Chapter 936 Oregon Laws 2001

AN ACT

HB 3372

Relating to information technology; creating new provisions; and amending ORS 181.715, 181.720 and 181.725.

Be It Enacted by the People of the State of Oregon:

SECTION 1. As used in sections 2 and 3 of this 2001 Act:

(1) “Information technology” includes, but is not limited to, all present and future forms of hardware, software and services for data processing, office automation and telecommunications.

(2) “State agency” includes every state officer, board, commission, department, institution, branch or agency of the state government whose costs are paid wholly or in part from funds held in the State Treasury, except the Secretary of State, the State Treasurer, the Legislative Assembly, the courts and their officers and committees.

SECTION 2. (1) The purposes of information technology portfolio-based management are to:

(a) Ensure that state agencies link their information technology investments with business plans;

(b) Facilitate risk assessment of information technology projects and investments;

(c) Ensure that state agencies justify information technology investments on the basis of sound business cases;

(d) Ensure that state agencies facilitate development and review of information technology performance related to business operations;

(e) Identify projects that can cross agency and program lines to leverage resources; and

(f) Assist in state government-wide planning for common, shared information technology infrastructure.

(2) The Oregon Department of Administrative Services shall integrate state agency strategic and business planning, technology planning and budgeting and project expenditure processes into the department's information technology portfolio-based management.

(3) In cooperation with state agencies, the department shall conduct and maintain a continuous inventory of each state agency's current and planned investments in information technology, a compilation of information about those assets and the total life cycle cost of those assets. The department shall develop and implement state government-wide standards, processes and procedures for the required inventory and for the management of the state government-wide information technology portfolio. State agencies shall participate in the information technology portfolio-based management and shall comply with the standards, processes and procedures established by the department under this subsection. The provisions of this subsection do not relieve any state agency from accountability for equipment, materials, supplies and tangible and intangible personal property under its control.

(4) The department shall ensure that state agencies implement portfolio-based management of information technology resources in accordance with this section and with rules adopted by the Director of the Oregon Department of Administrative Services.

(5) This section does not apply to competitive research grants and contracts at institutions of higher education listed in ORS 352.002.

(6) In implementing the provisions of this section, the department shall submit state government-wide policies for review to the Joint Legislative Committee on Information Management and Technology.

SECTION 3. (1) The purpose of enterprise management is to create a plan and implement a state government-wide approach for managing distributed information technology assets to minimize total ownership costs from acquisition through retirement, while realizing maximum benefits for transacting the state's business and delivering services to its citizens.

(2) With input and recommendations from state agencies, the Oregon Department of Administrative Services shall develop a plan for the state government-wide management of distributed information technology assets. The plan shall prescribe the state government-wide infrastructure and services for managing these assets. The plan shall be submitted to the Joint Legislative Committee on Information Management and Technology for review.

(3) Following review by the Joint Legislative Committee on Information Management and Technology, the department shall ensure state agency implementation of the plan, including the development of appropriate standards, processes and procedures.

(4) State agencies shall participate in the enterprise management of information technology assets and shall comply with the standards, processes and procedures of the department.

(5) This section does not apply to competitive research grants and contracts at institutions of higher education listed in ORS 352.002.

SECTION 4. ORS 181.715 is amended to read:

181.715. (1) The Department of State Police or another criminal justice agency designated by the Director of the Oregon Department of Administrative Services shall [establish] operate a Criminal Justice Information Standards program that coordinates information among state criminal justice agencies. The program shall:

(a) Ensure that in developing new information systems, data can be retrieved to support evaluation of criminal justice planning and programs, including, but not limited to, the ability of the programs to reduce future criminal conduct;

(b) Ensure that maximum effort is made for the safety of public safety officers;

(c) Establish methods and standards for data interchange and information access between criminal justice information systems, in compliance with the technology standards and policies of the Oregon Department of Administrative Services;

(d) Design and implement improved applications for exchange of agency information; and

(e) Implement the capability to exchange images between criminal justice agencies.

(2) The program shall develop a plan to accelerate data sharing and information integration among criminal justice agencies. The plan shall include, but is not limited to, priorities, timelines, development costs, resources needed, the projected ongoing cost of support, critical success factors and any known barriers to accomplishing the plan. Representatives of criminal justice agencies and public safety agencies, including but not limited to local law enforcement agencies, courts of criminal jurisdiction, district attorneys, city attorneys with criminal prosecutive functions, public defender organizations established under ORS chapter 151, community corrections directors, jail managers and county juvenile departments, shall be invited to participate in the planning process. The program shall present the plan to the Director of the Oregon Department of Administrative Services no later than May 30 of each even-numbered year for development of the Governor's budget report. The program shall submit the plan to the Joint Legislative Committee on Information Management and Technology no later than December 31 of each even-numbered year.

[(2)] (3) Notwithstanding the meaning given “criminal justice agency” in ORS 181.010, as used in this section and ORS 181.720, “criminal justice [agencies] agency” includes, but is not limited to:

(a) The Judicial Department;

(b) The Attorney General;

[(b)] (c) The Department of Corrections;

[(c)] (d) The Department of State Police;

(e) Any other state agency with law enforcement authority designated by order of the Governor;

[(d)] (f) The Department of Transportation;

[(e)] (g) The State Board of Parole and Post-Prison Supervision;

[(f)] (h) The Department of Public Safety Standards and Training;

[(g)] (i) The State Department of Fish and Wildlife;

[(h)] (j) The Oregon Liquor Control Commission;

[(i)] (k) The Oregon Youth Authority; and

[(j)] (L) The State Commission on Children and Families.

SECTION 5. ORS 181.720 is amended to read:

181.720. (1) State criminal justice agencies, as part of their biennial budget requests and information resource management [plan] plans, shall address the goals of the Criminal Justice Information Standards program with particular attention to:

(a) Data access, availability and information sharing among criminal justice agencies; and

(b) The plan developed under ORS 181.715.

(2) [The] Information resource management plans must be based on industry standards for open systems to the greatest extent possible.

(3) A state criminal justice agency shall submit a copy of its information resource management plan to the Criminal Justice Information Standards Advisory Board.

SECTION 6. ORS 181.725 is amended to read:

181.725. (1) There is established a Criminal Justice Information Standards Advisory Board to advise the Department of State Police [in] or the criminal justice agency designated by the Director of the Oregon Department of Administrative Services under ORS 181.715 (1) about the department's or the agency's duties under ORS 181.715. The board consists of the following members:

(a) The State Court Administrator or the administrator's designee;

(b) The Director of the Department of Corrections or the director's designee;

(d) The executive director of the Oregon Criminal Justice Commission or the executive director's designee;

(e) The Director of Transportation or the director's designee;

(f) The chairperson of the State Board of Parole and Post-Prison Supervision or the chairperson's designee;

(g) The Director of the Department of Public Safety Standards and Training or the director's designee;

(h) A chief of police designated by the Oregon Association of Chiefs of Police;

(i) A sheriff designated by the Oregon Sheriffs' Association;

(j) A jail manager designated by the Oregon Jail Managers' Association;

(k) A county juvenile department director designated by the Oregon Juvenile Department Directors' Association;

(L) A community corrections agency director designated by the Oregon Association of Community Corrections Directors;

(m) A district attorney designated by the Oregon District Attorneys' Association;

[(k)] (n) The administrator of the information resource management division of the Oregon Department of Administrative Services or the administrator's designee;

[(L)] (o) The Director of the Oregon Youth Authority or the director's designee;

[(m)] (p) The State Fish and Wildlife Director or the director's designee;

[(n)] (q) The administrator of the Oregon Liquor Control Commission or the administrator's designee; and

[(o)] (r) The staff director of the State Commission on Children and Families or the staff director's designee.

(2) The board shall meet at such times and places as the board deems necessary.

(3) The members of the board are not entitled to compensation but are entitled to expenses as provided in ORS 292.495.

SECTION 7. (1) The Secretary of State shall implement portfolio-based management of information technology resources, as described in this section, to:

(a) Ensure that the Office of the Secretary of State links its information technology investments with business plans;

(b) Facilitate risk assessment of information technology projects and investments;

(c) Ensure that the office justifies information technology investments on the basis of sound business cases;

(d) Ensure that the office facilitates development and review of information technology performance related to business operations;

(e) Identify projects that can cross agency and program lines to leverage resources; and

(f) Assist in state government-wide planning for common, shared information technology infrastructure.

(2) The Secretary of State shall integrate strategic and business planning, technology planning and budgeting and project expenditure processes into the Secretary of State's information technology portfolio-based management.

(3) The Secretary of State shall conduct and maintain a continuous inventory of current and planned investments in information technology, a compilation of information about those assets and the total life cycle cost of those assets.

(4) The Secretary of State shall develop and implement standards, processes and procedures for the required inventory and for the management of the information technology portfolio.

(5) As used in this section, “information technology” has the meaning given that term in section 1 of this 2001 Act.

SECTION 8. (1) The State Treasurer shall implement portfolio-based management of information technology resources, as described in this section, to:

(a) Ensure that the office of the State Treasurer links its information technology investments with business plans;

(b) Facilitate risk assessment of information technology projects and investments;

(c) Ensure that the office justifies information technology investments on the basis of sound business cases;

(d) Ensure that the office facilitates development and review of information technology performance related to business operations;

(e) Identify projects that can cross agency and program lines to leverage resources; and

(f) Assist in state government-wide planning for common, shared information technology infrastructure.

(2) The State Treasurer shall integrate strategic and business planning, technology planning and budgeting and project expenditure processes into the State Treasurer's information technology portfolio-based management.

(3) The State Treasurer shall conduct and maintain a continuous inventory of current and planned investments in information technology, a compilation of information about those assets and the total life cycle cost of those assets.

(4) The State Treasurer shall develop and implement standards, processes and procedures for the required inventory and for the management of the information technology portfolio.

(5) As used in this section, “information technology” has the meaning given that term in section 1 of this 2001 Act.

Approved by the Governor August 9, 2001

Filed in the office of Secretary of State August 9, 2001

Effective date January 1, 2002

__________