FINAL BILL REPORT

ESSB 5891

C 33 L 13 E 2

Synopsis as Enacted

Brief Description: Concerning state technology expenditures.

Sponsors: Senate Committee on Ways & Means (originally sponsored by Senators Hill and Hargrove).

Senate Committee on Ways & Means

House Committee on Government Operations & Elections

Background: The Department of Enterprise Services (DES) provides a variety of support services to state agencies and other governmental entities. DES combines services from the former departments of General Administration and Printing, and sections of the former departments of Personnel and Information Services (DIS). Several divisions from the Office of Financial Management (OFM) are also part of the new agency. As part of the agency reorganization, a majority of service provision duties were transferred from DIS to Consolidated Technology Services (CTS), including server hosting, network administration, telephony, security administration, and email.

The Technology Services Board (TSB) consists of six members appointed by the Governor and four legislators. TSB focuses on information technology strategic vision and planning; enterprise architecture; policy and standards; and major project oversight.

Under the Personnel System Reform Act of 2002, state agencies are authorized to contract out for services if the displaced classified employees are provided an opportunity to provide an alternative to the contracting out. This process is known as competitive contracting.

TSB may approve contracting for services and activities related to the operation and management of the State Data Center. If approval is granted by TSB, CTS is exempt from the requirements for competitive contracting. Additionally, TSB may approve contracting for other services and activities by CTS if those services are recommended by the Chief Information Officer through a business plan and TSB approves. If approval is granted by TSB, those services and activities are exempt from the requirements for competitive contracting.

The Office of the Chief Information Officer (OCIO) is within OFM. OCIO is responsible for the preparation and implementation of a strategic information technology (IT) plan and enterprise architecture for the state. OCIO works toward standardization and consolidation of IT infrastructure and establishes IT standards and policies. OCIO prepares a biennial state performance report on IT, evaluates current IT spending and budget requests, and oversees major IT projects, including procurements.

Summary: OCIO must coordinate with state agencies with an annual IT expenditure that exceeds $10 million to implement an IT business management program to monitor financial performance and identify savings and efficiencies. OCIO must develop statewide purchasing standards for technology networking equipment and services.

Competitive purchasing statutes do not apply to IT purchases by state agencies if the purchase is $100,000 or less, the purchase is approved by OCIO, and the agency director and OCIO prepare a public document providing a detailed justification.

OCIO must evaluate proposed IT expenditures and establish a priority ranking of the proposals. Not more than one-third of the proposed expenditures may be ranked in the highest priority category.

Higher education institutions must provide OCIO with information on proposed expenditures on business and administrative IT applications to allow OCIO to evaluate the expenditure.

Legislative and judicial agencies must provide OCIO with information on proposed IT expenditures to allow OCIO to evaluate the expenditure on an advisory basis.

Subject to funding, OFM may establish an IT investment pool and enter into contracts for IT purchases if the purchase replaces IT systems with more modern and efficient systems, or if the project improves the ability of an agency to recover from a major disaster.

CTS must review state telecommunications and information networks with the objective of agency network consolidation in CTS, with a report due to OFM and the Legislature in September 2013.

OCIO must inventory state legacy IT systems and develop a plan for modernization and funding, with a report due to OFM and the Legislature in September 2014.

OCIO must develop statewide standards for data security, and state agencies must prepare and annually update a data security plan. The existing public disclosure exemption for data security plans is clarified and refined.

Votes on Final Passage:

Second Special Session