Business Process Consultant

CJCC requires the services of a Business Process Consultant to assess access control (grant, deny, revoke) processes for JUSTIS at the agency and individual levels and the process for conducting the JUSTIS user audit. The assessment shall include a review and documentation of the current workflow, a review of the best practices for access control and user audits, an evaluation of the extent to which the current workflow is consistent with best practices, and recommendations to enhance the access control and audit processes.

The work of this consultant will address the following issues and challenges:

• Reliance on hard copy and PDF files to manage access control
• Users have access to JUSTIS who no longer need access
• Information Technology Security Officers (ITSO) do not understand how JUSTIS is being used by their agency
• ITSO do not verify who needs access
• Users do not have access to JUSTIS who need access
• ITSO/Trainer do not understand how JUSTIS is being used by their agency
• ITSO/Trainer do not communicate the value of JUSTIS in their agency

Specific Duties and Deliverables:

1. Attend meetings with CJCC staff to ascertain roles, responsibility and use cases of the system.
2. Facilitate meetings, including drafting agenda, meeting notes, and follow-up plans with stakeholders.
3. Document current state including the following within 15 working days of contract start date and present a draft via email
4. Flow diagram of current state process (Agency granted access to JUSTIS)
5. Summary of current state process (Agency granted access to JUSTIS)
6. Flow diagram of current state process (Individuals granted access to data in JUSTIS)
7. Summary of current state process (Individuals granted access to data in JUSTIS)
8. Flow diagram of current state process (JUSTIS User Audit)
9. Summary of current state process (JUSTIS User Audit)
10. Findings/Report on current state processes
11. Document target state including within 30 working days of contract start date and present a draft via email
12. Flow diagram of target state process (Agency granted access to JUSTIS)
13. Summary of target state process (Agency granted access to JUSTIS)
14. Flow diagram of target state process (Individuals granted access to data in JUSTIS)
15. Summary of target state process (Individuals granted access to data in JUSTIS)
16. Flow diagram of target state process (JUSTIS User Audit)
17. Summary of target state process (JUSTIS User Audit)
18. Recommendations/Report to support target state processes
19. Produce a report that includes a plan for the development of the current and target state, and an implementation timeline within 40 days of the contract start date.