COMMITTEE SUBSTITUTE
FOR
COMMITTEE SUBSTITUTE
FOR
Senate Bill No. 653
(By Senators Tomblin, Mr. President, and Sprouse,
By Request of the Executive)
____________
[Originating in the Committee on Government Organization;
reported February 27, 2006.]
____________
A BILL to amend and reenact §5A-6-1, §5A-6-2, §5A-6-4, §5A-6-5 and
§5A-6-6 of the Code of West Virginia, 1931, as amended; and to
amend said code by adding thereto three new sections,
designated §5A-6-4a, §5A-6-4b and §5A-6-9, all relating to the
Office of Technology; making legislative findings; defining
technical infrastructure, information technology projects and
steering committee; detailing duties, powers and authority of
the Chief Technology Officer; developing four-year strategic
plan, inventory and specifications for the maintenance of
information technology and technical infrastructure;
promulgating legislative and emergency rules; securing state
government information; managing information technology and establishing a Project Management Office; requiring state
spending units to provide notice and obtain approval of Chief
Technology Officer for certain information technology and
telecommunication projects; and establishing and administering
the West Virginia Technology Infrastructure Fund.
Be it enacted by the Legislature of West Virginia:
That §5A-6-1, §5A-6-2, §5A-6-4, §5A-6-5 and §5A-6-6 of the
Code of West Virginia, 1931, as amended, be amended and reenacted;
and that said code be amended by adding thereto three new sections,
designated §5A-6-4a, §5A-6-4b and §5A-6-9, all to read as follows:
ARTICLE 6. OFFICE OF TECHNOLOGY.
§5A-6-1. Findings and purposes.
The Legislature finds and declares that information technology
is essential to finding practical solutions to the everyday
problems of government, and that the management goals and purposes
of government are furthered by the development of compatible,
linked information systems across government. Therefore, it is the
purpose of this article to create, as an integral part of the
Department of Administration, the Office of Technology with the
authority to advise and make recommendations to all state spending
units on their information systems
and to have the authority to
oversee coordination of the state's technical infrastructure.
§5A-6-2. Definitions.
As used in this article:
(a) "Information systems" means computer-based information equipment and related services designed for the automated
transmission, storage, manipulation and retrieval of data by
electronic or mechanical means;
(b) "Information technology" means data processing and
telecommunications hardware, software, services, supplies,
personnel, maintenance and training, and includes the programs and
routines used to employ and control the capabilities of data
processing hardware;
(c) "Information equipment" includes central processing units,
front-end processing units, miniprocessors, microprocessors and
related peripheral equipment, including data storage devices,
networking equipment, services, routers, document scanners, data
entry equipment, terminal controllers, data terminal equipment,
computer-based word processing systems other than memory
typewriters;
(d) "Related services" include feasibility studies, systems
design, software development and time-sharing services whether
provided by state employees or others;
(e) "Telecommunications" means any transmission, emission or
reception of signs, signals, writings, images or sounds of
intelligence of any nature by wire, radio or other electromagnetic
or optical systems. The term includes all facilities and equipment
performing those functions that are owned, leased or used by the
executive agencies of state government;
(f) "Chief Technology Officer" means the person holding the
position created in section three of this article and vested with authority to
assist oversee state spending units in planning and
coordinating information systems that serve the effectiveness and
efficiency of the
state and individual state spending units and
further the overall management goals and purposes of government;
and
(g) "Experimental program to stimulate competitive research"
(EPSCoR) means the West Virginia component of the national EPSCoR
program which is designed to improve the competitive research and
development position of selected states through investments in
academic research laboratories and laboratory equipment. The
recognized West Virginia EPSCoR, which is part of the Office of
Technology, is the responsible organization for the coordination
and submission of proposals to all federal agencies participating
in the EPSCoR program.
(g) "Technical infrastructure" is defined as all information
systems, information technology, information equipment,
telecommunications and related services as defined in this section;
(h) "Information technology project" means the process by
which telecommunications, automated data processing, databases, the
internet, management information systems and related information,
equipment, goods and services are planned, procured and
implemented.
(i) "Major information technology project" means any
information technology project estimated to cost more than one
hundred thousand dollars or require more than three hundred man
hours to complete; and
(j) "Steering committee" means an internal agency oversight
committee established jointly by the Chief Technology Officer and
the agency requesting the project upon approval to proceed with the
development and acquisition of a major technology project, which
shall include representatives from the Office of Technology and at
least one representative from the agency requesting the project.
§5A-6-4. Powers and duties; professional staff.
(a) With respect to all state spending units the Chief
Technology Officer may:
(1) Develop an organized approach to information resource
management for this state;
(2) Provide, with the assistance of the Information Services
and Communications Division of the Department of Administration,
technical assistance to the administrators of the various state
spending units in the design and management of information systems;
(3) Evaluate, in conjunction with the Information Services and
Communications Division, the economic justification, system design
and suitability of information equipment and related services, and
review and make recommendations on the purchase, lease or
acquisition of information equipment and contracts for related
services by the state spending units;
(4) Develop a mechanism for identifying those instances where
systems of paper forms should be replaced by direct use of
information equipment and those instances where applicable state or
federal standards of accountability demand retention of some paper
processes;
(5) Develop a mechanism for identifying those instances where
information systems should be linked and information shared, while
providing for appropriate limitations on access and the security of
information;
(6) Create new technologies to be used in government, convene
conferences and develop incentive packages to encourage the
utilization of technology;
(7) Engage in any other activities as directed by the
Governor;
and
(8) Charge a fee to the state spending units for evaluations
performed and technical assistance provided under the provisions of
this section. All fees collected by the Chief Technology Officer
shall be deposited in a special account in the State Treasury to be
known as the Chief Technology Officer Administration Fund.
Expenditures from the fund shall be made by the Chief Technology
Officer for the purposes set forth in this article and are not
authorized from collections but are to be made only in accordance
with appropriation by the Legislature and in accordance with the
provisions of article three, chapter twelve of this code and upon
the fulfillment of the provisions set forth in article two, chapter
eleven-b of this code. Amounts collected which are found to exceed
the funds needed for purposes set forth in this article may be
transferred to other accounts or funds and redesignated for other
purposes by appropriation of the Legislature;
(9) Monitor trends and advances in information technology and
technical infrastructure;
(10) Develop a comprehensive, statewide, four-year strategic
information technology and technical infrastructure policy and
development plan to be submitted to the Governor and the Joint
Committee on Government and Finance, including, but not limited to:
(i) a discussion of specific projects to implement the plan; (ii)
a discussion of the acquisition, management and use of information
technology by state agencies; (iii) a discussion of connectivity,
priorities and interoperability of the state's technical
infrastructure with the technical infrastructure of political
subdivisions and encouraging the coordinated development of
facilities and services regarding homeland security, law
enforcement and emergency services to
provide for the continuity of
government operations in times of disaster or emergency
; (iv) a
discussion identifying potential market demand areas in which
expanded resources and technical infrastructure may be expected;
(v) a discussion of technical infrastructure as it relates to
education and health; (vi) a discussion of the use of public-
private partnerships in the development of technical infrastructure
and technology services; and (vii) a discussion of coordinated
initiatives in website architecture and technical infrastructure to
modernize and improve government to citizen services, government to
business services, government to government relations and internal
efficiency and effectiveness of services, including a discussion of
common technical data standards and common portals to be utilized
by state, county and local governmental units;
(11) Direct the formulation and promulgation of policies, guidelines, standards, and specifications for the development and
maintenance of information technology and technical infrastructure,
including, but not limited to: (i) standards to support state and
local government exchange, acquisition, storage, use, sharing, and
distribution of electronic information; (ii) standards concerning
the development of electronic transactions, including the use of
electronic signatures; (iii) standards necessary to support a
unified approach to information technology across the totality of
state government, thereby assuring that the citizens and businesses
of the state receive the greatest possible security, value, and
convenience from investments made in technology; (iv) guidelines
directing the establishment of statewide standards for the
efficient exchange of electronic information and technology,
including technical infrastructure, between the public and private
sectors; (v) technical and data standards for information
technology and related systems to promote efficiency and
uniformity; (vi) technical and data standards for the connectivity,
priorities, and interoperability of technical infrastructure used
for homeland security, public safety and health, and systems
reliability necessary to provide continuity of government
operations in times of disaster or emergency for all state, county
and local governmental units; and (vii) technical and data
standards for the coordinated development of infrastructure related
to deployment of electronic government services among state, county
and local governmental units;
(12) Oversee and administer the West Virginia Technology Infrastructure Fund;
(13) Periodically evaluate the feasibility of subcontracting
information technology resources and services, and to subcontract
only those resources that are feasible and beneficial to the state;
(14) Direct the compilation and maintenance of an inventory of
information technology and technical infrastructure of the state,
including infrastructure and technology of all state, county and
local governmental units, which may include personnel, facilities,
equipment, goods and contracts for service, wireless tower
facilities, geographic information systems and any technical
infrastructure or technology that is used for law enforcement,
homeland security or emergency services;
(15) Develop job descriptions and qualifications necessary to
perform duties related to information technology as outlined in
this article; and
(16) Promulgate legislative rules, in accordance with the
provisions of chapter twenty-nine-a of this code, as may be
necessary to standardize and make effective the administration of
the provisions of article six of this chapter. Pending legislative
approval of the legislative rules, the Chief Technology Officer may
by emergency rule prescribe policies, procedures and standards
relating to information technology within the state.
(b) With respect to executive agencies, the Chief Technology
Officer may:
(1) Develop a unified and integrated structure for information
systems for all executive agencies;
(2) Establish, based on need and opportunity, priorities and
time lines for addressing the information technology requirements
of the various executive agencies of state government;
(3) Exercise the authority inherent to the chief executive of
the state as delegated by the Governor may, by executive order,
delegate, to overrule and supersede decisions made by the
administrators of the various executive agencies of government with
respect to the design and management of information systems and the
purchase, lease or acquisition of information equipment and
contracts for related services;
(4) Draw upon staff of other executive agencies for advice and
assistance in the formulation and implementation of administrative
and operational plans and policies; and
(5) Recommend to the Governor transfers of equipment and human
resources from any executive agency and the most effective and
efficient uses of the fiscal resources of executive agencies, to
consolidate or centralize information-processing operations.
(c) The Chief Technology Officer may employ the personnel
necessary to carry out the work of the Office of Technology and may
approve reimbursement of costs incurred by employees to obtain
education and training.
§5A-6-4a. Additional duties of the Chief Technology Officer
relating to security of government information.
(a) To ensure the security of state government information and
the data communications infrastructure from unauthorized uses,
intrusions, or other security threats, the Chief Technology Officer shall direct the development, adoption and training of policies,
procedures, and standards as prescribed by legislative rule
promulgated in accordance with the provisions of chapter twenty-
nine-a of this code to minimize vulnerability to threats, and to
regularly assess security risks, determine appropriate security
measures and perform security audits of government information
systems and data communications infrastructures. At a minimum,
these policies, procedures and standards shall identify and require
the adoption of practices to safeguard information systems, data
and communications infrastructures, as well as define the scope and
regularity of security audits and which bodies are authorized to
conduct security audits. The audits may include reviews of
physical security practices.
(b) The Chief Technology Officer shall provide for periodic
security audits of all executive branch agencies regarding the
protection of government databases and data communications.
(1) Security audits may include, but are not limited to, on-
site audits as well as reviews of all written security procedures
and documented practices;
(2) The Chief Technology Officer may contract with a private
firm or firms that specialize in conducting these audits;
(c) All public bodies subject to the audits required by this
section shall fully cooperate with the entity designated to perform
the audit;
(d) The Chief Technology Officer may direct specific
remediation actions to mitigate findings of insufficient administrative, technical and physical controls necessary to
protect state government information or data communication
infrastructures; and
(e) The provisions of this section shall not infringe upon
responsibilities assigned to the State Comptroller, the Auditor or
the Legislative Auditor, or other statutory requirements.
§5A-6-4b. Additional project management duties of the Chief
Technology Officer; establishment of the Project Management
Office and of steering committees.
(a) The Chief Technology Officer shall have the following
duties relating to the management of information technology
projects:
(1) Develop an approval process for proposed major information
technology projects by state agencies to ensure that all projects
conform to the statewide strategic plan and the information
management plans of agencies;
(2) Establish a methodology for conceiving, planning,
scheduling and providing appropriate oversight for information
technology projects, including oversight for the projects and a
process for approving the planning, development and procurement of
information technology projects;
(3) Establish minimum qualifications and training standards
for project managers;
(4) Direct the development of any statewide and multi-agency
enterprise project; and
(5) Develop and update a project management methodology to be
used by agencies in the development of information technology.
(b) The Chief Technology Officer shall develop a Project
Management Office within the Office of Technology that will have
the following powers and duties:
(1) Implement the approval process for information technology
projects;
(2) Assist the Chief Technology Officer in the development and
implementation of a project management methodology to be used in
the development and implementation of information technology
projects in accordance with this article;
(3) Provide ongoing assistance and support to state agencies
and public institutions of higher education in the development of
information technology projects;
(4) Establish a program providing training to agency project
managers;
(5) Review information management and information technology
plans submitted by agencies and recommend to the Chief Technology
Officer the approval of the plans and any amendments thereto;
(6) Monitor the implementation of information management and
information technology plans and periodically report its findings
to the Chief Technology Officer;
(7) Assign project managers to review and recommend
information technology project proposals based on criteria
developed by the Division based on: (i) the degree to which the
project is consistent with the State's overall strategic plan; (ii) the technical feasibility of the project; (iii) the benefits of the
project to the State, including customer service improvements; (iv)
the risks associated with the project; (v) any continued funding
requirements; and (vi) the past performance on other projects by
the agency; and
(8) Provide oversight for state agency information technology
projects.
(c) Prior to proceeding with a major information technology
project, an agency shall submit a project proposal, outlining the
business need for the project, the proposed technology solution, if
known, and an explanation of how the project will support the
agency's business objective and the state's strategic plan for
information technology. The project manager may require the
submission of additional information as needed to adequately review
any proposal.
(d) The proposal will further include: (i) a detailed
business case plan, including a cost-benefit analysis; (ii) a
business process analysis, if applicable; (iii) system
requirements, if known; (iv) a proposed development plan and
project management structure; (v) business goals and measurement
criteria, as appropriate; and (vi) a proposed resource or funding
plan.
(e) The project manager assigned to review the project
development proposal shall recommend its approval or rejection to
the Chief Technology Officer. If the Chief Technology Officer
approves the proposal, then he or she shall notify the agency of its approval.
(f) Whenever an agency has received approval from the Chief
Technology Officer to proceed with the development and acquisition
of a major information technology project, the Chief Technology
Officer shall establish a steering committee.
(g) The steering committee shall provide ongoing oversight for
the major information technology project and have the authority to
approve or reject any changes to the project's scope, schedule, or
budget.
(h) The Chief Technology Officer shall ensure that the major
information technology project has in place adequate project
management and oversight structures for addressing the project's
scope, schedule or budget and shall address issues that cannot be
resolved by the steering committee.
§5A-6-5. Notice of request for proposals by state spending units
required to make purchases through the State Purchasing
Division.
Any state spending unit that pursues an information technology
purchase that does not meet the definition of a "major technology
project" and that is required to submit a request for proposal to
the State Purchasing Division prior to purchasing goods or services
shall notify obtain the approval of the Chief Technology Officer,
in writing, of any proposed purchase of goods or services related
to its information technology and telecommunication systems. The
notice shall contain a brief description of the goods and services to be purchased. The state spending unit shall provide the notice
to the Chief Technology Officer at the same prior to the time it
submits its request for proposal to the State Purchasing Division.
§5A-6-6. Notice of request for proposals by state spending units
exempted from submitting purchases to the State Purchasing
Division.
(a) Any state spending unit that is not required to submit a
request for proposal to the State Purchasing Division prior to
purchasing goods or services shall notify the Chief Technology
Officer, in writing, of any proposed purchase of goods or services
related to its information technology or telecommunication systems.
The notice shall contain a detailed description of the goods and
services to be purchased. The state spending unit shall provide the
notice to the Chief Technology Officer a minimum of ten days prior
to the time it requests bids on the provision of the goods or
services.
(b) If the Chief Technology Officer evaluates the suitability
of the information technology and telecommunication equipment and
related services under the provisions of subdivision (3),
subsection (a), section four of this article and determines that
the goods or services to be purchased are not suitable, he or she
shall, within ten days of receiving the notice from the state
spending unit, notify the state spending unit, in writing, of any
recommendations he or she has regarding the proposed purchase of
the goods or services. If the state spending unit receives a written notice from the Chief Technology Officer within the time
period required by this section, the state spending unit shall not
put the goods or services out for bid less than fifteen days
following receipt of the notice from the Chief Technology Officer.
§5A-6-9. Establishment and administration of the West Virginia
Technology Infrastructure Fund.
(a) There is hereby created in the State Treasury a special
fund to be named the West Virginia Technology Infrastructure Fund
to be administered by the Office of Technology.
(b) The West Virginia Technology Infrastructure Fund shall be
an interest bearing account and may be invested as permitted by
law. Any unexpended balance in the fund at the end of the fiscal
year shall not be transferred to the general fund of the State
Treasury. Funds paid into the account shall be derived from the
following sources:
(1) Specific appropriations to the fund made by the
legislature;
(2) Any gifts, grants, bequests, transfers or donations that
may be received from any governmental entity or unit, or any
person, firm, foundation or corporation; and
(3) Interest or investments accrued to the fund.
(c) The funds shall be used by the Chief Technology Officer to
fund information technology projects and cost-saving initiatives
that will drive additional standardization, consolidation and
integration of the state's technical infrastructure or to eliminate
obsolete technologies that pose a substantial risk to the state's technical environment. Any balance remaining in the fund shall
remain in the fund and be used for information technology projects
and cost-saving initiatives.
__________
(NOTE: The purpose of this bill is to clarify duties of the
Chief Technology Officer and to add duties relating to the security
of government information and to the management of technology
projects. The bill also established the West Virginia Technology
Infrastructure Fund.
Strike-throughs indicate language that would be stricken from
the present law, and underscoring indicates new language that would
be added.
§5A-6-4a, §5A-6-4b, and §5A-6-9 are new; therefore, strike-
throughs and underscoring have been omitted.)