigating Risks

Contain Costs

Increased Productivity
Strengthen Security
Controls

Business Enablement

11

IAM Benefits for Clark County

Contain costs/increase productivity
Automate manually intensive provisioning and deprovisioning processes where feasible

Strengthen security controls

Improved auditing and reporting capabilities
Consistent enforcement of enterprise policies

Service Delivery

Enhanced Security/
Mitigating Risks

Contain Costs

Increased Productivity
Strengthen Security
Controls

Business Enablement

12

Progress to Date
Weve worked with a consultant to help us lay the
foundation for IAM program
Weve held 3 two day long workshops since September
2014.
Our to-date progress includes:
Agreeing on an over-arching IAM Program Charter
Establishing principles to ensure IAM-related services can be
easily integrated within the existing infrastructure.
Form sub-teams for further defining solutions and deliverables:
security, process, and data sub-teams.

What are our next steps?

14

Our Next Steps

Since we have distributed IT, socialize that Departments
and Agencies will retain the authority to manage their
own users and contractors
Continue to build the enterprise-wide IAM Program by:
Socializing the IAM Program Charter with the other CIOs
Socializing the business value of IAM-related services to all 38
department heads (i.e. whats in it for them).
Ensure participation by all departments and agencies thru an
IAM Steering Committee

15

Our Next Steps

Refine and update/optimize:
IAM related policies, processes, procedures
IAM-related services and technologies

Establish a culture of continuous service improvement

16

Critical Success Factors

Effective executive sponsorship is crucial
CIO, Director of ERP, Comptroller, HR, CAO and CFO

Collaboration/cooperation across all departments and agencies

Align IAM services with other key enterprise initiatives including:

CRM/Constituents Portal
Employee on-boarding pilot program
Business, License, Inspections, Permit, and Zoning (BLITZ)
Shared Computer Operations, Protection, and Enforcement (SCOPE)
DR
Cloud Services
Mobility and BYOD

17

Priority IAM Services

Directory Services: To store and locate identity
information
Provisioning/De-provisioning Services: To automate
identity creation and credential management
Authentication & Authorization Services: To identify and
authorize users at varying levels of assurance
Identity Audit Services: To keep track of end user
accounts and access privileges