71st OREGON LEGISLATIVE ASSEMBLY--2001 Regular Session
 
NOTE:  Matter within  { +  braces and plus signs + } in an
amended section is new. Matter within  { -  braces and minus
signs - } is existing law to be omitted. New sections are within
 { +  braces and plus signs + } .
 
LC 3119
 
                           A-Engrossed
 
                         House Bill 3372
                  Ordered by the House April 26
            Including House Amendments dated April 26
 
Sponsored by Representatives HILL, PATRIDGE
 
 
                             SUMMARY
 
The following summary is not prepared by the sponsors of the
measure and is not a part of the body thereof subject to
consideration by the Legislative Assembly. It is an editor's
brief statement of the essential features of the measure.
 
  Requires Oregon Department of Administrative Services and state
agencies to implement portfolio-based management of information
technology resources. Requires department to develop and
implement plan for managing distributed information technology
assets. { +  Requires Department of State Police to develop plan
for integration of information technology among criminal justice
agencies. + }
 
                        A BILL FOR AN ACT
Relating to information technology; creating new provisions; and
  amending ORS 181.715.
Be It Enacted by the People of the State of Oregon:
  SECTION 1.  { + As used in sections 2 and 3 of this 2001 Act:
  (1) 'Information technology' includes, but is not limited to,
all present and future forms of hardware, software and services
for data processing, office automation and telecommunications.
  (2) 'State agency' includes every state officer, board,
commission, department, institution, branch or agency of the
state government whose costs are paid wholly or in part from
funds held in the State Treasury, except the Secretary of State,
the State Treasurer, the Legislative Assembly, the courts and
their officers and committees. + }
  SECTION 2.  { + (1) The purposes of information technology
portfolio-based management are to:
  (a) Ensure that state agencies link their information
technology investments with business plans;
  (b) Facilitate risk assessment of information technology
projects and investments;
  (c) Ensure that state agencies justify information technology
investments on the basis of sound business cases;
  (d) Ensure that state agencies facilitate development and
review of information technology performance related to business
operations;
  (e) Identify projects that can cross agency and program lines
to leverage resources; and
  (f) Assist in state government-wide planning for common, shared
information technology infrastructure.
 
  (2) The Oregon Department of Administrative Services shall
integrate state agency strategic and business planning,
technology planning and budgeting and project expenditure
processes into the department's information technology
portfolio-based management.
  (3) In cooperation with state agencies, the department shall
conduct and maintain a continuous inventory of each state
agency's current and planned investments in information
technology, a compilation of information about those assets and
the total life cycle cost of those assets. The department shall
develop and implement state government-wide standards, processes
and procedures for the required inventory and for the management
of the state government-wide information technology portfolio.
State agencies shall participate in the information technology
portfolio-based management and shall comply with the standards,
processes and procedures established by the department under this
subsection. The provisions of this subsection do not relieve any
state agency from accountability for equipment, materials,
supplies and tangible and intangible personal property under its
control.
  (4) The department shall ensure that state agencies implement
portfolio-based management of information technology resources in
accordance with this section and with rules adopted by the
Director of the Oregon Department of Administrative Services.
  (5) A state agency information technology project may not
proceed without prior certification by the department. The
department may establish thresholds at the agency level based on
project cost, potential project risk or agency size and budget.
  (6) In implementing the provisions of this section, the
department shall submit state government-wide policies for review
to the Joint Legislative Committee on Information Management and
Technology. + }
  SECTION 3.  { + (1) The purpose of enterprise management is to
create a plan and implement a state government-wide approach for
managing distributed information technology assets to minimize
total ownership costs from acquisition through retirement, while
realizing maximum benefits for transacting the state's business
and delivering services to its citizens.
  (2) With input and recommendations from state agencies, the
Oregon Department of Administrative Services shall develop a plan
for the state government-wide management of distributed
information technology assets. The plan shall prescribe the state
government-wide infrastructure and services for managing these
assets. The plan shall be submitted to the Joint Legislative
Committee on Information Management and Technology for review.
  (3) Following review by the Joint Legislative Committee on
Information Management and Technology, the department shall
ensure state agency implementation of the plan, including the
development of appropriate standards, processes and procedures.
  (4) State agencies shall participate in the enterprise
management of information technology assets and shall comply with
the standards, processes and procedures of the department. + }
  SECTION 4. ORS 181.715 is amended to read:
  181.715. (1) The Department of State Police shall establish a
Criminal Justice Information Standards program that coordinates
information among state criminal justice agencies. The program
shall:
  (a) Ensure that in developing new information systems, data can
be retrieved to support evaluation of criminal justice planning
and programs, including, but not limited to, the ability of the
programs to reduce future criminal conduct;
  (b) Ensure that maximum effort is made for the safety of public
safety officers;
  (c) Establish methods and standards for data interchange and
information access between criminal justice information systems,
 
in compliance with the technology standards and policies of the
Oregon Department of Administrative Services;
  (d) Design and implement improved applications for exchange of
agency information; and
  (e) Implement the capability to exchange images between
criminal justice agencies.
   { +  (2) The program shall develop a plan for the enterprise
management of information technology assets among criminal
justice agencies. The plan shall include budget considerations
based on priorities and costs for the integration of information
technology, as defined in section 1 of this 2001 Act, among all
criminal justice agencies. The program shall present the plan to
the Director of the Oregon Department of Administrative Services
for approval. The program shall submit the approved plan to the
Joint Legislative Committee on Information Management and
Technology no later than December 31 of each even-numbered
year. + }
    { - (2) - }   { + (3) Notwithstanding the meaning given
'criminal justice agency' in ORS 181.010, + } as used in this
section and ORS 181.720, 'criminal justice   { - agencies - }
 { +  agency + } ' includes, but is not limited to:
   { +  (a) The Governor;
  (b) The Judicial Department;
  (c) Courts of criminal jurisdiction;
  (d) The Attorney General;
  (e) District attorneys, city attorneys with criminal
prosecutive functions and public defender organizations
established under ORS chapter 151;
  (f) The Department of State Police;
  (g) Law enforcement agencies;
  (h) Any other state or local agency with law enforcement
authority designated by order of the Governor;
  (i) The Department of Corrections;
  (j) The State Board of Parole and Post-Prison Supervision;
  (k) The Board on Public Safety Standards and Training;
  (L) The Department of Public Safety Standards and Training; + }
    { - (a) The Judicial Department; - }
    { - (b) The Department of Corrections; - }
    { - (c) The Department of State Police; - }
    { - (d) - }   { + (m) + } The Department of Transportation;
    { - (e) The State Board of Parole and Post-Prison
Supervision; - }
    { - (f) The Department of Public Safety Standards and
Training; - }
    { - (g) - }   { + (n) + } The State Department of Fish and
Wildlife;
    { - (h) - }   { + (o) + } The Oregon Liquor Control
Commission;
    { - (i) - }   { + (p) + } The Oregon Youth Authority; and
    { - (j) - }   { + (q) + } The State Commission on Children
and Families.
  SECTION 5.  { + (1) The Secretary of State shall implement
portfolio-based management of information technology resources,
as described in this section, to:
  (a) Ensure that the Office of the Secretary of State links its
information technology investments with business plans;
  (b) Facilitate risk assessment of information technology
projects and investments;
  (c) Ensure that the office justifies information technology
investments on the basis of sound business cases;
  (d) Ensure that the office facilitates development and review
of information technology performance related to business
operations;
  (e) Identify projects that can cross agency and program lines
to leverage resources; and
 
  (f) Assist in state government-wide planning for common, shared
information technology infrastructure.
  (2) The Secretary of State shall integrate strategic and
business planning, technology planning and budgeting and project
expenditure processes into the Secretary of State's information
technology portfolio-based management.
  (3) The Secretary of State shall conduct and maintain a
continuous inventory of current and planned investments in
information technology, a compilation of information about those
assets and the total life cycle cost of those assets.
  (4) The Secretary of State shall develop and implement
standards, processes and procedures for the required inventory
and for the management of the information technology portfolio.
  (5) As used in this section, 'information technology' has the
meaning given that term in section 1 of this 2001 Act. + }
  SECTION 6.  { + (1) The State Treasurer shall implement
portfolio-based management of information technology resources,
as described in this section, to:
  (a) Ensure that the office of the State Treasurer links its
information technology investments with business plans;
  (b) Facilitate risk assessment of information technology
projects and investments;
  (c) Ensure that the office justifies information technology
investments on the basis of sound business cases;
  (d) Ensure that the office facilitates development and review
of information technology performance related to business
operations;
  (e) Identify projects that can cross agency and program lines
to leverage resources; and
  (f) Assist in state government-wide planning for common, shared
information technology infrastructure.
  (2) The State Treasurer shall integrate strategic and business
planning, technology planning and budgeting and project
expenditure processes into the State Treasurer's information
technology portfolio-based management.
  (3) The State Treasurer shall conduct and maintain a continuous
inventory of current and planned investments in information
technology, a compilation of information about those assets and
the total life cycle cost of those assets.
  (4) The State Treasurer shall develop and implement standards,
processes and procedures for the required inventory and for the
management of the information technology portfolio.
  (5) As used in this section, 'information technology' has the
meaning given that term in section 1 of this 2001 Act. + }
                         ----------