House Study Bill 119 - IntroducedA Bill ForAn Act 1concerning the office of the chief information officer
2relating to designation of certain information technology
3staff, background checks, and the technology advisory
4council.
5BE IT ENACTED BY THE GENERAL ASSEMBLY OF THE STATE OF IOWA:
1   Section 1.  Section 8B.1, subsection 13, Code 2017, is
2amended by striking the subsection.
3   Sec. 2.  Section 8B.4, Code 2017, is amended by adding the
4following new subsection:
5   NEW SUBSECTION.  2A.  Designate a chief technology officer
6and a chief information security officer for the state.
7The chief technology officer shall have responsibility
8for enterprise technology strategy, including information
9technology services, information technology platforms,
10information architecture, system integration, and technology
11innovation. The chief information security officer shall have
12responsibility for enterprise information security, including
13information technology continuity of operations and disaster
14recovery, information security awareness, information security
15policy and standards, and information security monitoring and
16oversight.
17   Sec. 3.  NEW SECTION.  8B.4A  Background checks.
   18An applicant for employment with the office, or an applicant
19for employment with a participating agency for a position as
20information technology staff, may be subject to a background
21investigation by the office. The background investigation may
22include, without limitation, a work history, financial review,
23request for criminal history data, and national criminal
24history check through the federal bureau of investigation.
25In addition, a contractor, vendor, employee, or any other
26individual performing work for the office, or an individual on
27the information technology staff of a participating agency,
28may be subject to a national criminal history check through
29the federal bureau of investigation at least once every ten
30years, including, without limitation, any time the office or
31participating agency has reason to believe an individual has
32been convicted of a crime. The office may request the national
33criminal history check and shall provide the individual’s
34fingerprints to the department of public safety for submission
35through the state criminal history repository to the federal
-1-1bureau of investigation. The individual shall authorize
2release of the results of the national criminal history
3check to the office and the applicable participating agency.
4The office shall pay the actual cost of the fingerprinting
5and national criminal history check, if any, unless
6otherwise agreed as part of a contract between the office or
7participating agency and a vendor or contractor performing
8work for the office or participating agency. The results of a
9criminal history check conducted pursuant to this section shall
10not be considered a public record under chapter 22.
11   Sec. 4.  Section 8B.33, subsection 1, Code 2017, is amended
12to read as follows:
   131.  An IowAccess revolving fund is created in the state
14treasury. The revolving fund shall be administered by the
15office and shall consist of moneys collected by the office as
16fees, moneys appropriated by the general assembly, and any
17other moneys obtained or accepted by the office for deposit in
18the revolving fund. The proceeds of the revolving fund are
19appropriated to and shall be used by the office to maintain,
20develop, operate, and expand IowAccess consistent with this
21chapter, and for the support of activities of the technology
22advisory council pursuant to section 8B.8
.
23   Sec. 5.  REPEAL.  Section 8B.8, Code 2017, is repealed.
24EXPLANATION
25The inclusion of this explanation does not constitute agreement with
26the explanation’s substance by the members of the general assembly.
   27This bill concerns the office of the chief information
28officer.
   29Code section 8B.4 is amended to provide that the chief
30information officer shall designate a chief technology officer
31and a chief information security officer for the state. The
32bill provides that the chief technology officer shall have
33responsibility concerning enterprise technology strategy
34and that the chief information security officer shall have
35responsibility concerning enterprise information security.
-2-
   1 New Code section 8A.4A provides for an optional background
2investigation for an applicant for employment with the
3office or an applicant for employment with a participating
4agency for a position as information technology staff,
5which may include work history review, financial review, a
6request for criminal history data, and a national criminal
7history check through the federal bureau of investigation
8(FBI). In addition, the bill provides that an applicant
9for employment with the office, an applicant for employment
10with a participating agency as information technology staff,
11or a contractor, vendor, employee, or any other individual
12performing work for the office may be subject to a national
13criminal history check through the FBI at least once every
1410 years or at any time the office or participating agency
15has reason to believe an individual has been convicted of a
16crime. If conducted, the bill directs the office to provide
17fingerprints to the department of public safety for submission
18through the state criminal history repository to the FBI, and
19requires individuals to authorize release of the results to the
20office and the applicable participating agency. The office is
21required to pay the actual costs of the fingerprinting and the
22criminal history check unless otherwise agreed by contract.
23The bill provides that the results of a criminal history check
24are not considered a public record under Code chapter 22 (open
25records).
   26Code section 8B.8, providing for a technology advisory
27council, is repealed by the bill.
-3-
ec/sc