AB 18 — Revises provisions relating to the Division of Enterprise Information Technology Services of the Department of Administration. (BDR 19-218)

A.B.Assembly Bill No.

1818–Committee ASSEMBLYon BGovernment ILLNAffairs O.CHAPTER..........

18–COMMITTEE ON G OVERNMENT A FFAIRS (ON BEHALF OF THE DIVISION OF ENTERPRISE INFORMATION TECHNOLOGY S ERVICES OF THE D EPARTMENT OF A DMINISTRATION ) PREFILED N OVEMBER 16, 2022 ____________ Referred to Committee on Government Affairs SUMMARY—Revises provisions relating to the Division of Enterprise Information Technology Services of the Department of Administration.

(BDR 19-218) FISCAL NOTE:

Effect on Local Government:

No.

Effect on the State:

Yes.

~ EXPLANATION – Matter in bolded italics is new;

matter between brackets [omitted material] is material to be omitted.

(1) the andAdministrator; Computing Unit;

(2) the Enterprise Application Services Unit;

(3) the Communication and Computing Unit;

Existing lawcationlaw further provides that the Communication and Computing Unit consists of a Communications Group and Telecommunications Group.

(1) the Administration Unit,Computing ofServices whichUnit; the Administrator is the head;

(2)(4) the ClientNetwork Services Unit;Unit, which consists of a (3) the Network Transport Services Group and Telecommunications Group;

(3)and (5) the ComputingOffice Servicesof Unit;Information Security.

(4) the Network Services Unit, which consists of a Office of Information Security.

Existing law defines “equipment” in relation to the responsibilities and duties of the Division as any machine or device designated for the automatic handling of - *AB18* – 2 – information, including but not limited to recording, storage, transmission and retrieval.means any machine or device designed for the electronic handling of data orpment” information, including, without limitation, for the acquisition, storage, processing, management, use, maintenance, display, distribution, disposal, transmission and retrieval of data or information.

(NRSExisting 242.051)law Sectiondefines 1“information ofsystem” thisin billrelation providesto insteadthe thatresponsibilities “equipment”and meansduties anyof machine or device designed for the electronicDivision handlingas ofany datacommunications or information,computer including,equipment, withoutcomputer limitation,software, forprocedures, thepersonnel acquisition,or storage,technology processing,used management,to use,collect, maintenance,process, display,distribute distribution, disposal, transmission and retrieval of data or store information.

Existing(NRS law242.057) definesSection “information2 system”of inthis relationbill toprovides theinstead responsibilitiesthat and software, firmware, procedures, personnel or technology used to collect,acquire, store, process, distributemanage, use, maintain, display, distribute, dispose of, transmit or storeretrieve data or information.

(NRSExisting 242.057)law Sectionsets 2forth ofa thislegislative billdeclaration providesstating, insteadin thatrelevant “informationpart, system”that meansthe anycreation communicationsof orthe computerDivision equipment,is software,necessary firmware,for procedures,the personnelcoordinated, ororderly technologyand usedeconomical toprocessing acquire,of store,information process,in manage,State use,Government. maintain, display, distribute, dispose of, transmit or retrieve data or information.

Existing(NRS law242.071) setsSection forth3 a legislative declaration stating, in relevant part, that the creation of thethis Division is necessary for the coordinated, orderly and economical bill revises the existing legislative declaration related to the creation of the Division to provide that the Division is also necessary for the coordinated, orderly and econExisting law provides that to facilitate the economical processing of data inthroughout the State Government.Government, the Division may, under certain circumstances, provide service for agencies not under the control of the Governor.

Existing(NRS law242.141) providesSection that5 toof facilitatethis thebill economicalauthorizes processingthe ofDivision datato throughoutalso theprovide Stateservice Government,for thesuch Division- may,82nd underSession certain(2023) circumstances,– provide2 service– for agencies notto underfacilitate the controleconomical processing of information throughout the Governor.State Government.

(NRSon 242.141)the Sectioneffective 5administration and use of thisthe billcomputer authorizesfacility, theincluding Divisionsecurity to alsoprevent provideunauthorized serviceaccess forto suchdata. Government.

facilitate the economical processing of information throughout the State Existing law requires the Administrator of the Division to advise using agencies on the effective administration and use of the computer facility, including security to prevent unauthorized access to data.

ExistingSecurity lawto authorizesinform thecertain Administratorboards or Chiefcommissions of theany Officeunauthorized ofacquisitionon Information of computerized data that materially compromises the security, confidentiality or integrity of an information system.

(NRS 242.183) Section 7 of this bill authorizes the Administrator or Chief to also inform such boards or commissions of unauthorized acquisition of computerized information that materially compromises the security, confidentiality or integrity of an information system.

compromises EXPLANATION – Matter in bolded italics is new;

matter between brackets [omitted material] is material to be omitted.

- *AB18* – 3 – Sec.

- 82nd Session (2023) – 3 – (b) To provide technical advice but not administrative control of the information systems within the state agencies and, as authorized, of local governmental agencies.

242.080Technology 1.Services of the Department is hereby created.

The Division of Enterprise Information Technology2. Services of the Department is hereby created.

2.

The Division may provide services, including, without limitation, purchasing services, to a local governmental agency upon request, if provision of such services will result in reduced costs to the State for equipment and services.serSec.

- *AB18* – 4 – Sec.

Sec.- 82nd Session (2023) – 4 – 242.183 1.

7.The Chief of the Office of Information Security:

NRSshall 242.183investigate isand herebyresolve amendedany tobreach readof asan follows:information system of a state agency or elected officer that uses the equipment or services of the Division or an application of such an information system or unauthorized acquisition of computerized data that materially compromises the security, confidentiality or integrity of such an information system.