Print
House File 651 - IntroducedA Bill ForAn Act 1relating to the office of the chief information officer,
2including procurement preferences and a report detailing
3state information technology assets, budgetary reporting,
4and including effective date provisions.
5BE IT ENACTED BY THE GENERAL ASSEMBLY OF THE STATE OF IOWA:
1DIVISION I
2Cloud Computing
3 Section 1. Section 8B.1, Code 2021, is amended by adding the
4following new subsections:
5 NEW SUBSECTION. 2A. “Cloud computing” means the same as
6defined in the United States national institute of standards
7and technology’s special publication 800-145.
8 NEW SUBSECTION. 5A. “Foreign government” means a government
9other than the government of the United States, its states,
10territories, or possessions.
11 Sec. 2. Section 8B.9, Code 2021, is amended by adding the
12following new subsection:
13 NEW SUBSECTION. 5A. An annual report regarding the cloud
14computing solutions the office procured pursuant to section
158B.24, subsection 5A. The annual report shall include all of
16the following:
17a. The cost, security, and capacity of the cloud computing
18solutions.
19b. The compatibility of the cloud computing solutions with
20associated state information technology applications.
21c. The cloud computing solutions’ compliance with state
22and federal laws, regulations, and standards for information
23technology.
24 Sec. 3. Section 8B.9, subsection 6, Code 2021, is amended
25to read as follows:
266. Beginning October 1, 2019, a quarterly an annual report
27regarding the status of technology upgrades or enhancements
28for state agencies, submitted to the general assembly and to
29the chairpersons and ranking members of the senate and house
30committees on appropriations. The quarterly annual report
31shall also include a listing of state agencies coordinating or
32working with the office and a listing of state agencies not
33coordinating or working with the office.
34 Sec. 4. Section 8B.24, Code 2021, is amended by adding the
35following new subsection:
-1-1 NEW SUBSECTION. 5A. a. The office shall, when feasible,
2procure from cloud computing service providers that meet or
3exceed applicable state and federal laws, regulations, and
4standards for information technology, cloud computing solutions
5and other information technology and related services that are
6not hosted on premises by the state.
7b. The office shall contract with multiple cloud computing
8service providers.
9c. The control and ownership of state data stored with cloud
10computing service providers shall remain with the state. The
11office shall ensure the portability of state data stored with
12cloud computing service providers.
13d. Cloud computing service providers shall store state data
14on servers located within the United States. The servers on
15which state data is stored shall not be under the control of a
16foreign government.
17e. For purposes of this subsection, “cloud computing service
18provider” includes third-party vendors, the state and its
19political subdivisions, and any other person that meets or
20exceeds applicable state and federal laws, regulations, and
21standards for information technology.
22 Sec. 5. Section 8B.24, subsection 6, Code 2021, is amended
23to read as follows:
246. The office shall adopt rules pursuant to chapter 17A to
25implement the procurement methods and procedures provided for
26in subsections 2 through 5 5A.
27 Sec. 6. INVENTORY OF INFORMATION TECHNOLOGY ASSETS, CURRENT
28CLOUD COMPUTING ADOPTION, AND CLOUD COMPUTING MIGRATION PLAN
29— REPORT. By November 1, 2021, the office of the chief
30information officer, in collaboration with other state agencies
31and departments, shall provide a report to the general assembly
32that includes all of the following:
331. An inventory of all state information technology
34applications, including the date a state agency or department
35began using each information technology application, the life
-2-1expectancy of each information technology application, and the
2percentage of the information technology applications that are
3cloud-based applications.
42. Recommendations regarding state information technology
5applications that should migrate to cloud-based applications.
6Each such recommendation shall include a description of
7workloads and information technology applications that are best
8suited to migrate to cloud-based applications given all of the
9following considerations:
10a. Whether the information technology application has
11underlying storage, networks, or infrastructure that supports
12another information technology application, and whether the
13information technology application is supported by another
14information technology application.
15b. How critical the information technology application is
16to the mission of the state agency or department.
17c. The difficulty of migrating the information technology
18application to a cloud-based application.
19d. The total cost of ownership of the target environment in
20which the information technology application shall operate if
21migrated to a cloud-based application.
22DIVISION II
23BUDGETARY INFORMATION
24 Sec. 7. Section 8.6, subsection 16, paragraph b, Code 2021,
25is amended to read as follows:
26b. The department of revenue, the department of
27administrative services, the office of the chief information
28officer, the institutions governed by the state board of
29regents pursuant to section 262.7, each judicial district’s
30department of correctional services, and the state department
31of transportation shall provide salary data to the department
32of management and the legislative services agency to operate
33the state’s salary model. The format and frequency of
34provision of the salary data shall be determined by the
35department of management and the legislative services agency.
-3-1 Sec. 8. Section 8.35A, subsection 1, Code 2021, is amended
2to read as follows:
31. By July 1, the director of the department of management,
4in conjunction with the director of the department of
5administrative services and the chief information officer of
6the state, shall provide a projected expenditure breakdown
7of each appropriation for the beginning fiscal year to the
8legislative services agency in the form and level of detail
9requested by the legislative services agency. By the fifteenth
10of each month, the director, in conjunction with the director
11of the department of administrative services and the chief
12information officer of the state, shall transmit to the
13legislative services agency a record for each appropriation
14of actual expenditures for the prior month of the fiscal year
15and the fiscal year to date in the form and level of detail
16as requested by the legislative services agency. By October
171, the director, in conjunction with the director of the
18department of administrative services and the chief information
19officer of the state, shall transmit the total record of an
20appropriation, including reversions and transfers for the prior
21fiscal year ending June 30, to the legislative services agency.
22 Sec. 9. EFFECTIVE DATE. This division of this Act, being
23deemed of immediate importance, takes effect upon enactment.
24EXPLANATION
25The inclusion of this explanation does not constitute agreement with
26the explanation’s substance by the members of the general assembly.
27This bill relates to the office of the chief information
28officer, including procurement preferences and a report
29detailing state information technology assets.
30The bill defines “cloud computing” by reference to the
31United States national institute of standards and technology’s
32special publication 800-145, which defines the term as a model
33for enabling ubiquitous, convenient, on-demand network access
34to a shared pool of configurable computing resources that can
35be rapidly provisioned and released with minimal management
-4-1effort or service provider interaction. The bill defines
2“foreign government” as a government other than the government
3of the United States, its states, territories, and possessions.
4The bill requires the office to submit an annual report
5regarding the cloud computing solutions procured by the office
6containing information required in the bill.
7Current law requires the office to submit a quarterly report
8regarding the status of technology upgrades or enhancements for
9state agencies. The bill requires this report to be submitted
10annually.
11The bill requires the office to, when feasible, procure
12cloud computing solutions and other information technology and
13related services that are not hosted on premises by the state
14from cloud computing service providers that meet or exceed
15applicable state and federal laws, regulations, and standards
16for information technology. For purposes of this requirement,
17the bill defines “cloud computing service provider” to include
18third-party vendors, the state and its political subdivisions,
19and any other person that meets or exceeds applicable laws and
20standards for information technology.
21The bill provides the office shall contract with multiple
22cloud computing service providers.
23The bill establishes that control and ownership of state
24data stored with cloud computing service providers shall remain
25with the state. The bill requires the office to ensure the
26portability of state data stored with cloud computing service
27providers. Additionally, the bill requires cloud computing
28service providers to store data on servers located within the
29United States and requires those servers to not be controlled
30by a foreign government.
31The bill requires the office to provide a report to the
32general assembly by November 1, 2021, that includes an
33inventory of all state information technology applications,
34and recommendations regarding state information technology
35applications that should migrate to cloud-based applications.
-5- 1The bill requires the office to provide salary data to the
2department of management and the legislative services agency to
3operate the state’s salary model.
4Additionally, the bill requires the chief information
5officer to provide information related to expenditures and
6appropriations to the legislative services agency. This
7provision, related to the chief information officer providing
8information related to expenditures and appropriates, takes
9effect upon enactment.
-6-jda/rn
2including procurement preferences and a report detailing
3state information technology assets, budgetary reporting,
4and including effective date provisions.
5BE IT ENACTED BY THE GENERAL ASSEMBLY OF THE STATE OF IOWA:
1DIVISION I
2Cloud Computing
3 Section 1. Section 8B.1, Code 2021, is amended by adding the
4following new subsections:
5 NEW SUBSECTION. 2A. “Cloud computing” means the same as
6defined in the United States national institute of standards
7and technology’s special publication 800-145.
8 NEW SUBSECTION. 5A. “Foreign government” means a government
9other than the government of the United States, its states,
10territories, or possessions.
11 Sec. 2. Section 8B.9, Code 2021, is amended by adding the
12following new subsection:
13 NEW SUBSECTION. 5A. An annual report regarding the cloud
14computing solutions the office procured pursuant to section
158B.24, subsection 5A. The annual report shall include all of
16the following:
17a. The cost, security, and capacity of the cloud computing
18solutions.
19b. The compatibility of the cloud computing solutions with
20associated state information technology applications.
21c. The cloud computing solutions’ compliance with state
22and federal laws, regulations, and standards for information
23technology.
24 Sec. 3. Section 8B.9, subsection 6, Code 2021, is amended
25to read as follows:
266. Beginning October 1, 2019, a quarterly an annual report
27regarding the status of technology upgrades or enhancements
28for state agencies, submitted to the general assembly and to
29the chairpersons and ranking members of the senate and house
30committees on appropriations. The quarterly annual report
31shall also include a listing of state agencies coordinating or
32working with the office and a listing of state agencies not
33coordinating or working with the office.
34 Sec. 4. Section 8B.24, Code 2021, is amended by adding the
35following new subsection:
-1-1 NEW SUBSECTION. 5A. a. The office shall, when feasible,
2procure from cloud computing service providers that meet or
3exceed applicable state and federal laws, regulations, and
4standards for information technology, cloud computing solutions
5and other information technology and related services that are
6not hosted on premises by the state.
7b. The office shall contract with multiple cloud computing
8service providers.
9c. The control and ownership of state data stored with cloud
10computing service providers shall remain with the state. The
11office shall ensure the portability of state data stored with
12cloud computing service providers.
13d. Cloud computing service providers shall store state data
14on servers located within the United States. The servers on
15which state data is stored shall not be under the control of a
16foreign government.
17e. For purposes of this subsection, “cloud computing service
18provider” includes third-party vendors, the state and its
19political subdivisions, and any other person that meets or
20exceeds applicable state and federal laws, regulations, and
21standards for information technology.
22 Sec. 5. Section 8B.24, subsection 6, Code 2021, is amended
23to read as follows:
246. The office shall adopt rules pursuant to chapter 17A to
25implement the procurement methods and procedures provided for
26in subsections 2 through 5 5A.
27 Sec. 6. INVENTORY OF INFORMATION TECHNOLOGY ASSETS, CURRENT
28CLOUD COMPUTING ADOPTION, AND CLOUD COMPUTING MIGRATION PLAN
29— REPORT. By November 1, 2021, the office of the chief
30information officer, in collaboration with other state agencies
31and departments, shall provide a report to the general assembly
32that includes all of the following:
331. An inventory of all state information technology
34applications, including the date a state agency or department
35began using each information technology application, the life
-2-1expectancy of each information technology application, and the
2percentage of the information technology applications that are
3cloud-based applications.
42. Recommendations regarding state information technology
5applications that should migrate to cloud-based applications.
6Each such recommendation shall include a description of
7workloads and information technology applications that are best
8suited to migrate to cloud-based applications given all of the
9following considerations:
10a. Whether the information technology application has
11underlying storage, networks, or infrastructure that supports
12another information technology application, and whether the
13information technology application is supported by another
14information technology application.
15b. How critical the information technology application is
16to the mission of the state agency or department.
17c. The difficulty of migrating the information technology
18application to a cloud-based application.
19d. The total cost of ownership of the target environment in
20which the information technology application shall operate if
21migrated to a cloud-based application.
22DIVISION II
23BUDGETARY INFORMATION
24 Sec. 7. Section 8.6, subsection 16, paragraph b, Code 2021,
25is amended to read as follows:
26b. The department of revenue, the department of
27administrative services, the office of the chief information
28officer, the institutions governed by the state board of
29regents pursuant to section 262.7, each judicial district’s
30department of correctional services, and the state department
31of transportation shall provide salary data to the department
32of management and the legislative services agency to operate
33the state’s salary model. The format and frequency of
34provision of the salary data shall be determined by the
35department of management and the legislative services agency.
-3-1 Sec. 8. Section 8.35A, subsection 1, Code 2021, is amended
2to read as follows:
31. By July 1, the director of the department of management,
4in conjunction with the director of the department of
5administrative services and the chief information officer of
6the state, shall provide a projected expenditure breakdown
7of each appropriation for the beginning fiscal year to the
8legislative services agency in the form and level of detail
9requested by the legislative services agency. By the fifteenth
10of each month, the director, in conjunction with the director
11of the department of administrative services and the chief
12information officer of the state, shall transmit to the
13legislative services agency a record for each appropriation
14of actual expenditures for the prior month of the fiscal year
15and the fiscal year to date in the form and level of detail
16as requested by the legislative services agency. By October
171, the director, in conjunction with the director of the
18department of administrative services and the chief information
19officer of the state, shall transmit the total record of an
20appropriation, including reversions and transfers for the prior
21fiscal year ending June 30, to the legislative services agency.
22 Sec. 9. EFFECTIVE DATE. This division of this Act, being
23deemed of immediate importance, takes effect upon enactment.
24EXPLANATION
25The inclusion of this explanation does not constitute agreement with
26the explanation’s substance by the members of the general assembly.
27This bill relates to the office of the chief information
28officer, including procurement preferences and a report
29detailing state information technology assets.
30The bill defines “cloud computing” by reference to the
31United States national institute of standards and technology’s
32special publication 800-145, which defines the term as a model
33for enabling ubiquitous, convenient, on-demand network access
34to a shared pool of configurable computing resources that can
35be rapidly provisioned and released with minimal management
-4-1effort or service provider interaction. The bill defines
2“foreign government” as a government other than the government
3of the United States, its states, territories, and possessions.
4The bill requires the office to submit an annual report
5regarding the cloud computing solutions procured by the office
6containing information required in the bill.
7Current law requires the office to submit a quarterly report
8regarding the status of technology upgrades or enhancements for
9state agencies. The bill requires this report to be submitted
10annually.
11The bill requires the office to, when feasible, procure
12cloud computing solutions and other information technology and
13related services that are not hosted on premises by the state
14from cloud computing service providers that meet or exceed
15applicable state and federal laws, regulations, and standards
16for information technology. For purposes of this requirement,
17the bill defines “cloud computing service provider” to include
18third-party vendors, the state and its political subdivisions,
19and any other person that meets or exceeds applicable laws and
20standards for information technology.
21The bill provides the office shall contract with multiple
22cloud computing service providers.
23The bill establishes that control and ownership of state
24data stored with cloud computing service providers shall remain
25with the state. The bill requires the office to ensure the
26portability of state data stored with cloud computing service
27providers. Additionally, the bill requires cloud computing
28service providers to store data on servers located within the
29United States and requires those servers to not be controlled
30by a foreign government.
31The bill requires the office to provide a report to the
32general assembly by November 1, 2021, that includes an
33inventory of all state information technology applications,
34and recommendations regarding state information technology
35applications that should migrate to cloud-based applications.
-5- 1The bill requires the office to provide salary data to the
2department of management and the legislative services agency to
3operate the state’s salary model.
4Additionally, the bill requires the chief information
5officer to provide information related to expenditures and
6appropriations to the legislative services agency. This
7provision, related to the chief information officer providing
8information related to expenditures and appropriates, takes
9effect upon enactment.
-6-jda/rn