Office of Operations
21st Century Operations Using 21st Century Technologies

Practices for Improving the Coordination of Information Technology and Transportation Systems Management and Operations Resources: A Reference Document

Chapter 3. Challenges of Information Technology and TSMO Coordination and Related Practices

The relationships between TSMO staff and IT staff have evolved significantly. As noted in chapter 2, the differences between the disciplines suggested the importance of learning experience regarding improved understanding and cooperation.

This project, through literature review interviews and project team experience, has:

  • Analyzed and described the key IT-related challenges facing TSMO staff.
  • Identified examples of practices responding to these challenges that States have found valuable in overcoming IT-related challenges and in improving the relationship between TSMO staff and IT staff.

This chapter presents both a challenge-driven view of the payoff for practices (including a correlation matrix) as well as a practice-driven view (including their crosscutting applicability).

Challenge-Practice Relationships

There has been a wide range of “lessons learned” to deal with the identified challenges, category by category. By and large, this experience has not been substantially documented, and thus this project primarily drew from the experience of practitioners through interviews, listening sessions, and webinars.

For the eight categories of challenges, there are practices that are beneficial for coordination across a range of cases and contexts. Where available, specific agency examples are provided. It is important to recognize that, in many cases, the lessons learned examples are a point of departure for continuing evolution for individual agencies over time in developing responses to the challenges. Through this review the project team found that (1) a given challenge could be supported by multiple practices, and (2) some practices could help address multiple challenges.

A key finding of this project, as reflected in the challenge matrix, is that there is not a one-to-one relationship between a challenge and a specific practice related to that challenge. That is, multiple practices, or combination of practices, could address any given challenge. For example, in table 2, related to culture, the challenge related to scarce resources may require multiple approaches, reflected in the four distinct practices that are presented. Conversely, practices can relate to more than one challenge.

Thus, examining the relationship between challenges and practices may be approached from either perspective, looking at addressing challenges by combing practices, or looking at how certain practices are applicable across a range of challenges.

For this reason, the project presents both challenge-driven and practice-driven perspectives. The challenge-driven perspective in terms of the challenge matrix is presented in the following section, which is followed by a section that summarizes the practice driven view.

The following challenge tables present a selection of situations and agency-specific potential practices associated with key challenges. The practices can be grouped into five broadly defined categories. In each group, broadly applicable general practices are identified (in italics below) together with related specific practices.

Collaboration

  • General Practice: Improve Communication.
  • General Practice: Clarify Roles and Responsibilities.

Specific practices:

  • Integrate IT staff within TSMO unit.
  • Modify organizational structure.
  • Implement coordination policies.
  • Develop formal agreements.

Staff Capabilities

  • General Practice: Establish Staffing Needs.
  • General Practice: Provide Staff Training.

Specific practices:

  • Integrate TSMO staff and IT staff.
  • Outsource services.
  • Identify recruiting opportunities.

Planning/Programming

  • General Practice: Involve IT Personnel in Project Delivery Teams.
  • General Practice: Develop Lifecycle Cost Model.

Specific practices:

  • Coordinate TSMO and IT Strategic Plans.
  • Develop long-range IT-TSMO framework.
  • Develop IT policies that support TSMO.

Program Delivery

  • General Practice: Involve IT Personnel in Project Delivery Teams
  • General Practice: Develop Lifecycle Cost Model.

Specific practices:

  • Incorporate IT staff in systems engineering process.
  • Establish TSMO “approved product list.”
  • Adjust procurement process for TSMO.
  • Establish IT-TSMO project review.

Equipment/Systems

  • General Practice: Maintain an ITS Architecture.
  • General Practice: Improve Data Communications Infrastructure.

Specific practices:

  • Develop an integrated security system with IT.
  • Establish necessary decision support systems.
  • Define and coordinate data sharing and access agreements.
  • Create a data governance and management plan.

A more complete description of the practices is included after the challenge tables and more detail is presented in appendix B.

The Challenge Matrix—A Tool to Capitalize on Existing Experience

The project team developed a “Challenge Matrix” as a tool that readers can use to identify potentially valuable and approaches to respond to the wide range of challenges experienced to date that have been identified by this project. The tables are intended to allow document users to search for the challenges they are facing by category.

The challenges are presented in eight separate tables, grouped into institutional challenge categories, and business and technical challenge categories, of four each. For each specific challenge shown, the table lists one or more potential practices that can address the challenge with a short description and a section number reference.

Challenges

Challenges discovered during this project fall into two basic categories. The first category consists of institutional challenges that can hamper programmatic activities. The second category includes challenges in key business and technical processes that are critical to integrating TSMO and IT during TSMO program development, implementation, and operations.

Institutional Challenges

As characterized in chapter 2, institutional challenges reflect characteristics of the basic disciplines of TSMO and IT as they are reflected in their organizational orientation and configuration. Institutional challenges fall into four categories:

  • Cultural: Challenges that relate to professional culture, values, and behaviors that influence personal relationships or interactions between the differing agency functions or groups.
  • Staff and Financial Resources: Challenges addressing staffing and financial resources that are essential to fulfilling TSMO related IT needs and are required for nearly all aspects of acquisition, development, and maintenance of IT systems.
  • Organizational: Challenges related to organizational structure, the formal and informal structural arrangements around which staffing, roles, and responsibilities are managed and carried out.
  • Policy: Challenges that include legislation, executive-level directives, departmental policy, or requirements that affect IT or TSMO.

Business and Technical Processes Challenges

Business and technical processes challenges reflect the intersection between institutional challenges in the business process and technical processes integral to the pursuit of their respective TSMO and IT program objectives. Process challenges fall into four categories:

  • Planning and Programming: Challenges related to the vision, mission, and objectives of the different organizations/functions and integrating each in the overall agency planning, programming, and resource allocation.
  • Procurement: Challenges related to the processes and procedures associated with obtaining IT-intensive products or services.
  • Systems and Technology: Challenges related to hardware and software components of data acquisition, management, and utilization technologies.
  • Risk and Security: Challenges associated with network security, data sharing, third-party application, hosted or cloud platforms, and automation.

A full listing and more detailed description of the challenges can be found in appendix A, and a full and more detailed listing of the practices are found in appendix B. The matrices provide the indexing for this detail. The abbreviated “IDs” for each challenge provide the indexing for the challenges detailed in appendix A and the section numbers for each practice are cross-referenced to appendix B. For example, the challenge related to “Different Staff Backgrounds and Roles Leads to Silos” is described in appendix A, Culture-3. Similarly, the practice “Implement Coordination Policies” is detailed in appendix B under section B.1.2 within the “Collaboration” practices.

(In electronic versions of this document that support internal document links, the challenge ID and the practice section number are electronically linked directly to the sections in the appendices that describe challenge or practice in more detail. For the example above, clicking or selecting Ctrl+Click on the ID “Culture-3” will link directly to the description for “Different Staff Backgrounds and Roles Leads to Silos” in appendix A. Similarly, clicking or selecting Ctrl+Click on the section # “B.1.2” will link directly to the description for “Implement Coordination Policies” in appendix B.)

Institutional Challenges

The interaction between TSMO staff and IT staff is often influenced by the organization itself, including professional culture, organizational structure, staff capabilities, and resource allocation. Challenges can arise when the organization’s history, the underlying culture of its staff, or the available resources do not align with the current mission or task. Common institutional challenges can be encountered at all levels of the organization from leadership decision-making to frontline implementation.

Cultural

Culture consists of the values and behaviors that influence personal relationships or interactions between the differing agency functions or groups. Culture includes technical understanding, leadership, outreach, and program legal authority. Table 2 presents the culture challenge and practice relationships. As can be seen, various mixes of six practices can address the four principal challenges.

General practices beneficial to cultural challenges:

  • Improve Communication.
  • Clarify Roles and Responsibilities.
  • Establish Staffing Needs.
Table 2. Cultural challenge practices.
Challenge Description ID Practice Description Section #
Lack of mutual understanding between TSMO staff and IT staff. Culture-1 Integrate IT staff within TSMO unit. B.1.2
Lack of mutual understanding between TSMO staff and IT staff. Culture-1 Modify organizational structure. B.1.2
Lack of mutual understanding between TSMO staff and IT staff. Culture-1 Implement coordination policies. B.1.2
Lack of IT staff availability when TSMO staff need IT support. Culture-2 Modify organizational structure. B.1.2
Lack of IT staff availability when TSMO staff need IT support. Culture-2 Implement coordination policies. B.1.2
Lack of IT staff availability when TSMO staff need IT support. Culture-2 Develop memorandum of understanding or intergovernmental agreement. B.1.2
Lack of IT staff availability when TSMO staff need IT support. Culture-2 Mix TSMO staff and IT staff. B.2.2
Lack of IT staff availability when TSMO staff need IT support. Culture-2 Outsource services. B.2.2
Different staff backgrounds and roles leads to silos. Culture-3 Integrate IT staff within TSMO unit. B.1.2
Different staff backgrounds and roles leads to silos. Culture-3 Modify organizational structure. B.1.2
Different staff backgrounds and roles leads to silos. Culture-3 Implement coordination policies. B.1.2
Shared resources and references for TSMO related IT needs are scarce. Culture-4 Modify organizational structure. B.1.2
Shared resources and references for TSMO related IT needs are scarce. Culture-4 Implement coordination policies. B.1.2
Shared resources and references for TSMO related IT needs are scarce. Culture-4 Implement coordination policies. B.1.2
Shared resources and references for TSMO related IT needs are scarce. Culture-4 Develop formal agreement. B.1.2
Shared resources and references for TSMO related IT needs are scarce. Culture-4 Mix TSMO staff and IT staff. B.2.2

(Source: FHWA.)

Staff and Financial Resources

Staffing and financial resources are essential components to fulfilling TSMO and IT needs and are required for nearly all aspects of acquisition, development, and maintenance of IT systems. Table 3 presents the staff and financial resource challenge and practice relationships. As can be seen, various mixes of five practices can address the four principal challenges.

General practices beneficial to staff and financial resources challenges:

  • Clarify Roles and Responsibilities.
  • Establish Staffing Needs.
  • Provide Staff Training.
  • Allocate Budgets and Resources Based on Historical Data.
  • Establish and Maintain Systems to Manage TSMO and IT Devices and Assets.
  • Develop Lifecycle Cost Model.
Table 3. Staff and financial resources practices.
Challenge Description ID Practice Description Section #
Funding sources for TSMO related IT projects are not well established. Resource-1 Coordinate TSMO and IT Strategic Plans. B.3.2
Funding sources for TSMO related IT projects are not well established. Resource-1 Develop long-range IT-TSMO framework. B.3.2
Recruiting and retaining IT staff is difficult with competition from private sector. Resource-2 Outsource services. B.2.2
Recruiting and retaining IT staff is difficult with competition from private sector. Resource-2 Identify recruiting opportunities. B.2.2
Training requirements and programs for TSMO and IT are not provided internally. Resource-3 Integrate IT staff within TSMO unit. B.1.2
Use of private firms to provide services requires funding, oversight, and agency approval. Resource-4 Outsource services. B.2.2

(Source: FHWA.)

Organizational Structure

Organizational structure includes the formal and informal structural arrangements around which staffing, roles, and responsibilities are managed and carried out. Table 4 presents the organizational structure challenge and practice relationships. Various mixes of eight practices can address the five principal challenges.

General practices beneficial to organizational structure challenges:

  • Clarify Roles and Responsibilities.
  • Establish Staffing Needs.
  • Allocate Budgets and Resources Based on Historical Data.
Table 4. Organizational structure practices.
Challenge Description ID Practice Description Section #
TSMO is limited in its direct interaction with IT leadership given the hierarchical structure. Org-1 Integrate IT staff within TSMO unit. B.1.2
TSMO is limited in its direct interaction with IT leadership given the hierarchical structure. Org-1 Modify organizational structure. B.1.2
TSMO is limited in its direct interaction with IT leadership given the hierarchical structure. Org-1 Implement coordination policies. B.1.2
Lack of clarity in defining the roles of department of transportation IT staff versus enterprise IT staff and associated IT ownership. Org-2 Modify organizational structure. B.1.2
Lack of clarity in defining the roles of department of transportation IT staff versus enterprise IT staff and associated IT ownership. Org-2 Implement coordination policies. B.1.2
Organizational IT capability varies across the State and may be weaker in rural areas. Org-3 Integrate IT staff within TSMO. B.1.2
Organizational IT capability varies across the State and may be weaker in rural areas. Org-3 Modify organizational structure. B.1.2
Organizational IT capability varies across the State and may be weaker in rural areas. Org-3 Implement coordination policies. B.1.2
Organizational IT capability varies across the State and may be weaker in rural areas. Org-3 Develop formal agreement. B.1.2
Organizational IT capability varies across the State and may be weaker in rural areas. Org-3 Mix TSMO and IT staffs. B.2.2
Organizational IT capability varies across the State and may be weaker in rural areas. Org-3 Outsource services. B.2.2
Approval processes are challenging for the unique environment and function of TSMO. Org-4 Implement coordination policies. B.1.2
Approval processes are challenging for the unique environment and function of TSMO. Org-4 Form TSMO “approved product list.” B.4.2
Approval processes are challenging for the unique environment and function of TSMO. Org-4 Adjust procurement process for TSMO. B.4.2
Meeting expectations and needs can be challenging when operating key business (IT) resources is the responsibility of a separate organizational unit. Org-5 Integrate IT staff within TSMO. B.1.2
Meeting expectations and needs can be challenging when operating key business (IT) resources is the responsibility of a separate organizational unit. Org-5 Implement coordination policies. B.1.2
Meeting expectations and needs can be challenging when operating key business (IT) resources is the responsibility of a separate organizational unit. Org-5 Develop formal agreement. B.1.2
Meeting expectations and needs can be challenging when operating key business (IT) resources is the responsibility of a separate organizational unit. Org-5 Mix TSMO and IT staffs. B.2.2

(Source: FHWA.)

Outsource Services for Support

TSMO-based operational activities and strategies are continuous (24 hours per day/7 days a week/365 days per year) efforts that do not follow normal business hours. As such, department of transportation (DOT) TSMO units often need IT support during unplanned IT events or failures. However, the enterprise IT groups are often not accustomed to supporting systems in real time.

Many State enterprise IT units operate on a ticketing system and typically respond in the order that could delay service to the DOT TSMO group. This approach does not align with the urgency experienced during a technical failure with ITS. In addition, the IT technical support staff work “normal” business hours. Limited service is available on weekends, holidays, and after hours, which can present issues when the network or other IT systems fail.

One successful approach to this problem is to work with the IT organization to determine a way for the TSMO organization to pay for IT staff to be on-call for those extended hours. If that is not a possibility or it would create policy issues with the IT organization, TSMO and IT groups working together to outsource those services for night and weekend service may be an option.

Policy

Policy includes executive-level directives, departmental policy, or requirements (including any applicable legal or regulatory requirements) that are not directly targeted to TSMO or are outside the departments or divisions of either IT or TSMO. Table 5 presents the policy challenge and practice relationships. Various mixes of three practices can address the two principal challenges.

Table 5. Policy practices.
Challenge Description ID Practice Description Section #
TSMO design, procurement or operations need to comply with jurisdiction-specific laws and regulations that may not have been established with TSMO in mind. Policy-1 Implement coordination policies. B.1.2
TSMO design, procurement or operations need to comply with jurisdiction-specific laws and regulations that may not have been established with TSMO in mind. Policy-1 Develop formal agreement. B.1.2
TSMO design, procurement or operations need to comply with jurisdiction-specific laws and regulations that may not have been established with TSMO in mind. Policy-1 Adjust procurement process for TSMO. B.4.2
TSMO procurement processes can be affected by jurisdiction-level IT procurement rules. Policy-2 Develop IT policies that support TSMO. B.3.2
TSMO procurement processes can be affected by jurisdiction-level IT procurement rules. Policy-2 Adjust procurement process for TSMO. B.4.2

(Source: FHWA.)

Business and Technical Challenges

Implementing technology within an agency can be affected by the business and technical processes associated with developing systems, including planning, procurement, security and data, and new technology specific challenges. Challenges can arise when processes that worked well before the proliferation of IT systems and devices are simply no longer effective. In other situations, processes may have been developed in isolation within either the TSMO or IT organizations and worked well if the organizations remained isolated. Common business and technical challenges can be encountered at any stage of project activity or development.

Planning and Programming

Strategic planning includes the vision, mission, and objectives of the different organizations or  functions, and integrating each in overall agency planning and resource allocation. Table 6 presents the strategic planning challenge and practice relationships. As can be seen, various mixes of five practices can address the three principal challenges.

General practices beneficial to strategic planning challenges include:

  • Allocate Budgets and Resources Based on Historical Data.
  • Establish and Maintain Systems to Manage TSMO and IT Devices and Assets.
  • Involve IT Personnel in Project Delivery Teams.
Table 6. Strategic planning practices.
Challenge Description ID Practice Description Section #
Strategic planning and governing mission, vision, and goals can differ between TSMO and IT. Planning-1 Coordinate TSMO and IT Strategic Plans. B.3.2
Strategic planning and governing mission, vision, and goals can differ between TSMO and IT. Planning-1 Develop long-range IT-TSMO framework. B.3.2
Programming and development of TSMO IT projects does not align with traditional construction or IT. Planning-2 Develop IT policies that support TSMO. B.3.2
Programming and development of TSMO IT projects does not align with traditional construction or IT. Planning-2 Adjust procurement process for TSMO. B.4.2
Programming and development of TSMO IT projects does not align with traditional construction or IT. Planning-2 Establish IT-TSMO project review. B.4.2
Business metrics and performance measures for TSMO are not integrated in IT unit’s management. Planning-3 Develop IT policies that support TSMO. B.3.2

(Source: FHWA.)

Procurement

Procurement consists of the processes and procedures associated with obtaining IT-intensive products or services. Table 7 presents the procurement challenge and practice relationships. Various mixes of eight practices can address the five principal challenges.

General practices beneficial to procurement challenges:

  • Improve Communication.
  • Clarify Roles and Responsibilities.
  • Establish and Maintain Systems to Manage TSMO and IT Devices and Assets.
  • Develop Lifecycle Cost Model.
Table 7. Procurement practices.
Challenge Description ID Practice Description Section #
Statewide procurement policies and procedures do not align with TSMO initiatives. Procure-1 Form TSMO “approved product list.” B.4.2
Statewide procurement policies and procedures do not align with TSMO initiatives. Procure-1 Adjust procurement process for TSMO consistent with State and local requirements. B.4.2
Purchasing activities require multiple levels of approval across groups. Procure-2 Develop formal agreement. B.4.2
Purchasing activities require multiple levels of approval across groups. Procure-2 Develop IT policies that support TSMO. B.4.2
Purchasing activities require multiple levels of approval across groups. Procure-2 Form TSMO “approved product list.” B.4.2
Purchasing activities require multiple levels of approval across groups. Procure-2 Adjust procurement process for TSMO. B.4.2
Business needs for TSMO require both legacy and emerging systems. Procure-3 Develop long-range IT-TSMO framework. B.4.2
Business needs for TSMO require both legacy and emerging systems. Procure-3 Incorporate IT staff in systems engineering process. B.4.2
Lack of pre-approved TSMO related IT equipment/services can slow efforts. Procure-4 Form TSMO “approved product list.” B.4.2
Lack of pre-approved TSMO related IT equipment/services can slow efforts. Procure-4 Adjust procurement process for TSMO. B.4.2

(Source: FHWA.)

Systems and Technology

Systems and technology encompass all hardware and software components of data acquisition, management, and utilization technologies. Table 8 presents the systems and technology challenge and practice relationships. As can be seen, various mixes of 10 practices can address the seven principal challenges.

General practices beneficial to systems and technology challenges:

  • Improve Communication.
  • Establish and Maintain Systems to Manage TSMO and IT Devices and Assets.
  • Involve IT Personnel in Project Delivery Teams.
  • Maintain an ITS Architecture.
  • Improve Data Communications Infrastructure.
Table 8. Systems and technology practices.
Challenge Description ID Effective Description Section #
Challenges maintaining legacy systems and deploying emerging technology. Tech-1 Develop long-range IT-TSMO framework. B.3.2
Challenges maintaining legacy systems and deploying emerging technology. Tech-1 Incorporate IT staff in systems engineering process. B.4.2
Challenges maintaining legacy systems and deploying emerging technology. Tech-1 Establish IT-TSMO project review. B.4.2
Challenges maintaining legacy systems and deploying emerging technology. Tech-1 Establish necessary decision support systems. B.5.2
Challenges maintaining legacy systems and deploying emerging technology. Tech-1 Create a data governance and management plan. B.5.2
Insufficient communication system bandwidth and redundancy for TSMO services. Tech-2 Develop long-range IT-TSMO framework. B.3.2
Insufficient communication system bandwidth and redundancy for TSMO services. Tech-2 Establish IT-TSMO project review. B.4.2
Insufficient communication system bandwidth and redundancy for TSMO services. Tech-2 Create a data governance and management plan. B.5.2
Complications with interoperability between agencies and partners. Tech-3 Develop formal agreement. B.1.2
Complications with interoperability between agencies and partners. Tech-3 Incorporate IT staff in systems engineering process. B.4.2
Complications with interoperability between agencies and partners. Tech-3 Establish IT-TSMO project review. B.4.2
Complications with interoperability between agencies and partners. Tech-3 Develop an integrated security system with IT staff. B.5.2
Complications with interoperability between agencies and partners. Tech-3 Define and coordinate data sharing and access agreements. B.5.2
Inability to fully utilize third-party data and crowdsourcing data and services. Tech-4 Develop long-range IT-TSMO framework. B.3.2
Inability to fully utilize third-party data and crowdsourcing data and services. Tech-4 Develop IT policies that support TSMO. B.3.2
Inability to fully utilize third-party data and crowdsourcing data and services. Tech-4 Develop an integrated security system with IT staff. B.5.2
Inability to fully utilize third-party data and crowdsourcing data and services. Tech-4 Define and coordinate data sharing and access agreements. B.5.2
Inability to fully utilize third-party data and crowdsourcing data and services. Tech-4 Create a data governance and management plan. B.5.2
Emerging technology in connected and autonomous vehicle (CAV) and Smart Cities requires significant IT resources. Tech-5 Integrate IT staff within TSMO unit. B.1.2
Emerging technology in connected and autonomous vehicle (CAV) and Smart Cities requires significant IT resources. Tech-5 Develop IT policies that support TSMO. B.3.2
Emerging technology in connected and autonomous vehicle (CAV) and Smart Cities requires significant IT resources. Tech-5 Incorporate IT staff in systems engineering process. B.4.2
Emerging technology in connected and autonomous vehicle (CAV) and Smart Cities requires significant IT resources. Tech-5 Adjust procurement process for TSMO. B.4.2
Emerging technology in connected and autonomous vehicle (CAV) and Smart Cities requires significant IT resources. Tech-5 Establish IT-TSMO project review. B.4.2
Emerging technology in connected and autonomous vehicle (CAV) and Smart Cities requires significant IT resources. Tech-5 Create a data governance and management plan. B.5.2
TSMO initiatives are impeded due to lack of IT flexibility in enterprise operations. Tech-6 Integrate IT staff within TSMO unit. B.1.2
TSMO initiatives are impeded due to lack of IT flexibility in enterprise operations. Tech-6 Develop IT policies that support TSMO. B.3.2
TSMO initiatives are impeded due to lack of IT flexibility in enterprise operations. Tech-6 Incorporate IT staff in systems engineering process. B.4.2
TSMO initiatives are impeded due to lack of IT flexibility in enterprise operations. Tech-6 Establish IT-TSMO project review. B.4.2
TSMO initiatives are impeded due to lack of IT flexibility in enterprise operations. Tech-6 Develop an integrated security system with IT staff. B.5.2
Designing complex ITS requires a systems engineering approach with which IT staff may not be familiar. Tech-7 Integrate IT staff within TSMO unit. B.1.2
Designing complex ITS requires a systems engineering approach with which IT staff may not be familiar. Tech-7 Incorporate IT staff in systems engineering process. B.4.2
Designing complex ITS requires a systems engineering approach with which IT staff may not be familiar. Tech-7 Establish IT-TSMO project review. B.4.2

(Source: FHWA.)

Risk and Security

Risk and security include those challenges associated with network security, data sharing, third-party applications, hosted or cloud platforms, and automation. Table 9 presents the risk and security challenge and practice relationships. As can be seen, various mixes of 12 practices can address the six principal risk and security challenges.

General practices beneficial to risk and security challenges:

  • Improve Communication.
  • Establish and Maintain Systems to Manage TSMO and IT Devices and Assets.
  • Involve IT Personnel in Project Delivery Teams.
  • Improve Data Communications Infrastructure.
Table 9. Risk and security practices.
Challenge Description ID Practice Description Section #
Cybersecurity vulnerabilities. Risk-1 Integrate IT staff within the TSMO. B.1.2
Cybersecurity vulnerabilities. Risk-1 Implement coordination policies. B.1.2
Cybersecurity vulnerabilities. Risk-1 Outsource services. B.2.2
Cybersecurity vulnerabilities. Risk-1 Develop an integrated security system with IT staff. B.5.2
Cybersecurity vulnerabilities. Risk-1 Define and coordinate data sharing and access agreements. B.5.2
Cybersecurity vulnerabilities. Risk-1 Create a data governance and management plan. B.5.2
Lack of robust data governance rules. Risk-2 Develop formal agreement. B.1.2
Lack of robust data governance rules. Risk-2 Define and coordinate data sharing and access agreements. B.5.2
Lack of robust data governance rules. Risk-2 Create a data governance and management plan. B.5.2
Increased sharing of information with third party can increase security risks. Risk-3 Develop formal agreement. B.1.2
Increased sharing of information with third party can increase security risks. Risk-3 Develop an integrated security system with IT staff. B.5.2
Increased sharing of information with third party can increase security risks. Risk-3 Define and coordinate data sharing and access agreements. B.5.2
Increased sharing of information with third party can increase security risks. Risk-3 Create a data governance and management plan. B.5.2
Location of TSMO network has impacts to security, support, and availability. Risk-4 Develop IT policies that support TSMO. B.3.2
Location of TSMO network has impacts to security, support, and availability. Risk-4 Incorporate IT staff in systems engineering process. B.4.2
Location of TSMO network has impacts to security, support, and availability. Risk-4 Develop an integrated security system with IT staff. B.5.2
Automated data sets and analyses can mask reliability issues. Risk-5 Mix TSMO staff and IT staff. B.2.2
Automated data sets and analyses can mask reliability issues. Risk-5 Establish necessary decision support systems. B.5.2
Automated data sets and analyses can mask reliability issues. Risk-5 Create a data governance and management plan. B.5.2
Field equipment is susceptible to physical damages. Risk 6 Form TSMO “approved product list.” B.4.2

(Source: FHWA.)

Practices

This section synthesizes the “lessons learned” through the project research and provides a range of current practices to deal with the common challenges described in the section above. The individual practices are categorized within functional groups based on common approaches.

It is important to understand, as discussed above, that combining practices may be helpful when dealing with specific challenges. That is, there is no one-to-one relationship from practices to challenges or from challenges to practices. Users of this document may wish to consider their context-specific issues from either direction.

In the discussion below, practices are grouped into five broadly defined categories:

  • Collaboration.
  • Staff capabilities.
  • Planning/programming.
  • Program delivery.
  • Equipment/systems.

Within each category, there are one or two general high-level approaches or practices that are beneficial for coordination as well as a set of specific practices that address specific challenges.

Specific agency examples are provided for individual practices based on interviews and outreach efforts.

Collaboration Practices

There are many challenges in coordinating and integrating TSMO and IT considerations that are encountered because of differences in culture, differential availability and applicability of resource needs, standard organizational structures and expectations, and technology considerations such as applicability and flexibility needs.

Each of these challenges requires new forms or levels of collaboration between TSMO and IT units, and their respective professionals. Such collaboration may be informal or formal. Examples of informal collaboration include increasing the understanding of IT and TSMO objectives, clarifying roles, and integrating staff. More formal efforts relate to modifying organization structures, implementing policies, and creating IGAs or memorandums of agreement (MOUs).

Collaboration General Practices
Improved Communication

The general practices supporting and reflecting improved collaboration depend heavily on improved communication among respective staffs, typically in the form of regular meetings or facilitated workshops. Initial meetings could take the form of a facilitated workshop or partnering session to develop a common understanding of each group’s business goals, needs, and priorities. The meetings could evolve into forming an IT advisory group that could identify and recommend solutions to a wide variety of issues that can produce benefits from both TSMO and IT perspectives.

Regularly Scheduled Meetings to Improve Communication

To promote mutual understanding and improve working relationships, the LADOTD and the Louisiana OTS meet on a regular basis to discuss IT needs for maintaining ITS operations. These meetings are attended by a “client manager” within the enterprise OTS that is assigned to the DOTD. These meetings have increased OTS’ understanding of ITS systems and improved its’lity to provide support. Similarly, the DOTD ITS staff now have a better knowledge of the enterprise OTS organization and how to obtain technical support.

Clarify Roles and Responsibilities

An important crosscutting activity, and a key product of improved communication, is to clarify the respective roles and responsibilities of TSMO versus IT units and staffs. Available organization charts and directive responsibilities can be helpful in this regard This is particularly important because it relates to shared facilities or functions, as can be the case between TSMO and IT, which can play an important role in reducing confusion in obtaining service, justifications, and approvals. Managing devices and assets is an example of the importance of identifying and clarifying roles and responsibilities. IT staff members have knowledge and experience in maintaining important IT-related assets and systems, IT-related service contracts, network devices and network management systems, software, and data analytics tools. Assigning IT staff to these assets and systems can prove to be effective and efficient.

Clarify Roles and Responsibilities

Like many public agencies, Florida DOT’s TSMO group has IT governance and support at both the enterprise level and the DOT level. Their enterprise level provides the State with guidance and strategic direction on areas such as cybersecurity and data analytics, while also providing master contracts for essential technology services. Within the DOT, the internal IT staff are responsible for aligning IT strategies and operations to support the safety and connectivity of the roadways.

Coordination between the various groups has been improved through targeted efforts to clarify roles and responsibilities. In general, the enterprise IT staff focuses on the IT security aspects, documentation, policy, and IT business processes while DOT IT staff focuses on the operational implementation of technology. Separate from both groups, the TSMO staff manages the ITS/TSMO related IT systems and devices.

Within the DOT, TSMO and DOT IT have clearly coordinated to better understand the skills and strengths of each other. Specific to planning efforts, TSMO included IT staff in developing the TSMO Strategic Plan and continue to clarify roles and responsibilities in the CAV Plan. From an ongoing perspective, senior managers from the IT group attend statewide TSMO, ITS, and CAV workshops to remain engaged with the TSMO related IT needs and issues. These ongoing efforts in the planning stages have improved coordination during the implementation stages.

Collaboration-Specific Practices

This project identified four specific practices with broad applicability across several challenges, as indicated in the challenge-driven section above:

  • Integrate IT staff within TSMO unit—Creating opportunities for IT staff to work within the TSMO structure on current activities can enhance collaboration and improve their understanding of the TSMO mission as well as the end-user experience of data and software platforms.

    These opportunities can range from permanent assignments to temporary rotations to routine (e.g., weekly or monthly) visits or assignments for specific projects. The assignments may include onsite IT support tasks or observing TSMO operations.

Integrate IT Staff Within TSMO Workgroups

The Pennsylvania Turnpike Commission (PTC) relies on its TSMO and IT staffs to maintain system functionality and provide continuous customer service. As is typically the case, the IT and TSMO staffs came from different backgrounds, which led to perceived or actual silos. Historically, this then led to “shadow IT” use by the TSMO staff (i.e., the use of technology without the knowledge or approval of the formal IT department).

To overcome these silos, the PTC integrated IT staff into its operations business so that there was better understanding and collaboration. An IT Advisory Board was established to provide overall technology direction and initiatives rather than just providing approvals on individual projects. The IT staff was also included in major efforts such as the TSMO CMM workshop.

The PTC now sends IT staff into the field three to four times a year to work with and observe operational field staff. This interaction provides IT staff with a better perspective of day-to-day operational needs and how IT can positively impact TSMO operations. This has also helped IT staff evolve from being strictly technology experts to understanding how IT relates to project management needs.

  • Modify organizational structure—Agencies can use organizational changes to formalize relationships within transportation agencies between TSMO and IT groups. The changes can range in degree from creating individual positions to creating small units to address coordination and collaboration between TSMO and IT. Organization charts can be used to reflect reporting relationships within transportation agencies where IT resources are part of the agency, indicating specialized oversight or coordination responsibilities. Organization charts may also illustrate relational links that clarify roles and assignments while keeping IT staff within the IT structure. In some cases, assignment of IT-TSMO liaison personnel can provide a valuable function.
  • Implement coordination policies—To increase interaction between the TSMO and IT groups, agencies can develop internal policies and procedures that require mandatory “touch points” for coordination through either existing or new processes. These efforts can relate to planning, scoping, project delivery, performance measures, security assessment and mitigation, or other steps that may involve both groups or would benefit from the input of both groups.
  • Develop Formal Agreement—Formal written agreements can serve an important function in clarifying to all involved parties the respective roles and responsibilities of the agencies party to the agreement. Formal agreements have the virtue of surviving changes in leadership or staffing. An MOU or an intergovernmental agreement (IGA) can serve as a formal contract documenting these roles and responsibilities.

    Even across internal agency divisions or offices, agreements may be important to have in writing. Such agreements may take the form of relatively informal memos or even emails or may be formalized in service-level agreements.

Increased IT-TSMO Coordination

Most Statewide IT departments or offices provide oversight of all IT efforts across the various State agencies, which often leads to approval processes that are very rule-driven and time consuming. In California, Caltrans found the approval process timeframes were creating delays in budget approvals and project delivery because of a lack of delegation outside the Department of Technology.

To combat the challenges, Caltrans identified a dedicated liaison to work directly with the Department of Technology staff to provide project justifications and gain internal approvals. The liaison was a senior staff member who had deep knowledge of the individual technology (hardware, software, data) and the how these pieces contribute to the agency’s goals and operational procedures. The IT liaison met weekly with the enterprise IT staff to discuss general issues and monthly to work on specific projects.

The coordination effort with the Department of Technology was beneficial and resulted in increased value to Caltrans. By involving IT staff early in the process, the Department of Technology could help develop the vision for the project, assist in procurement strategies, and assess the future IT maintenance and support needs. Similarly, the IT staff view the additional touchpoints positively and there has been increased interest in transportation, particularly with standardizing software, equipment, security, and big data.

Staff Capability Practices

A range of practices relate to staffing to access the necessary capabilities to support the IT function within TSMO programs. Staffing challenges range from defining the core technical capabilities required but also the availability of key resources on a 24/7 basis. Given scarce resources both within TSMO and IT functions at the State and unit levels, acquiring the needed capabilities may rely on several practices.

Staff Capabilities General Principles
Establish Staffing Needs

To facilitate IT coordination, any technology-based TSMO effort can detail the IT resources required to develop, operate, and maintain TSMO related IT functions or systems. This effort can be based on historical efforts (if available) or projected needs and can include required staff skillsets in addition to number of staff members. In response, IT organizational units can develop a staffing plan to ensure resources are available or a plan to obtain the skillsets both in the short-term and the long-term. A key consideration is defining the core capabilities that are required in-house on a recurring basis—versus specialized expertise that may be accessed through outsourcing.

Provide Staff Training

Appropriately combining knowledge, skills, and abilities (KSA) is essential for TSMO. Agencies may wish to access training opportunities for TSMO and IT staffs to build adequate internal resources and maintain consistency in the agency. Training not only increases staff and agency technical capability but can also provide promotional opportunities and indirectly increase retention through personal growth. Continuing training is also essential—at several levels—to maintain competence considering evolving technology and issues. Cross-training may be important to improve staff flexibility. There is a broad range of training modes—internal and external.

Staff Training Opportunities

The National Operations Center of Excellence provides a searchable TSMO training database that includes several IT-related topics, such as:

  • Data management and governance.
  • ITS procurement.
  • System security.
  • Telecommunications and networking.

On the same website, there is a section on student education that includes listings of undergraduate and graduate courses.

Staff Capabilities—Specific Practices

This project identifies three specific practices that can address challenges that relate to maintaining organizational culture, organizational structure, resource requirements and risk management:

  • Integrate TSMO staff and IT staff—The staffing of TSMO and IT, even where separate organizationally, can be integrated to deliver the required agency resources to maximize staff availability, staff knowledge, and coordination. Given fluctuating workloads, borrowing resources between the groups can help augment staffing and provide continued delivery and continuous availability of services. In critical situations such as equipment failures or after-hours efforts, this can result in quicker response times and less downtime.

Mix TSMO and IT Staffs

Within Maricopa County, AZ, a regional fiber network and data archival system was developed to support multiple public agencies across an entire metropolitan area and to integrate the various ITS systems. The coordination was led by a coalition formed in 1996, AZTech, which cooperates on regional ITS projects and consists of representatives from the various agencies.

To support the coalition, Maricopa County loaned an IT person to directly support the development of center-to-center communication and the fiber network. By assigning an IT person to the TSMO/ITS effort, the coalition could direct priorities and timeframes without outside influence from agency IT groups. After the initial fiber network was complete, the dedicated IT person remained embedded in the TSMO/ITS group, because they understood the operations and functions better than available enterprise IT groups. As efforts continued to build an archiving platform, data support became a critical function that was supported by a different dedicated role that specialized in TSMO data rather than relying on an IT generalist from an enterprise group.

Through shared resources between the partner agencies, dedicated IT and data staff remain who support the regional mission. Each staff member is available to the partner agencies to support the needs of the TSMO/ITS operational staff.

  • Outsource services—Outsourcing services, such as IT staffing, can provide agencies with the flexibility to properly staff for typical workloads while still obtaining resources when needed for specific skills, projects, or periods. Outsourced, external services can be provided in several ways, including defined project assignment or delivery, supplemental in-house staff, or as-needed on-call staffing. Outsourced services can be provided in different locations, onsite or remote. Outsourcing can be particularly attractive and effective for specialized skills, such as communication network management and cybersecurity assessment and mitigation. The procuring and contract managing of outsource service itself require special management skills and require advance planning.

Outsource Services—To IT Department

After the State of Michigan centralized all IT services in the Department of Technology, Management and Budget (DTMB), Michigan DOT’s TSMO Planning activities identified frustrations with working on IT issues. Michigan DOT ITS Program Office staff identified ways to work more effectively with DTMB. They included DTMB staff in all conversations from concept to implementation. ITS Program Office staff found they needed to better understand the “rules of engagement” on IT-related projects and that keeping DTMB staff involved to identify IT needs helped understanding on both sides. The ITS Program Office used their funds to have DTMB staff assigned to the ITS Program Office. Some areas of note where DTMB staff have been very helpful include:

  • Network addressing.
  • Allocating cybersecurity specialists.
  • Helping translate between IT and Operations staffs.

Before including DTMB staff from the very beginning of a project, Michigan DOT used to get far down the project/procurement path and fight to keep Michigan DOT the lead for software and technology procurement. Now they have a cooperative, hand-in-hand approach to use IT procurement processes and allow IT to manage the procurement. Michigan DOT consultants develop business requirements, and Michigan DOT uses the IT procurement process.

An example of this cooperation is in communication network development. Previously, Michigan DOT would design communication networks for a specific purpose with specific ITS equipment and specific network equipment. Then, adding other network equipment was often a problem because the original rules needed to be changed. The resulting problems could affect physical network or device addressing (assigning IP addresses) or the need for virtual private networks. Michigan DOT found that, in some circumstances, they needed to reconfigure the network. They are now thinking about working with DTMB staff to develop an overall network strategic plan to better configure the network for future needs.

Michigan DOT is leveraging the relationships between DTMB and the ITS Program Office for other types of systems, like signal systems. which are not included in the ITS Program Office.

  • Identify recruiting opportunities—Recruitment for TSMO- and IT-related positions in the current environment requires agencies to develop new approaches that widen the potential candidate pool. While some positions are filled by internal transfer, acquiring experienced staff require communication with potential hires from a wider variety of sources beyond recent graduates and other agencies. In addition, given private-sector competition, it may be important to emphasize the unique challenges and opportunities available in scope and scale of IT-TSMO efforts that may not be available in the private sector as well as identifying the conditions and employment career benefits (such as stability, defined career paths, technical exposure, pensions, and insurance) or public service (such as improving safety or congestion).

Improving Staff Recruitment and Development

DOTs can have trouble recruiting for positions that require multidisciplinary knowledge required in TSMO due to private industry competition and internal human resources constraints.

To combat this issue, in addition to hiring staff through their traditional human resources processes, FDOT augments general criteria with some potential TSMO roles and responsibilities within the job description. Once hired, staff is cross trained on the job with experienced in-house staff to develop the necessary knowledge, skills, and abilities to carry out the required job functions. Due to the increased need to train staff, FDOT has documented many of the IT processes so that there is standardized understanding of the systems, processes, and institutional knowledge is not lost.

While the above approach has worked in obtaining staff, it can be difficult to retain staff. Once trained, some staff have taken their increased skill levels and left for higher-paying opportunities after a few years. The State’s use of consultants for supplemental services has allowed some pay rates to increase to help provide more stability, but the agency still sees the most experienced persons leaving and/or retiring.

National Operations Center of Excellence Resources

The National Operations Center of Excellence provides valuable resources in workforce development. A page on their website provides guidance for recruiting TSMO positions. The guidance applies to a wide variety of positions, including those related to IT. The topics include:

  • Developing a recruitment plan.
  • Determining when to recruit.
  • Determining where to recruit.
  • Considering the use of a recruitment specialist.
  • Developing the screening and interview process.
  • Determining incentives.

Planning/Programming Practices

A range of practices relate to planning and programming of TSMO that require IT to support early plan coordination, develop long-range needs, and allocate and maintain adequate budgets.

Planning and programming challenges range from establishing the business case for TSMO in support of defining financial and staff needs, identifying the resources required for maintaining legacy systems and accessing new technology and data sources, and recognizing key IT specific policy and program issues.

Planning and Programming General Principles
Allocate Budgets and Resources Based on Historical Data

To ensure IT-TSMO budget and resource needs are sufficiently and accurately described, budget requests are most compelling when based on historical cost data as applied to anticipated future needs. Separating costs by function or area can be useful in applying for different funding sources, such as TSMO versus IT, and can assist in managing the budgets during the fiscal year.

Establish and Maintain Systems to Manage TSMO and IT Devices and Assets

A system that tracks TSMO and related IT devices and systems can assist an agency with planning and programming by evaluating the performance of existing equipment. Asset performance information can become more accurate and reliable as data is accumulated over equipment lifecycles to support development of annual maintenance and replacement costs, staffing needs, and general planning efforts. IT staff is often knowledgeable in incorporating IT devices and systems in management systems and in managing those assets.

Planning and Programming—Specific Practices

This project identifies three specific practices with broad applicability across several challenges as indicated in the challenge-driven section above:

  • Coordinate TSMO and IT Strategic Plans—Agencies can improve integration between TSMO and IT groups by coordinating their respective TSMO and IT Strategic Plans. It may be important to create nested plans, including strategic plans, program plans, and project-level plans. Though often separate, these plans can include overlapping functions and efforts to ensure appropriate planning and programming and to help identify common priorities and resources.

    The Pennsylvania Turnpike developed a technology planning approach that integrates IT and TSMO perspectives and staffs (see figure 2). There are three primary parts of this approach.

    • IT Needs Identification is the process to define needs and to prioritize projects. IT and TSMO groups are involved in setting priorities.
    • Business Plan and Project Prioritization, Monitoring, and Reporting is focused on delivering projects according to standards on schedule and on budget.
    • IT Needs Realization makes sure successful projects are delivered. This includes testing, but also taking correct action from security and change management perspectives.
Pennsylvania Turnpike first identifies IT needs with the help of IT and TSMO groups.

Figure 2. Flow chart. Pennsylvania Turnpike’s technology planning approach.
(Source: R. Taylor, Pennsylvania Turnpike Commission.)

Pennsylvania Turnpike first identifies IT needs with the help of IT and TSMO groups (i.e., business relationship management, IT advisory board, innovation council) and then creates projects for those needs. Business plan and project prioritization, monitoring, and reporting is the process of delivering those projects. Those deliverables are then reviewed and assessed via studies, requirements, procurement, and/or implementation. Pennsylvania Turnpike then assesses the business value of these deliverables to ensure that the needs of the business were met. Based on that assessment, the cycle restarts, and new IT needs are identified.
  • Develop long-range IT-TSMO framework—TSMO related IT resource needs can be identified and formally documented in a long-range IT-TSMO framework to provide both groups a guide for future needs. This framework can include known equipment and software needs (new or replacement), IT services or functions, and any planned or recurring maintenance efforts. Input within the framework can then be used to determine adequate internal staffing, as well as funding to cover continuous.
  • Develop IT policies that support TSMO—IT policies are developed for a wide range of efforts; they are often established at the Statewide level and may not adequately recognize the unique TSMO operational environment as related to staffing (such as 24/7 overtime) outsourcing, use of pre-approved equipment, software, and vendors. In addition, TSMO may introduce specific risk management features not otherwise identified attract within the IT operation.

Coordinate TSMO and IT Strategic Plans

To manage IT across the entire State, the Connecticut IT Division develops customer-specific five-year IT plans based on each agency’s objectives. The plans include defining technology needs and priorities, identifying funding sources (or gaps), and aligning business goals and initiatives with technology solutions.

Program Delivery Practices

TSMO has its own characteristic project delivery cycle—each of which may have an IT component. These practices help ensure active IT involvement with project planning, technical reviews, and procurement.

Program Delivery General Principles
Involve Information Technology Personnel in Project Delivery Teams

TSMO project delivery teams have comprised a wide range of subject matter experts, typically covering traffic operations, traffic safety, ITS, and traffic incident management and others.

The additional involvement of IT staff in project delivery can help ensure that State and agency policies relating to hardware, networking, and data management are followed. This involvement can also serve to speed or streamline the project delivery process because many of the primary groups who could have a say in the project would be represented on the team. It can also serve to build and cement relationships between IT and TSMO staffs by providing an opportunity to learn more about each other’s needs and work processes.

Use of Lifecycle Cost Models

TSMO projects typically involve long-term operational staffing, equipment costs, and maintenance activities that agencies account for and program. Input from both TSMO and IT groups—based on historical data for staffing effort, equipment costs, maintenance cycles, and effective lifespan of hardware and software—are important inputs to both TSMO and IT business planning and budgeting efforts. Future project resources and costs can be incorporated into annual operating costs for the respective owner and be coordinated with any system maintenance efforts. Properly considering project resources can insure smooth TSMO program delivery.

Develop Lifecycle Costs

The costs to deploy and maintain IT-TSMO systems are often significant and require annual resources, both in terms of staffing and maintenance. In many cases, over time, various groups deploy TSMO technology without considering product lifecycle, technical support, or replacement costs.

PennDOT developed an approach to evaluate their IT and ITS investments from a holistic lifecycle cost perspective. The largest hurdle involved in the lifecycle approach was inventorying everything in the field and understanding what was installed, what purpose it was serving, and how it related to other features. This required a systems approach to map out the inventory from the software platform to various network connections to field devices.

While the cost of staff resources who maintain and service the equipment increases with the number of assets installed, each PennDOT District also had preferred vendors and manufacturers. The preferences often differed by district, resulting in several different devices and systems across the State providing the same function. Consequently, staff and budget constraints within PennDOT prevented IT from supporting the number and variety of devices and systems. As a solution, PennDOT simplified the number of available manufacturers and required projects to remain within the standards to increase the efficiencies within the IT group and ultimately reduce recurring costs.

From the reverse perspective, adding technology to automate functions can also be beneficial to the lifecycle cost. PennDOT identified value in providing communication to traffic signal corridors and allowing remote connectivity. The increased upfront investment in technology offset the ongoing time investment for managing the signals and resulted in an overall cost savings, because staff could modify timing remotely.

Program Delivery—Specific Practices

This project identifies four specific practices with broad applicability across several challenges as indicated in the challenge-driven section above:

  • Incorporate IT staff in systems engineering process—While the systems engineering process does involve the design of hardware and software systems, it also involves systems integration, testing, and verification, which rely heavily on IT staff. The sequence of standard steps can be conducted specifically to provide multiple checkpoints for coordination with IT during project development. IT partners also add value to the process through expertise on operations, maintenance, and eventual upgrade, replacement, or retirement.
  • Establish TSMO approved product list—Many agencies use the same TSMO and IT products either in new installations or replacement activities. Developing an approved products list that complies with the jurisdiction’s procurement laws and regulations for recurrent purchases can reduce the procurement time for common TSMO equipment. In addition, prequalifying products can help reduce delivery time by eliminating or reducing the time required for research, evaluation, or approval—by either TSMO or IT staff as appropriate.
  • Adjust procurement process for TSMO—State and local procurement rule processes vary, and agencies can identify the best approach for TSMO and IT efforts that complies with their jurisdiction’s laws and regulations, given the required type of equipment or service that may be differentiated by scale (costs) complexity, continuity, use of proprietary technology TSMO Cooperation between TSMO and IT staffs can make it possible to select the most appropriate methods within the jurisdiction’s procurement rules and processes.
  • Establish IT-TSMO project review—Complex technology projects, where a full systems engineering approach is utilized, can include reviews by TSMO and IT participants. For smaller projects, an abbreviated review may be appropriate. These processes can include standard checklists and documented approvals by those TSMO and ITS staff members who review authority within their respective groups or units.

Equipment/Systems

TSMO systems and equipment rely on certain specific procedures to ensure functionality. These identified practices are wide ranging, from establishing security systems and improving communication infrastructure to data sharing and data management.

Equipment/Systems General Principles
Maintain an Intelligent Transportation Systems Architecture

ITS architectures provide a high-level framework that illustrate how existing and planned ITS elements interconnect and interface to exchange information and collectively deliver transportation services and functions. The development of the ITS architecture can include the agencies that have a role in the various systems to ensure consensus among the owners and users. Within each agency, the involvement of IT staff in ITS architecture activities can increase mutual understanding of the system requirements, data needs, communication, and security.

Agencies may undertake periodic reviews and updates to keep the architecture relevant with new services and emerging technologies.

Improve Data Communications Infrastructure

Newer technology systems provide increased surveillance, data, and analysis but generate and use significantly more data, both in terms of volume and velocity. Therefore, the functionality of technology systems relies on data transmission. The health of the data communications infrastructure is critical to reliable operations—including considerations of capacity, reliability and redundancy, and security. The network evaluation and improvement can extend beyond a single agency. Options for infrastructure sharing with neighboring agencies, public-private partnerships, and lease lines can improve network reliability at a reduced or shared cost.

Equipment and Systems—Specific Practices

This project identifies four specific practices with broad applicability across several challenges, as indicated in the Challenges section:

  • Develop an integrated security system with IT staff—An information security system can be part of an overall risk management program and include both physical and electronic risks to the TSMO functions. A formal, documented risk assessment can be prepared with IT staff that identifies potential threats and vulnerabilities, their associated probability, and potential impact. An integrated security system may need to be modified from traditional or enterprise IT security requirements. TSMO and IT staffs can evaluate the implications of the various system configurations and determine the impact to functionality, security, staffing, and convenience.

Joint IT-TSMO Cybersecurity Risk Management Exercise

Michigan DOT’s ITS Program Office wanted to assess the cybersecurity vulnerability of their ITS network. They found it was difficult and expensive to get their maintenance contractor to provide this service. Instead, they worked with the State of Michigan DTMB cybersecurity group and had them analyze their networks. DTMB identified cyber risks and informed Michigan DOT about the vulnerabilities. Michigan DOT now has robust rules and firewalls to keep operations networks and enterprise networks secure.

DTMB also identified risks with partner agencies that share the Michigan DOT network. The partner agencies do not have the same in-house expertise that Michigian DOT has with DTMB. Partner agencies may not be able to mitigate the identified security risks and vulnerabilities that were identified, but they are aware of them and Michigan DOT has acknowledged those risks. Michigan DOT may be able to use the DTMB equipment to analyze the network again in the future.

  • Establish necessary decision support systems—Decision support systems provide analytical tools that utilize available data to reach an operational decision that supports the TSMO objectives ranging from automated real-time systems to offline manual systems. Including IT resources during the development of decision support systems may expand capabilities for data mining, analysis, visualization, and process automation.
  • Define and coordinate data sharing and access agreements—Shared access within a technology platform can increase the functionality of the system by allowing wider use, more timely operation, or other factors. External agencies may access a platform to observe operations, control the system, extract data, or other purposes. It is good practice for shared access to be mutually agreed upon and for associated access agreements between the parties to clarify access rights, restrictions, and security protocols. Associated data-sharing agreements between the parties can clarify the data source, data type or format, delivery method, and appropriate security and sharing restrictions.
  • Create a data governance and management plan—Technology systems generate a significant amount of data that may create a challenge for agencies to manage and control. A data management plan can be used to identify how data is collected, organized, stored, and archived. Because much of this calls for database management, it is important that IT resources are involved early in the process to determine appropriate process and analytics, data sources, formats, storage location, as well as data access, ownership, version control, integrity, quality, control, and security protocols. Formally documenting the data management efforts can help TSMO and IT staffs operate more efficiently and assist during staff turnover.