# DBAOps Blueprint

Enterprise Infrastructure Manual

A comprehensive SQL Server infrastructure management platform built to ensure operational excellence, security compliance, and unwavering reliability for Arizona's law enforcement technology backbone.

Organization Arizona Department of Public Safety
Division Information Management Bureau
Author John Bosco Gakumba
Document Date January 2026
Version 1.0 | Classification: Internal Use
1

## Executive Summary

"DBAOps represents a paradigm shift in how the Arizona Department of Public Safety manages its critical database infrastructure. Built over a year of dedicated effort, this platform embodies our commitment to operational excellence, security compliance, and the safety of Arizona's citizens."

— John Bosco Gakumba, DBAOps Architect

The DBAOps Blueprint documents the comprehensive SQL Server infrastructure management platform developed by the Information Management Bureau (IMB) at the Arizona Department of Public Safety. This enterprise-grade solution consolidates monitoring, compliance assessment, and operational management into a unified dashboard, providing real-time visibility across all database systems that support Arizona's law enforcement operations.

🖥️
119
SQL Servers Managed
🗄️
1,308
Databases Monitored
🛡️
4
Compliance Frameworks
📊
85
Documentation Links
📂
62
DevOps Projects
✅
98%
Tier Compliance

### Key Achievements

- Unified Monitoring: Consolidated 119 SQL Server instances into a single management interface
- Compliance Automation: Automated CJIS, NIST, STIG, and DISA security assessments
- Proactive Operations: Real-time alerting with tiered escalation procedures
- Documentation Integration: Seamless Azure DevOps integration with 62+ project links
- Help Desk Enablement: One-stop center for application-to-server mapping and contacts

2

## Introduction & Purpose

### Why DBAOps Was Built

The Arizona Department of Public Safety operates one of the most critical technology infrastructures in the state, supporting law enforcement operations that directly impact public safety. Our SQL Server environment hosts databases containing sensitive criminal justice information, requiring the highest levels of security, availability, and compliance.

Before DBAOps, managing this complex environment presented significant challenges:

- Multiple disconnected monitoring tools requiring manual correlation
- Time-consuming compliance assessments conducted through spreadsheets
- Lack of visibility into patch status across the enterprise
- Difficulty tracking application-to-database relationships
- No centralized documentation repository for operational procedures
- Inconsistent escalation procedures during critical incidents

DBAOps was conceived by John Bosco Gakumba as the answer to these challenges - a single pane of glass providing comprehensive visibility, automated compliance verification, and streamlined operations for our entire SQL Server infrastructure.

### Mission Alignment

DBAOps directly supports the AZDPS mission by ensuring the technology infrastructure that powers law enforcement operations remains secure, compliant, and highly available. Every feature has been designed with our core responsibilities in mind:

- Protect Criminal Justice Information: CJIS compliance monitoring ensures sensitive data remains protected
- Ensure Operational Continuity: Proactive monitoring prevents outages that could impact officer safety
- Maintain Audit Readiness: Automated compliance scoring enables rapid audit response
- Enable Rapid Response: Integrated documentation and escalation procedures reduce incident resolution time

### Guiding Principles

🔒
Security First
Every decision prioritizes the protection of criminal justice information and system integrity.
📊
Data-Driven
Decisions are based on real-time metrics and historical trends, not assumptions.
⚡
Operational Excellence
Streamlined processes that reduce manual effort and human error.
🤝
Collaborative
Built to empower both DBA teams and Help Desk staff with relevant information.
3

## The Journey - One Year of Excellence

The development of DBAOps represents a full year of dedicated effort, collaboration, and continuous improvement. Conceived and architected by John Bosco Gakumba, this journey has been marked by countless hours of design, development, testing, and refinement - all driven by a shared commitment to excellence and the understanding that our work directly impacts public safety.

"What started as a vision for better infrastructure management has evolved into a comprehensive platform that transforms how we operate. This achievement would not have been possible without the dedication of our teams and the support of leadership."

### Development Timeline

Q1 2025
Foundation & Architecture
Established core database schema, server inventory framework, and initial data collection mechanisms. Defined compliance tier structure aligned with CJIS requirements.
Q2 2025
Compliance Framework Integration
Implemented CJIS, NIST, STIG, and DISA compliance scoring. Developed automated assessment procedures and remediation tracking capabilities.
Q3 2025
Dashboard Development
Created the visual dashboard interface with real-time metrics, interactive charts, and drill-down capabilities. Implemented dark theme design aligned with 24/7 operations center requirements.
Q4 2025
Advanced Features & Integration
Added Help Desk integration, Azure DevOps documentation links, SQL Intelligence, and patch management tracking. Refined alerting and escalation procedures.
January 2026
Production Release & Documentation
Full production deployment with 119 servers monitored. Completed comprehensive documentation including this DBAOps Blueprint. Integrated 62 Azure DevOps projects and 85 documentation links.

### By the Numbers

📅
12
Months of Development
👥
15+
Team Contributors
📝
50+
Database Objects
💻
10K+
Lines of Code
4

## Platform Capabilities

DBAOps delivers a comprehensive suite of capabilities designed to address every aspect of SQL Server infrastructure management. From real-time monitoring to compliance automation, each feature has been carefully crafted to meet the unique requirements of a law enforcement technology environment.

### Infrastructure Monitoring

🖥️
Server Inventory Management
Complete visibility into all 119 SQL Server instances with environment classification, version tracking, and health status monitoring.
🗄️
Database Monitoring
Track 1,308 databases with size metrics, state monitoring, and application mapping for rapid issue identification.
💾
Disk Space Management
Proactive disk space monitoring with configurable thresholds for critical, warning, and caution alerts across 361 drives.
⏰
SQL Agent Job Tracking
Monitor job execution status, track failures, and receive alerts for job anomalies before they impact operations.

### Compliance & Security

🛡️
CJIS Compliance Scoring
Automated assessment of Criminal Justice Information Services security requirements with continuous monitoring.
📋
Multi-Framework Support
Integrated compliance tracking for NIST, STIG, DISA, and FedRAMP frameworks with unified scoring.
🔐
Security Metrics
Track security findings with pass/fail/accepted risk categorization and remediation tracking.
🏷️
Compliance Tier Assignment
Four-tier classification system (CJIS Critical, CJ Operations, Administrative, Dev/Test) for appropriate security controls.

### Operational Excellence

🔄
Patch Management
Track SQL Server patch status with 81.42% compliance visibility and prioritized remediation lists.
💿
Backup Monitoring
Comprehensive backup status tracking with Veeam repository integration and backup age alerting.
🚨
Alert Management
Real-time alerting with severity levels, acknowledgment workflow, and escalation procedures.
🔧
Remediation Tracking
Unified view of servers needing attention with 63 tracked issues and prioritized remediation.

### Help Desk & Documentation

🎯
One-Stop Help Desk Center
Unified interface for application mapping, server contacts, and documentation access.
📂
Azure DevOps Integration
Direct links to 62 Azure DevOps projects with searchable documentation and SOPs.
🔍
Global Search
Search across servers, databases, jobs, applications, DevOps projects, and documentation.
📞
Escalation Contacts
Quick access to DBA on-call contacts, application owners, and escalation procedures.
5

## Technical Architecture

DBAOps is built on a robust, scalable architecture designed for reliability and performance. The platform leverages proven Microsoft technologies combined with modern web standards to deliver a responsive, real-time monitoring experience.

### Architecture Overview

🖥️
SQL Servers
(119 Instances)
→
⚙️
PowerShell
Collection
→
🗄️
Repository
Database
→
📄
JSON
Data File
→
🌐
Web
Dashboard

### Core Components

Component | Technology | Purpose
--- | --- | ---
Repository Database | SQL Server 2022 | Central storage for all inventory, metrics, and configuration
Data Collection | PowerShell | Automated scripts gathering data from managed servers
Web Dashboard | HTML5/CSS3/JavaScript | Interactive visualization and user interface
Scheduling | SQL Server Agent | Automated job execution for data refresh (every 5 minutes)
Source Control | Azure DevOps Server | Version control, documentation, and project management

### Database Schema Organization

The DBAOps repository database uses logical schemas to organize objects by function:

Schema | Purpose | Key Objects
--- | --- | ---
`config` | Configuration and settings | ServerInventory, DocumentationLinks, ApplicationMapping
`dashboard` | Dashboard views and reporting | vw_ServerSummary, vw_ComplianceScorecard
`compliance` | Compliance assessments | Frameworks, Controls, AssessmentResults
`monitoring` | Performance and health data | DiskSpace, SQLIntelligence
`backup` | Backup monitoring | BackupHistory, vw_BackupStatus
`patch` | Patch management | ServerPatchStatus, vw_PatchCompliance

### Server Infrastructure

Central Server: AZDBAOPSSQL01
Database: DBAOpsRepository
Web Path: E:\DBAOps\WebDashboard
Azure DevOps: http://azdevops19:8080/tfs/EnterpriseCollection

6

## Compliance Frameworks

Operating in the law enforcement sector requires strict adherence to multiple security and compliance frameworks. DBAOps automates the assessment and tracking of compliance across four major frameworks, ensuring continuous compliance visibility and audit readiness.

The integration of NIST, CJIS, DISA, and other compliance documentation has been invaluable in shaping DBAOps' security posture. These frameworks provide the foundation for our automated compliance scoring and ensure alignment with federal and state security requirements.

### Supported Frameworks

CJIS
Criminal Justice Information Services
FBI security policy for criminal justice information, mandatory for all systems handling CJI data. DBAOps monitors all 13 policy areas with continuous assessment.
NIST
National Institute of Standards and Technology
Cybersecurity framework providing guidelines for managing cybersecurity risk. DBAOps implements NIST 800-53 controls for comprehensive security coverage.
DISA STIG
Defense Information Systems Agency
Security Technical Implementation Guides providing DoD-hardened configuration standards. SQL Server STIG compliance ensures military-grade security.
FedRAMP
Federal Risk and Authorization Management
Government-wide program for security assessment of cloud services. Supports Azure Government compliance requirements for cloud-hosted components.

### Compliance Tier Structure

Servers are classified into compliance tiers based on the sensitivity of data they handle, enabling appropriate security controls and response procedures:

Tier | Classification | Description | Response SLA
--- | --- | --- | ---
Tier 1 | CJIS Critical | Direct access to criminal justice information | Immediate
Tier 2 | CJ Operations | Supporting criminal justice operations | 15 minutes
Tier 3 | Administrative | Business and administrative functions | 1 hour
Tier 4 | Dev/Test | Non-production environments | Next business day

### Current Compliance Status

3,658
Controls Passed
1,976
Controls Failed
504
Accepted Risks
98%
Tier Deployment
7

## Core Features Deep Dive

### Dashboard Overview

The DBAOps dashboard provides a comprehensive view of the entire SQL Server infrastructure at a glance. Key metrics, alerts, and status indicators are displayed prominently, enabling rapid situation assessment.

#### Key Dashboard Components

- Server Health Summary: Real-time status of all 119 servers with online/offline indicators
- Compliance Scorecard: Framework-by-framework compliance percentages
- Alert Panel: Active alerts with severity classification
- SQL 2016 Migration Tracker: 29 servers requiring upgrade before July 2026 EOS
- Disk Space Overview: Critical, warning, and caution drive counts
- Patch Compliance: 81.42% compliance with upgrade recommendations

### Help Desk One-Stop Center

The Help Desk tab provides a unified interface for support staff to quickly find information about any system, application, or contact:

- Universal Search: Search servers, applications, contacts, and documentation in one place
- Application Mapping: 120 application-to-server mappings for quick lookup
- Documentation Links: 85 SOPs, runbooks, and reference documents
- Azure DevOps Projects: Direct links to 62 project repositories
- Escalation Contacts: DBA on-call and application owner information

### SQL Intelligence

Advanced analytics and recommendations for database optimization:

- Version distribution analysis across the enterprise
- Performance trend identification
- Index usage recommendations
- Query optimization suggestions
- Resource utilization patterns

### Backup and Recovery

Comprehensive backup monitoring ensures data protection:

- Backup status tracking for 124 servers
- Veeam repository monitoring (4 repositories)
- Backup age alerting with configurable thresholds
- Recovery point objective (RPO) compliance tracking

8

## Acknowledgments

The success of DBAOps is a testament to the collaborative spirit of the Arizona Department of Public Safety. This platform was built through the combined efforts of dedicated professionals who share a commitment to excellence and the safety of Arizona's citizens.

### Platform Architect & Creator

JBG

## John Bosco Gakumba

SQL Database Administrator

DBAOps Architect & Creator

The visionary architect behind DBAOps, John Bosco Gakumba conceived, designed, and developed this comprehensive infrastructure management platform over the course of one year. His dedication to operational excellence and deep expertise in SQL Server administration have resulted in a tool that transforms how AZDPS manages its critical database infrastructure.

Technologies & Resources
PowerShell T-SQL HTML/CSS JavaScript JSON DBA Tools
Azure AI GitHub YouTube Research Open Source Internal Docs Web Research

### Leadership & Guidance

We extend our deepest gratitude to the leadership team whose vision and support made this project possible:

TV
Thomas Vaught
Applications Manager
Information Management Bureau, App Proj & Prog Sect
MS
Matt Stinchcomb
Applications Developer
Information Management Bureau, App Proj & Prog Sect
TB
Tony Blaksley
Technical Services Manager
Technical Services Division

### DBA Team & Core Contributors

The dedicated professionals who contributed countless hours to design, develop, test, and refine DBAOps:

DB
David Branscome
Database Administrator
DBA Team
RG
Reana
Database Administrator
DBA Team
RG
Ronnie Garrett
Computer Systems Administrator
Technical Services

### Development & Systems Engineering

KD
Kurt Dreyer
Advanced Systems Engineer
Information Management Bureau, IT Section
NB
Nicolas Bond
Advanced Systems Engineer
Information Management Bureau, IT Section
PM
Preethi Mayakrishnan
Applications Developer
Information Management Bureau, App Proj & Prog Sect
TC
Tim Colburn
Advanced Applications Developer
Information Management Bureau, App Proj & Prog Sect
WB
Wendy Backstrom
Team Member
Information Management Bureau
MT
Micah Treat
Contractor
Information Management Bureau

### Supporting Teams

We also acknowledge the invaluable contributions from:

- Cloud Services Team: For Azure infrastructure support and cloud security guidance
- Network Operations: For ensuring reliable connectivity across all managed servers
- Security Team: For compliance framework guidance and security assessments
- Help Desk Team: For feedback that shaped the Help Desk One-Stop Center
- All AZDPS Support Staff: Whose daily work inspires our commitment to excellence

To everyone who contributed: Your dedication, expertise, and commitment to excellence have made DBAOps a reality. This platform stands as a testament to what we can achieve when we work together toward a common goal - supporting the mission of the Arizona Department of Public Safety.

9

## Future Roadmap

DBAOps will continue to evolve to meet the changing needs of AZDPS. The following enhancements are planned for future releases:

### Planned Enhancements

📱
Mobile Dashboard
Responsive mobile interface for on-call DBAs to monitor critical systems from anywhere.
🤖
AI-Powered Insights
Machine learning integration for predictive issue detection and automated recommendations.
📧
Enhanced Alerting
Microsoft Teams integration for real-time notifications and collaborative incident response.
📊
Advanced Reporting
Automated compliance reports for audit submissions and executive dashboards.

### SQL Server 2016 Migration Priority

Critical: 29 SQL Server 2016 instances require upgrade before End of Support (July 2026). DBAOps will track migration progress with 167 days remaining until EOS.

10

## Technical Appendix

### File Locations

Component | Path
--- | ---
Web Dashboard | `E:\DBAOps\WebDashboard\index.html`
Data JSON File | `E:\DBAOps\WebDashboard\data.json`
PowerShell Scripts | `E:\DBAOps\PowerShell\`
SQL Scripts | `E:\DBAOps\SQL\`
Documentation | `E:\DBAOps\Documentation\`

### Key Scripts

Script | Purpose | Schedule
--- | --- | ---
`Get-DBAOpsDashboardData.ps1` | Generates dashboard JSON data | Every 5 minutes
`Get-DBAOpsAssessment.ps1` | Generates user manual documentation | On demand

### Database Connection

Server: AZDBAOPSSQL01
Database: DBAOpsRepository
Authentication: Windows Integrated

### Azure DevOps Integration

Base URL: `http://azdevops19:8080/tfs/EnterpriseCollection`
Primary Project: Database Administration
Total Projects: 62

### Version History

Version | Date | Author | Changes
--- | --- | --- | ---
1.0.0 | January 2026 | John Bosco Gakumba | Initial production release with full feature set