Spotsylvania County Network Assessment and Penetration Testing Project Plan Documentation

Communications Management Plan

The Communications Management Plan sets the communications framework for this project. It will serve as a guide for communications throughout the life of the project and will be updated as communication requirements change. This plan identifies and defines lines of communication as they pertain to the project. A project team directory is also included to provide contact information for all stakeholders directly involved in the project.

Version History

I Changes Date Created Author D 1 Add Jay Krail’s office phone number 12/11/14 Matt Robertson

Guidelines for Communication

E-mail – unsecure request for information and updates. NTS project team members are requested to address e-mails to the following address: [email protected]. The appropriate Spotsylvania IS engineer will respond to your request. If you choose to e-mail a specific individual, please cc the network engineering address as well. Also, please copy Matt Robertson and Jay Krail on all project e-mails. Jane Reeve will need to be copied on status updates and escalations.  E-mail Subject Descriptions o In order to distinguish project related e-mail communications from other on-going work or non-related communications utilize the following subject description. . SPOTSY NHA – (topic/subject)  Example: SPOTSY NHA – request access

Secure/Sensitive Information Distribution  Passwords – provided by phone  Assessment Reports/Analysis/Findings - NTS will provide log-in information and instruction to access the secure web portal to review documentation.

External Penetration Testing Notifications Spotsylvania IS will be notified of the external penetration testing window. In the event a security alert is triggered during this time period, it is requested that Spotsylvania IS notify the NTS Helpdesk, [email protected] and the project manager. NTS engineering staff will acknowledge if testing caused the alert.

Analysis/Findings Review At the completion of specific project milestones (network assessment, external penetration testing, and AD review) there will be a meeting conducted between key stakeholders to review the findings and

1 Spotsylvania County Network Assessment and Penetration Testing Project Plan Documentation recommendations. This will be schedule by the project manager in advance and conducted via web-ex or on-site meeting.

Status Updates Regular status updates will be scheduled and provided with sensitivity to holiday and vacation schedules during the course of the project.  Project status meetings - will be held via conference phone and periodically on-site as deemed necessary. These will be pre-scheduled by the project manager and during a time that key stakeholders can participate. The meeting format will include the following components: Discussion Topics, Review, Schedule, Issues/Risks, and Action Items. The project manager will distribute meeting minutes to the project team and incorporate these notes into the status report.  Status Reports – the project manager will provide a weekly project update via e-mail to the project team including Accomplishments, Upcoming Milestones/Schedule, and Issues/Risks.

Project Team Directory Name Title Project Role Email Office Phone Mobile Phone NTS Team SLED Program Matt Robertson Project Manager [email protected] 804-858-8003 804-539-9991 Manager Ed Dooley Lead Architect Network Assessment [email protected] 804-858-8036 804-317-6404 Doug Vestal Security Engineer Penetration Testing [email protected] 804-858-8032 804-380-3835 Policy Review and Wayne Ojo Security Architect [email protected] 804-419-8897 804-397-5910 Documentation Senior Systems Active Directory Clinton Berry [email protected] 804-986-0223 Engineer Review VP of Integration Sam Panicker Management [email protected] 804-858-8010 804-405-2714 Services Spotsylvania

County Team Engineering support - Ben Boyle Network Engineer [email protected] 540-507-7480 540-287-3368 Primary POC Network Support Greg Hoskins Engineering support 540-507-7986 540-455-4953 Specialist [email protected] Network Support Scott Cooper Engineering support [email protected] 540-507-7089 540-760-7806 Specialist Operations Jay Krail Management 540-507-7502 504-920-3181 Manager [email protected] Director of Jane Reeve Information Management [email protected] 540-507-7552 540-760-7803 Services

2