Technology Health Check

ITIL Standard

To be added

Assumptions

•Heath Check are fulfilled by the Maximo support team

•Health Check are initialed by quarterly, 3rd party and regulatory assessment

•TSD has no Health Check standards or policies

Definition

Health Check is a snapshot of the current health of the application to verify components of the application and infrastructure are functioning as expected.

Goal

The primary goal of the Maximo Health Check is define expected parameters for the monitoring of metrics across the Maximo application and underlying infrastructure. Regular checks to ensure system is performing the way it’s expected.

Objectives

1.Identify issue(s) before they occurs

2.Fine tuning the application and ensure technology meets any new compliance requirements as part of new standards being implemented

3.Alerts whenever the application enters a state of concern

4.Discover opportunities to increase computing efficiencies and area of improvements

5.Identify priorities in work plan to remediate when necessary

6.Improve the health of the application while ensure it is in a state of good repair

7.Improved overall quality and reliability for customers

Workflow

Health Check Process Initiation

Health Check process begins with:

•BAS2 policies perform self- assessment quarterly

•Regulatory assessment of compliance changes

•3rd Party Service Provider or Vendor upgrades to support maintenance

•Technology Services changes to infrastructure that impact the technical toolset

•Other Processes 

 

Plan Metrics

•Application (log, release, version control)

•Infrastructure (network, middleware, firewall, WebSphere) 

•Hardware (VM, CPU, memory, disk usage)

•Data (integrity, growth, maintenance, backup)

•System Lifecycle (State) (Run, Grow and/or Transform)

•Security (access control standard, cyberspace)

•Overall availabilities (response time, uptime and downtime)

•License Management & Schedule

•Backup (method and frequency) and disaster recovery (procedure)

•Assessments for new compliance and regulation requirements

•User satisfaction

•Alignment with Technology Roadmap

EXECUTE

1.Perform Health Check

2.Report results

3.Communicate issue awareness to team

4.Issue discovered

5.Event Management  triggered

Improve

•Review issue

•Assess issue

•Determine severity

§  Information

§  Warning

§  Exception and error

•Improvement or defer to work plan pending on priority and severity

•Fulfillment

Monitoring

•Spot the errors and service failures before they make any impact

•Performance, capacity and current state

•System availabilities

•Find root cause of repeated issues

•Logs

•System growth

•Intrusion and vulnerabilities

•Availabilities

•Database backup and reorg

Alert and Trigger

•Automate email notification

•Min and Max threshold

•Monitoring tools

•In Application Alert

•Security

•Network

Roles and Responsibilities

To be added

Scenarios

To be added

Exceptions to Standard

To be added

Tools and References

Current Maximo Health Check

Compliance Check

Status

Current State

Target State

Action Plan
(When/What needs to be done)

Latest Software or Tool
(Off the shelf)

Green

Maximo 7.6.1.2 & Spatial 7.6.1

 

 

Latest Software or Tool
(Off the shelf)

Green

Cognos Reporting (SIT & QA)

TBD

Q3 - Program Work Plan - Determine if COT wants to use Cognos

Database  (Oracle)

Green

SBX, Dev, SIT QA,TRN,PD - Oracle 19c (12.2.0.3)

 

Completed 1Q2021

WebSphere

Green

WAS 9.5.0.7

 

Completed 1Q2021

Server OS
(Win Server 2016 & Linux 7)

Green

Maximo Administration server: Windows 2016
All other Maximo Servers: Linux 7

Maximo Administration server: Windows 2016
All other Maximo Servers: Linux 7

 

Client Workstation (Browser)
(EI/Chriome/Firefox)

Green

IE / Chrome / Firefox

Chrome

Q3/Q4 - Chrome - validate that Chrome will be part of STANDARD SWMS computing platform image.

Mobile Device

 

n/a

 

 

Access Control Standard

Green

Service Accounts: compliant

 

 

AD LDAP Authentication

Green

Compliant

 

 

Authorization and Role Management

Green

Compliant

 

 

SDLC & Change Management (Annual Review)

Green

Compliant

 

 

Information Management
(Data Retention)

Green

n/a

 

 

AODA

Yellow

n/a for WPB - SMT exception

TBD

Program Work Plan - to be addressed in Work Package SW

Threat Risk Assessment (TRA)

Yellow

pending

 

Program Work Plan - to be addressed in Work Package SW

Vulnerbility Assessment (VA)

Yellow

pending

 

Program Work Plan - to be addressed in Work Package SW

Privacy Impact Assessment (PIA)

Yellow

Assessed

 

Q1 -  Program Work Plan - CISO responded with additional clarifications / EWMS Program response provided

 

 

 

 

 

Overall Status:

Green

 

 

 

 

 

 

 

 

 

 

 

 

 

Compliance Check:
Green  - Compliant
Yellow - On work plan
Red     - Not planned to address
               within 6 months

 

Last update:

2021-04-12

 

The following health monitoring is currently being performed