SB 201 — An Act establishing the office of information technology; relating to information technology projects undertaken by state agencies; and providing for an effective date.

33-LS1014\S33-LS1014\B CS FOR SENATE BILL NO.

201(STA)201 IN THE LEGISLATURE OF THE STATE OF ALASKA THIRTY-THIRD LEGISLATURE - SECOND SESSION BY THESENATOR SENATEKAUFMAN STATEIntroduced: AFFAIRS COMMITTEE Referred:

Finance1/24/24 Sponsor(s):Referred:

SENATORState KAUFMANAffairs, Finance A BILL FOR AN ACT ENTITLED "An Act establishing the office of information technology;

(a) The office shall (1) overseeadopt, allfully informationdocument, technology services and resourcesimplement ina thestandardized executiveprocess branchfor ofmanaging stateinformation government;technology projects;

(2) ensuremanage that information technology servicesprojects areusing acquired, and information resources are managed, in a mannerstandardized, thatfully effectivelydocumented implementsprocess standardestablished policies, procedures, security controls, and theoverseen business priorities established by SB0201Bthe -1-director CSSBas 201(STA)described Newin TextAS Underlined44.21.630; [DELETED TEXT BRACKETED] 33-LS1014\S executive branch agencies;

(3)SB0201A promote-1- theSB effective201 andNew efficientText designUnderlined and[DELETED operationTEXT ofBRACKETED] all33-LS1014\B (3) ensure that major information resourcestechnology projects are completed on time and managementwithin processesbudget forand themeet state;all defined business requirements upon completion;

(4) overseeensure thethat development,minor implementation, and enforcement of information technology securityprojects policies,follow standards,processes andestablished practicesby inthe alloffice; executive branch agencies, contractors of executive branch agencies, and third-party, information-sharing partners of executive branch agencies;

(5) employestablish aprocedures chief information security officer to assistlimit the chiefneed informationfor officer;change requests.

the chief information security officer is chosen by the chief information officer and serves at the pleasure of the chief information officer;

(6) develop strategies and specific plans for hiring, training, and professional development to rectify deficiencies in information technology security policies, standards, and practices;

(7) identify and inventory all computer equipment owned by the state and determine, in consultation with department heads, the equipment that should be disposed of as surplus property under AS 44.68.110;

(8) adopt, fully document, and implement a standardized process for managing information technology projects;

(9) manage information technology projects using a standardized, fully documented process established and overseen by the director as described in AS 44.21.630;

(10) ensure that major information technology projects are completed on time and within budget and meet all defined business requirements upon completion;

(11) ensure that minor information technology projects follow processes established by the office;

(12) establish procedures to limit the need for change requests.

CSSB 201(STA) -2- SB0201B New Text Underlined [DELETED TEXT BRACKETED] 33-LS1014\S (2) that does not duplicate a capability already existing in the state;

(d) The director may adopt regulations that the director considers necessary to implement AS 44.21.600 - 44.21.660.44.21.650.

The director shall immediately suspend or cancel an information technology project that is initiated SB 201 -2- SB0201A New Text Underlined [DELETED TEXT BRACKETED] 33-LS1014\B without the director's approval.

(c) A state agency may request that the governor review the director's decision to reject, suspend, or cancel an information technology project,project or the director's decision not to enter into an agreement under AS 44.21.650, by submitting a written SB0201B -3- CSSB 201(STA) New Text Underlined [DELETED TEXT BRACKETED] 33-LS1014\S request for review to the governor within 15 business days after receiving written notice of the director's decision.

The directordirectall shall establish standards SB0201A -3- SB 201 New Text Underlined [DELETED TEXT BRACKETED] 33-LS1014\B for project managers and project management assistants.

The director shall continue to monitor system performance and financial aspects of each CSSB 201(STA) -4- SB0201B New Text Underlined [DELETED TEXT BRACKETED] 33-LS1014\S project after implementation.

A state agency project SB 201 -4- SB0201A New Text Underlined [DELETED TEXT BRACKETED] 33-LS1014\B manager shall ensure that applicable quality assurance standards are met, as determined by the director.

(f) For a minor information technology project, the directhalldirector shall designate a project management assistant from the office.

A SB0201B -5- CSSB 201(STA) New Text Underlined [DELETED TEXT BRACKETED] 33-LS1014\S project management assistant designated under this subsection shall advise the state agency undertaking an information technology project on the initial planning of a project, the content and design of requests for proposals, contracts, procurement, and architectural and other technical reviews.

Exemptions.

(a) The director may enter into a written agreement with a state agency that exempts the state agency from the requirements of AS 44.21.600 - 44.21.660 and authorizes the state agency to approve and monitor all information technology projects undertaken by the state agency.

The written agreement must (1) require the state agency to comply with (A) standardized processes adopted under AS 44.21.610(a);

(B) standardized processes adopted under AS 44.21.610(a) with a list of variations;

or (C) standardized processes adopted by the state agency;

(2) require the state agency to comply with (A) standardized processes established under AS 44.21.630;

(B) standardized processes established under AS 44.21.630 with a list of variations;

or (C) standardized processes adopted by the state agency that include documentation requirements, project management processes, and qualifications for project managers;

(3) include a plan for the state agency to fulfill obligations with contractors;

(4) allow the state agency to designate an employee of the state agency CSSB 201(STA) -6- SB0201B New Text Underlined [DELETED TEXT BRACKETED] 33-LS1014\S or a contractor as a project manager;

and (5) require the state agency to submit periodic reports to the director, including updates to the state agency's biennial information technology plan as provided in AS 44.21.610(c).

(b) The director may enter into a written agreement with a state agency that exempts an information technology project undertaken by the state agency from a requirement of AS 44.21.600 - 44.21.660.

The written agreement must detail the requirement that is waived, how the state agency will deviate from the requirement, and the purpose of the deviation.

(c) If the director decides not to enter into a written agreement with a state agency under (a) or (b) of this section, the director shall provide in writing to the state agency and the office of management and budget the specific grounds for the decision.