Senate Bill sb1974er
CODING: Words stricken are deletions; words underlined are additions.
ENROLLED
2007 Legislature CS for CS for SB 1974, 2nd Engrossed (ntc)
1
2 An act relating to state information
3 technology; creating s. 14.204, F.S.; creating
4 the Agency for Enterprise Information
5 Technology within the Executive Office of the
6 Governor; providing for the Governor and
7 Cabinet to be the head of the agency; requiring
8 that the agency be a separate budget entity
9 that is not subject to the control of the
10 Executive Office of the Governor; providing for
11 an executive director of the agency to be
12 subject to confirmation by the Senate;
13 providing for the executive director to be the
14 chief information officer of the state and the
15 executive sponsor for all enterprise
16 information technology projects; specifying the
17 duties and responsibilities of the agency,
18 which include defining architecture standards
19 for information technology and developing a
20 strategic enterprise information technology
21 plan; requiring each state agency and the
22 Agency Chief Information Officers Council to
23 participate in the activities of the Agency for
24 Enterprise Information Technology; amending s.
25 20.22, F.S.; removing the State Technology
26 Office within the Department of Management
27 Services; providing for a Technology Program
28 within the department; amending s. 216.0446,
29 F.S.; revising the duties of the Technology
30 Review Workgroup within the Legislature to
31 conform to the transfer of duties concerning
1
CODING: Words stricken are deletions; words underlined are additions.
ENROLLED
2007 Legislature CS for CS for SB 1974, 2nd Engrossed (ntc)
1 the management of information technology for
2 state agencies; amending s. 282.0041, F.S.;
3 revising and providing definitions; creating s.
4 282.0055, F.S.; providing for the Agency for
5 Enterprise Information Technology to oversee
6 information technology services that are common
7 to all executive branch agencies and for agency
8 information technology services to be
9 responsible for information technology within
10 an individual state agency; creating s.
11 282.0056, F.S.; requiring the Agency for
12 Enterprise Information Technology to develop a
13 work plan; requiring that the work plan be
14 approved by the Governor and Cabinet and
15 submitted to the Legislature; requiring that
16 certain specified policies be included in the
17 initial work plan; requiring that the agency
18 develop policy recommendations and strategies
19 for consolidating computer rooms and data
20 centers; requiring each state agency to provide
21 assistance in the development of the work plan
22 upon request; amending s. 282.20, F.S.;
23 transferring management of the Technology
24 Resource Center from the State Technology
25 Office to the Department of Management
26 Services; revising the duties of the center to
27 conform to changes made by the act; requiring
28 that the center submit its service rates and
29 cost-allocation plan to the Agency for
30 Enterprise Information Technology for review;
31 amending s. 282.3055, F.S.; revising the duties
2
CODING: Words stricken are deletions; words underlined are additions.
ENROLLED
2007 Legislature CS for CS for SB 1974, 2nd Engrossed (ntc)
1 of the agency chief information officers;
2 amending s. 282.315, F.S.; revising the duties
3 of the Agency Chief Information Officers
4 Council; requiring that the council assist the
5 Agency for Enterprise Information Technology in
6 developing strategies for information
7 technology services and projects and make
8 policy recommendations; revising the membership
9 of the council; providing for the appointment
10 of a chair, vice chair, and secretary; amending
11 s. 282.318, F.S.; providing duties of the
12 Agency for Enterprise Information Technology
13 with respect to the security of data and
14 information technology resources; requiring
15 state agencies to conduct a comprehensive risk
16 analysis at specified intervals, develop and
17 update internal policies and procedures, and
18 ensure compliance with certain security
19 requirements; requiring the Agency for
20 Enterprise Information Technology to designate
21 a chief information security officer, develop
22 standards for risk analyses and security
23 audits, and provide training for agency
24 information security managers; providing
25 rulemaking authority; deleting provisions
26 specifying duties of the Department of
27 Management Services to conform to changes made
28 by the act; amending s. 282.322, F.S.;
29 requiring that the Agency for Enterprise
30 Information Technology perform contract
31 monitoring duties formerly performed by the
3
CODING: Words stricken are deletions; words underlined are additions.
ENROLLED
2007 Legislature CS for CS for SB 1974, 2nd Engrossed (ntc)
1 Enterprise Project Management Office of the
2 State Technology Office; amending s. 216.023,
3 F.S.; requiring that certain legislative budget
4 requests include the statutory reference to the
5 policy requiring a new information technology
6 project; amending s. 943.0313, F.S., relating
7 to the Domestic Security Oversight Council;
8 conforming terminology to changes made by the
9 act; providing for the transfer of specified
10 duties from the State Technology Office to the
11 Department of Management Services; repealing
12 ss. 186.022, 282.005, 282.101, 282.23,
13 282.3031, 282.3032, 282.3063, 282.310, and
14 287.057(24), F.S., relating to information
15 technology strategic plans, duties of the State
16 Technology Office, the State Strategic
17 Information Technology Alliance, information
18 resources management responsibilities, guiding
19 principles, the Agency Annual Enterprise
20 Resource Planning and Management Report, the
21 State Annual Report on Enterprise Resource
22 Planning and Management, and state strategic
23 information technology alliances; amending ss.
24 215.95, 215.96, 282.102, 282.103, 282.107,
25 339.155, 381.90, 403.973, 408.05, 420.0003,
26 420.511, and 943.08, F.S., relating to the
27 Financial Management Information Board and its
28 coordination council, the State Technology
29 Office, the SUNCOM Network, transportation
30 planning, the Health Information Systems
31 Council, expedited permitting, the Florida
4
CODING: Words stricken are deletions; words underlined are additions.
ENROLLED
2007 Legislature CS for CS for SB 1974, 2nd Engrossed (ntc)
1 Center for Health Information and Policy
2 Analysis, the state housing strategy and the
3 Florida Housing Finance Corporation, the
4 Criminal and Juvenile Justice Information
5 System Council, and the public broadcasting
6 program system; conforming cross-references and
7 other references to provisions repealed by the
8 act; providing appropriations and authorizing
9 additional positions; providing an effective
10 date.
11
12 Be It Enacted by the Legislature of the State of Florida:
13
14 Section 1. Section 14.204, Florida Statutes, is
15 created to read:
16 14.204 Agency for Enterprise Information
17 Technology.--The Agency for Enterprise Information Technology
18 is created within the Executive Office of the Governor. The
19 head of the agency shall be the Governor and Cabinet, which
20 shall take action by majority vote consisting of at least
21 three affirmative votes with the Governor on the prevailing
22 side. The agency shall be a separate budget entity that is not
23 subject to control, supervision, or direction by the Executive
24 Office of the Governor in any manner, including, but not
25 limited to, purchasing, transactions involving real or
26 personal property, personnel, or budgetary matters.
27 (1) The executive director of the agency shall be
28 appointed by the Governor and Cabinet, is subject to
29 confirmation by the Senate, and shall serve at the pleasure of
30 the Governor and Cabinet. The executive director shall be the
31 chief information officer of the state and the executive
5
CODING: Words stricken are deletions; words underlined are additions.
ENROLLED
2007 Legislature CS for CS for SB 1974, 2nd Engrossed (ntc)
1 sponsor for all enterprise information technology projects.
2 The executive director must have a degree from an accredited
3 postsecondary institution, and at least 7 years of
4 executive-level experience in managing information technology
5 organizations.
6 (2) The agency shall have the following duties and
7 responsibilities:
8 (a) Develop and implement strategies for the design,
9 delivery, and management of the enterprise information
10 technology services established in law.
11 (b) Monitor the delivery and management of the
12 enterprise information technology services as established in
13 law.
14 (c) Make recommendations to the agency head and the
15 Legislature concerning other information technology services
16 that should be designed, delivered, and managed at the
17 enterprise level as defined in s. 282.0041(8).
18 (d) Plan and establish policies for managing proposed
19 statutorily authorized enterprise information technology
20 services, which includes developing business cases that, when
21 applicable, include the components identified in s. 287.0574;
22 establishing and coordinating project-management teams;
23 establishing formal risk-assessment and mitigation processes;
24 and providing for independent monitoring of projects for
25 recommended corrective actions.
26 (e) Not earlier than July 1, 2008, define the
27 architecture standards for enterprise information technology
28 and develop implementation approaches for statewide migration
29 to those standards.
30 (f) Develop and publish a strategic enterprise
31 information technology plan that identifies and recommends
6
CODING: Words stricken are deletions; words underlined are additions.
ENROLLED
2007 Legislature CS for CS for SB 1974, 2nd Engrossed (ntc)
1 strategies for how enterprise information technology will
2 deliver effective and efficient government services to state
3 residents and improve the operations of state agencies.
4 (3) The agency shall operate in such a manner as to
5 ensure participation and representation of state agencies and
6 the Agency Chief Information Officers Council established in
7 s. 282.315.
8 Section 2. Section 20.22, Florida Statutes, is amended
9 to read:
10 20.22 Department of Management Services.--There is
11 created a Department of Management Services.
12 (1) The head of the Department of Management Services
13 is the Secretary of Management Services, who shall be
14 appointed by the Governor, subject to confirmation by the
15 Senate, and shall serve at the pleasure of the Governor.
16 (2) The following divisions and programs within the
17 Department of Management Services are established:
18 (a) Facilities Program.
19 (b) Technology Program State Technology Office.
20 (c) Workforce Program.
21 (d)1. Support Program.
22 2. Federal Property Assistance Program.
23 (e) Administration Program.
24 (f) Division of Administrative Hearings.
25 (g) Division of Retirement.
26 (h) Division of State Group Insurance.
27 (3) The State Technology Office shall operate and
28 manage the Technology Resource Center.
29 (3)(4) The duties of the Chief Labor Negotiator shall
30 be determined by the Secretary of Management Services, and
31 must include, but need not be limited to, the representation
7
CODING: Words stricken are deletions; words underlined are additions.
ENROLLED
2007 Legislature CS for CS for SB 1974, 2nd Engrossed (ntc)
1 of the Governor as the public employer in collective
2 bargaining negotiations pursuant to the provisions of chapter
3 447.
4 Section 3. Section 216.0446, Florida Statutes, is
5 amended to read:
6 216.0446 Review of information technology resources
7 management needs.--
8 (1) There is created within the Legislature the
9 Technology Review Workgroup. The workgroup and the State
10 Technology Office shall independently review and make
11 recommendations with respect to the portion of agencies'
12 long-range program plans which pertains to information
13 technology resources management needs and with respect to
14 agencies' legislative budget requests for information
15 technology and related resources. The Technology Review
16 Workgroup shall report such recommendations, together with the
17 findings and conclusions on which such recommendations are
18 based, to the Legislative Budget Commission. The State
19 Technology Office shall report such recommendations, together
20 with the findings and conclusions on which such
21 recommendations are based, to the Executive Office of the
22 Governor and to the chairs of the legislative appropriations
23 committees.
24 (2) In addition to its primary duty specified in
25 subsection (1), the Technology Review Workgroup shall have
26 powers and duties that include, but are not limited to, the
27 following:
28 (a) To evaluate the information technology resource
29 management needs identified in the agency long-range program
30 plans for consistency with the State Annual Report on
31 Enterprise Resource Planning and Management and statewide
8
CODING: Words stricken are deletions; words underlined are additions.
ENROLLED
2007 Legislature CS for CS for SB 1974, 2nd Engrossed (ntc)
1 policies recommended by the State Technology Office, and make
2 recommendations to the Legislative Budget Commission.
3 (b) To review and make recommendations to the
4 Legislative Budget Commission on proposed budget amendments
5 and agency transfers associated with information technology
6 initiatives or projects that involve more than one agency,
7 that have an outcome that impacts another agency, that exceed
8 $500,000 in total cost over a 1-year period, or that are
9 requested by the Legislative Budget Commission to be reviewed.
10 Section 4. Section 282.0041, Florida Statutes, is
11 amended to read:
12 282.0041 Definitions.--For the purposes of this part,
13 the term:
14 (1) "Agency" means those entities described in s.
15 216.011(1)(qq).
16 (2) "Agency Annual Enterprise Resource Planning and
17 Management Report" means the report prepared by each Agency
18 Chief Information Officer as required by s. 282.3063.
19 (2)(3) "Agency Chief Information Officer" means the
20 person appointed by the agency head State Technology Office to
21 coordinate and manage the information technology functions
22 policies and responsibilities activities applicable to that
23 agency and to participate and represent his or her agency in
24 developing strategies for implementing enterprise information
25 technology services identified in law and developing
26 recommendations for enterprise information technology policy.
27 (3)(4) "Agency Chief Information Officers Council"
28 means the council created in s. 282.315 to facilitate the
29 sharing and coordination of information technology issues and
30 initiatives among the agencies.
31
9
CODING: Words stricken are deletions; words underlined are additions.
ENROLLED
2007 Legislature CS for CS for SB 1974, 2nd Engrossed (ntc)
1 (4) "Agency for Enterprise Information Technology"
2 means the agency created in s. 14.204.
3 (5) "Agency information technology service" means a
4 service that directly helps the agency fulfill its statutory
5 or constitutional responsibilities and policy objectives and
6 is usually associated with the agency's primary or core
7 business functions.
8 (6) "Customer relationship management" or "CRM" means
9 the business processes, software, and Internet capabilities
10 that can help state agencies manage customer relationships of
11 the organization at the enterprise level.
12 (7) "Enterprise level" means all executive branch
13 agencies created or authorized in statute to perform
14 legislatively delegated functions.
15 (8) "Enterprise information technology service" means
16 an information technology service that is used in all agencies
17 or a subset of agencies and is established in law to be
18 designed, delivered, and managed at the enterprise level.
19 (9) "E-mail, messaging, and calendaring service" means
20 the enterprise information technology service that enables
21 users to send, receive, file, store, manage, and retrieve
22 electronic messages, attachments, appointments, and addresses.
23 (5) "Enterprise resources management infrastructure"
24 means the hardware, software, networks, data, human resources,
25 policies, standards, facilities, maintenance, and related
26 materials and services that are required to support the
27 business processes of an agency or state enterprise.
28 (6) "Enterprise resource planning and management"
29 means the planning, budgeting, acquiring, developing,
30 organizing, directing, training, control, and related services
31 associated with government information technology. The term
10
CODING: Words stricken are deletions; words underlined are additions.
ENROLLED
2007 Legislature CS for CS for SB 1974, 2nd Engrossed (ntc)
1 encompasses information and related resources, as well as the
2 controls associated with their acquisition, development,
3 dissemination, and use.
4 (10)(7) "Information technology" means equipment,
5 hardware, software, firmware, programs, systems, networks,
6 infrastructure, media, and related material used to
7 automatically, electronically, and wirelessly collect,
8 receive, access, transmit, display, store, record, retrieve,
9 analyze, evaluate, process, classify, manipulate, manage,
10 assimilate, control, communicate, exchange, convert, converge,
11 interface, switch, or disseminate information of any kind or
12 form.
13 (11) "Information technology policy" means statements
14 that describe clear choices for how information technology
15 will deliver effective and efficient government services to
16 residents and improve state agency operations. Such a policy
17 may relate to investments, business applications,
18 architecture, or infrastructure. A policy describes its
19 rationale, implications of compliance or noncompliance, the
20 timeline for implementation, metrics for determining
21 compliance, and the accountable structure responsible for its
22 implementation.
23 (12)(8) "Project" means an endeavor that has a defined
24 start and end point; is undertaken to create or modify a
25 unique product, service, or result; and has specific
26 objectives that, when attained, signify completion undertaking
27 directed at the accomplishment of a strategic objective
28 relating to enterprise resources management or a specific
29 appropriated program.
30
31
11
CODING: Words stricken are deletions; words underlined are additions.
ENROLLED
2007 Legislature CS for CS for SB 1974, 2nd Engrossed (ntc)
1 (9) "State Annual Report on Enterprise Resource
2 Planning and Management" means the report prepared by the
3 State Technology Office as defined in s. 282.102.
4 (13)(10) "Standards" means the use of current, open,
5 nonproprietary, or non-vendor-specific technologies.
6 (11) "State Technology Office" or "office" means the
7 office created in s. 282.102.
8 (14)(12) "Total cost" means all costs associated with
9 information technology projects or initiatives, including, but
10 not limited to, value of hardware, software, service,
11 maintenance, incremental personnel, and facilities. Total
12 cost of a loan or gift of information technology resources to
13 an agency includes the fair market value of the resources,
14 except that the total cost of loans or gifts of information
15 technology to state universities to be used in instruction or
16 research does not include fair market value.
17 Section 5. Section 282.0055, Florida Statutes, is
18 created to read:
19 282.0055 Assignment of information technology.--In
20 order to ensure the most effective and efficient use of the
21 state's information technology and information technology
22 resources and notwithstanding other provisions of law to the
23 contrary, policies for the design, planning, project
24 management, and implementation of the enterprise information
25 technology services defined in s. 282.0041(8) shall be the
26 responsibility of the Agency for Enterprise Information
27 Technology for executive branch agencies created or authorized
28 in statute to perform legislatively delegated functions. The
29 supervision, design, delivery, and management of agency
30 information technology defined in s. 282.0041(5) shall remain
31
12
CODING: Words stricken are deletions; words underlined are additions.
ENROLLED
2007 Legislature CS for CS for SB 1974, 2nd Engrossed (ntc)
1 within the responsibility and control of the individual state
2 agency.
3 Section 6. Section 282.0056, Florida Statutes, is
4 created to read:
5 282.0056 Development of work plan; development of
6 implementation plans; and policy recommendations.--
7 (1) For purposes of carrying out its responsibilities
8 set forth in s. 282.0055, the Agency for Enterprise
9 Information Technology shall develop a work plan describing
10 the activities that the agency intends to undertake and the
11 proposed outcomes. The work plan must be approved by the
12 Governor and Cabinet and submitted to the President of the
13 Senate and the Speaker of the House of Representatives. The
14 work plan may be amended as needed to ensure that the
15 enterprise information technology services will be provided in
16 an efficient, effective, and accountable manner. For the
17 2007-2008 fiscal year, the agency's work plan shall include
18 the development of recommended enterprise information
19 technology policies, as defined in s. 282.0041(11).
20 (2) For the fiscal year beginning in 2008-2009, the
21 agency shall develop implementation plans for up to three of
22 the following proposed enterprise information technology
23 services to be established in law:
24 (a) Consolidation of the deployment, management, and
25 operation of state-owned or state-operated computer rooms and
26 data centers.
27 (b) A shared or consolidated enterprise information
28 technology service delivery and support model for the e-mail,
29 messaging, and calendaring service defined in s. 282.0041(9).
30 (c) Information security.
31
13
CODING: Words stricken are deletions; words underlined are additions.
ENROLLED
2007 Legislature CS for CS for SB 1974, 2nd Engrossed (ntc)
1 (d) A shared customer relationship management system
2 that consolidates agency requirements for receiving, managing,
3 responding to, tracking, and reporting on telephone, e-mail,
4 personnel, and other communications received from citizens.
5 (e) Consideration of a planned replacement cycle for
6 computer equipment.
7 (3) In developing policy recommendations and
8 implementation plans for established and proposed enterprise
9 information technology services, the agency shall describe the
10 scope of operation, conduct costs and requirements analyses,
11 conduct an inventory of all existing information technology
12 resources that are associated with each service, and develop
13 strategies and timeframes for statewide migration. For
14 purposes of consolidating state-owned or state-operated
15 computer rooms and data centers, the Agency for Enterprise
16 Information Technology shall develop a migration plan prior to
17 initiating any consolidation effort.
18 (4) For the purpose of completing its work activities,
19 each state agency shall provide to the Agency for Enterprise
20 Information Technology all requested information, including,
21 but not limited to, the agency's costs, service requirements,
22 and equipment inventories.
23 Section 7. Section 282.20, Florida Statutes, is
24 amended to read:
25 282.20 Technology Resource Center.--
26 (1)(a) The Department of Management Services State
27 Technology Office shall operate and manage the Technology
28 Resource Center.
29 (b) For the purposes of this section, the term:
30
31
14
CODING: Words stricken are deletions; words underlined are additions.
ENROLLED
2007 Legislature CS for CS for SB 1974, 2nd Engrossed (ntc)
1 1. "Information-system utility" means a full-service
2 information-processing facility offering hardware, software,
3 operations, integration, networking, and consulting services.
4 2. "Customer" means a state agency or other entity
5 which is authorized to utilize the SUNCOM Network pursuant to
6 this part.
7 (2) The Technology Resource Center shall:
8 (a) Serve the office and other customers as an
9 information-system utility.
10 (b) Cooperate with customers to offer, develop, and
11 support a wide range of services and applications needed by
12 users of the Technology Resource Center.
13 (c) Cooperate with the Florida Legal Resource Center
14 of the Department of Legal Affairs and other state agencies to
15 develop and provide access to repositories of legal
16 information throughout the state.
17 (c)(d) Cooperate with the Agency for Enterprise
18 Information Technology office to identify and facilitate
19 interdepartmental networking and integration of network
20 services for its customers.
21 (d)(e) Assist customers in testing and evaluating new
22 and emerging technologies that could be used to meet the needs
23 of the state.
24 (3) The department office may contract with customers
25 to provide any combination of services necessary for agencies
26 to fulfill their responsibilities and to serve their users.
27 (4) The Technology Resource Center may plan, design,
28 establish pilot projects for, and conduct experiments with
29 information technology resources, and may implement
30 enhancements in services when such implementation is
31 cost-effective. Funding for experiments and pilot projects
15
CODING: Words stricken are deletions; words underlined are additions.
ENROLLED
2007 Legislature CS for CS for SB 1974, 2nd Engrossed (ntc)
1 shall be derived from service revenues and may not exceed 5
2 percent of the service revenues for the Technology Resource
3 Center for any single fiscal year. Any experiment, pilot
4 project, plan, or design must be approved by the Agency for
5 Enterprise Information Technology Chief Information Officer.
6 (5) Beginning in the 2007-2008 fiscal year and
7 annually thereafter, the Technology Resource Center shall
8 submit to the Agency for Enterprise Information Technology for
9 its review a copy of its current and proposed services and
10 service rates and cost-allocation plan. When appropriate, the
11 Agency for Enterprise Information Technology shall request
12 review and comment from the customers and Agency Chief
13 Information Officers Council concerning the center's current
14 and proposed rate and services structure.
15 (5) Notwithstanding the provisions of s. 216.272, the
16 Technology Resource Center may spend funds in the reserve
17 account of the Technology Enterprise Operating Trust Fund for
18 enhancements to center operations or for information
19 technology resources. Any expenditure of reserve account funds
20 must be approved by the Chief Information Officer. Any funds
21 remaining in the reserve account at the end of the fiscal year
22 may be carried forward and spent as approved by the Chief
23 Information Officer, provided that such approval conforms to
24 any applicable provisions of chapter 216.
25 Section 8. Section 282.3055, Florida Statutes, is
26 amended to read:
27 282.3055 Agency chief information officer;
28 appointment; duties.--
29 (1)(a) Each agency head shall To assist the State
30 Technology Officer in carrying out the enterprise resource
31 planning and management responsibilities, the Chief
16
CODING: Words stricken are deletions; words underlined are additions.
ENROLLED
2007 Legislature CS for CS for SB 1974, 2nd Engrossed (ntc)
1 Information Officer may appoint or contract for an agency
2 chief information officer. This position may be full time or
3 part time.
4 (b) The agency chief information officer must, at a
5 minimum, have knowledge and experience in both management and
6 information technology resources.
7 (2) The duties of the agency chief information officer
8 include, but are not limited to:
9 (a) Coordinating and facilitating the agency
10 enterprise resource planning and management of agency
11 information technology services projects and initiatives.
12 (b) Preparing an agency annual report on enterprise
13 resource planning and management pursuant to s. 282.3063.
14 (b)(c) Developing and Implementing agency information
15 technology enterprise resource planning and management
16 policies, procedures, guidelines, and standards that are
17 consistent with the procedures and standards adopted by the
18 Agency for Enterprise Information Technology, including
19 specific policies and procedures for review and approval of
20 the agency's purchases of information technology resources in
21 accordance with the office's policies and procedures.
22 (c)(d) Advising agency senior management as to the
23 information technology enterprise resource planning and
24 management needs of the agency for inclusion in planning
25 documents required by law.
26 (d)(e) Assisting in the development and prioritization
27 of the information technology enterprise resource needs for
28 planning and management schedule of the agency's legislative
29 budget request.
30 (e) Assisting the Agency for Enterprise Information
31 Technology in the development of strategies for implementing
17
CODING: Words stricken are deletions; words underlined are additions.
ENROLLED
2007 Legislature CS for CS for SB 1974, 2nd Engrossed (ntc)
1 the enterprise information technology services established in
2 law and developing recommendations for enterprise information
3 technology policy.
4 Section 9. Section 282.315, Florida Statutes, is
5 amended to read:
6 282.315 Agency Chief Information Officers Council;
7 creation.--The Legislature finds that enhancing communication,
8 consensus building, coordination, and facilitation with
9 respect to issues concerning of statewide enterprise
10 information technology resources are resource planning and
11 management issues is essential to improving the state
12 management of such resources.
13 (1) There is created an Agency Chief Information
14 Officers Council to:
15 (a) Enhance communication and collaboration among the
16 Agency Chief Information Officers and the Agency for
17 Enterprise Information Technology by sharing enterprise
18 resource planning and management experiences and exchanging
19 ideas.
20 (b) Identify and recommend Facilitate the sharing of
21 best practices that are characteristic of highly successful
22 technology organizations, as well as exemplary information
23 technology applications for use by of state agencies, and
24 assist the Agency for Enterprise Information Technology in
25 developing strategies for implementing the enterprise
26 information technology services established in law and
27 developing recommendations for enterprise information
28 technology policy.
29 (c) Identify efficiency opportunities among state
30 agencies and make recommendations for action to the Agency for
31 Enterprise Information Technology.
18
CODING: Words stricken are deletions; words underlined are additions.
ENROLLED
2007 Legislature CS for CS for SB 1974, 2nd Engrossed (ntc)
1 (d) Serve as an educational forum for enterprise
2 resource planning and management issues.
3 (d)(e) Assist the Agency for Enterprise Information
4 Technology State Technology Office in identifying critical
5 enterprise information technology statewide issues and, when
6 appropriate, make recommendations for solving enterprise
7 resource planning and management deficiencies.
8 (2) Members of the council shall include the Agency
9 Chief Information Officers, including the Chief Information
10 Officers of the agencies and governmental entities enumerated
11 in s. 282.3031, except that there shall be one Chief
12 Information Officer selected by the state attorneys and one
13 Chief Information Officer selected by the public defenders.
14 The council shall appoint a chair, vice chair, and secretary
15 from among its members to a 1-year term each. The council
16 shall establish procedures governing council business. The
17 chairs, or their designees, of the Florida Financial
18 Management Information System Coordinating Council, the
19 Criminal and Juvenile Justice Information Systems Council, and
20 the Health Information Systems Council shall represent their
21 respective organizations on the Chief Information Officers
22 Council as voting members.
23 (3) The Agency for Enterprise Information Technology
24 State Technology Office shall provide administrative support
25 to the council.
26 Section 10. Section 282.318, Florida Statutes, is
27 amended to read:
28 282.318 Security of data and information technology
29 resources.--
30 (1) This section may be cited as the "Security of Data
31 and Information Technology Infrastructure Resources Act."
19
CODING: Words stricken are deletions; words underlined are additions.
ENROLLED
2007 Legislature CS for CS for SB 1974, 2nd Engrossed (ntc)
1 (2)(a) The Agency for Enterprise Information
2 Technology State Technology Office, in consultation with each
3 agency head, is responsible and accountable for assessing and
4 recommending minimum operating procedures for ensuring
5 assuring an adequate level of security for all data and
6 information technology resources for executive branch agencies
7 created or authorized in statute to perform legislatively
8 delegated functions. To assist the agency in carrying out this
9 responsibility, of each agency head and, to carry out this
10 responsibility, shall, at a minimum:
11 1. Designate an information security manager who shall
12 administer the security program of the each agency for its
13 data and information technology resources.
14 2. Conduct, and periodically update every 3 years, a
15 comprehensive risk analysis to determine the security threats
16 to the data, information, and information technology resources
17 of the each agency. The risk analysis information is
18 confidential and exempt from the provisions of s. 119.07(1),
19 except that such information shall be available to the Auditor
20 General and the Agency for Enterprise Information Technology
21 in performing his or her postauditing duties.
22 3. Develop, and periodically update, written internal
23 policies and procedures, which shall include procedures for
24 notifying the Agency for Enterprise Information Technology
25 when an information security incident occurs or data is
26 compromised. Such policies and procedures must be consistent
27 with the standard operating procedures adopted by the Agency
28 for Enterprise Information Technology in order to ensure to
29 assure the security of the data, information, and information
30 technology resources of the each agency. The internal policies
31 and procedures that which, if disclosed, could facilitate the
20
CODING: Words stricken are deletions; words underlined are additions.
ENROLLED
2007 Legislature CS for CS for SB 1974, 2nd Engrossed (ntc)
1 unauthorized modification, disclosure, or destruction of data
2 or information technology resources are confidential
3 information and exempt from the provisions of s. 119.07(1),
4 except that such information shall be available to the Auditor
5 General and the Agency for Enterprise Information Technology
6 in performing his or her postauditing duties.
7 4. Implement appropriate cost-effective safeguards to
8 reduce, eliminate, or recover from the identified risks to the
9 data, information, and information technology resources of the
10 each agency.
11 5. Ensure that periodic internal audits and
12 evaluations of the agency's each security program for the
13 data, information, and information technology resources of the
14 agency are conducted. The results of such internal audits and
15 evaluations are confidential information and exempt from the
16 provisions of s. 119.07(1), except that such information shall
17 be available to the Auditor General and the Agency for
18 Enterprise Information Technology in performing his or her
19 postauditing duties.
20 6. Include appropriate security requirements, as
21 determined by the State Technology Office, in consultation
22 with each agency head, in the written specifications for the
23 solicitation of information technology and information
24 technology resources which are consistent with the standard
25 security operating procedures adopted by the Agency for
26 Enterprise Information Technology.
27 (b) In those instances under this subsection in which
28 the state agency or department State Technology Office
29 develops state contracts for use by state agencies, the state
30 agency or department office shall include appropriate security
31 requirements in the specifications for the solicitation for
21
CODING: Words stricken are deletions; words underlined are additions.
ENROLLED
2007 Legislature CS for CS for SB 1974, 2nd Engrossed (ntc)
1 state contracts for procuring information technology or
2 information technology resources.
3 (3) The Agency for Enterprise Information Technology
4 shall designate a chief information security officer.
5 (4) The Agency for Enterprise Information Technology
6 shall develop standards and templates for conducting
7 comprehensive risk analyses and information security audits by
8 state agencies, assist agencies in their compliance with the
9 provisions of this section, pursue appropriate funding
10 provided for the purpose of enhancing domestic security,
11 establish minimum guidelines and procedures for the recovery
12 of information technology following a disaster, and provide
13 training for agency information security managers. Standards,
14 templates, guidelines, and procedures shall be published
15 annually, no later than September 30 each year, to enable
16 agencies to incorporate them in their planning for the
17 following fiscal year.
18 (5) The Agency for Enterprise Information Technology
19 may adopt rules pursuant to ss. 120.536(1) and 120.54 relating
20 to information security and to administer the provisions of
21 this section.
22 (3) Notwithstanding subsection (2), the Department of
23 Management Services, hereafter referred to as the
24 "department," in consultation with each agency head, is
25 responsible for coordinating, assessing, and recommending
26 minimum operating procedures for ensuring an adequate level of
27 security for data and information technology resources. To
28 assist the department in carrying out this responsibility,
29 each agency shall, at a minimum:
30
31
22
CODING: Words stricken are deletions; words underlined are additions.
ENROLLED
2007 Legislature CS for CS for SB 1974, 2nd Engrossed (ntc)
1 (a) Designate an information security manager who
2 shall administer the security program of the agency for its
3 data and information technology resources.
4 (b) Conduct, and update every 3 years, a comprehensive
5 risk analysis to determine the security threats to the data,
6 information, and information technology resources of the
7 agency. The risk analysis information made confidential and
8 exempt under subparagraph (2)(a)2. shall be available to the
9 Auditor General in performing his or her postauditing duties.
10 (c) Develop, and periodically update, written internal
11 policies and procedures that are consistent with the standard
12 operating procedures recommended by the department to ensure
13 the security of the data and information technology resources
14 of the agency. The internal policies and procedures that, if
15 disclosed, could facilitate the unauthorized modification,
16 disclosure, or destruction of data or information technology
17 resources made confidential and exempt under subparagraph
18 (2)(a)3. shall be available to the Auditor General in
19 performing his or her postauditing duties.
20 (d) Implement appropriate cost-effective safeguards to
21 reduce, eliminate, or recover from the identified risks to the
22 data and information technology resources of the agency.
23 (e) Ensure that periodic internal audits and
24 evaluations of the security program for the data, information,
25 and information technology resources of the agency are
26 conducted. The results of such internal audits and evaluations
27 made confidential and exempt under subparagraph (2)(a)5. shall
28 be available to the Auditor General in performing his or her
29 postauditing duties.
30 (f) Include appropriate security requirements in the
31 written specifications for the solicitation of information
23
CODING: Words stricken are deletions; words underlined are additions.
ENROLLED
2007 Legislature CS for CS for SB 1974, 2nd Engrossed (ntc)
1 technology resources that are consistent with the standard
2 security operating procedures as recommended by the
3 department.
4 (g) This subsection expires July 1, 2007.
5
6 In those instances under this subsection in which the
7 department develops state contracts for use by state agencies,
8 the department shall include appropriate security requirements
9 in the specifications for the solicitation for state contracts
10 for procuring information technology resources.
11 (4) In order to ensure the security of data,
12 information, and information technology resources, the
13 department shall establish the Office of Information Security
14 and shall designate a Chief Information Security Officer as
15 the head of the office. The office shall coordinate its
16 activities with the Agency Chief Information Officers Council
17 as established in s. 282.315. The office is responsible for
18 developing a strategic plan for information technology
19 security which shall be submitted by March 1, 2007, to the
20 Executive Office of the Governor, the President of the Senate,
21 and the Speaker of the House of Representatives; developing
22 standards and templates for conducting comprehensive risk
23 analyses and information security audits by state agencies;
24 assisting agencies in their compliance with the provisions of
25 this section; establishing minimum standards for the recovery
26 of information technology following a disaster; and conducting
27 training for agency information security managers. This
28 subsection expires July 1, 2007.
29 Section 11. Subsection (2) of section 282.322, Florida
30 Statutes, is amended to read:
31
24
CODING: Words stricken are deletions; words underlined are additions.
ENROLLED
2007 Legislature CS for CS for SB 1974, 2nd Engrossed (ntc)
1 282.322 Special monitoring process for designated
2 information resources management projects.--
3 (2) The Agency for Enterprise Information Technology
4 Project Management Office of the State Technology Office shall
5 report on any information technology project that the
6 Legislature projects the office identifies as high-risk to the
7 Executive Office of the Governor, the President of the Senate,
8 the Speaker of the House of Representatives, and the chairs of
9 the appropriations committees. Within the limits of current
10 appropriations, the Agency for Enterprise Information
11 Technology Project Management Office shall monitor and report
12 on such high-risk information technology projects, and assess
13 the levels of risks associated with proceeding to the next
14 stage of the project.
15 Section 12. Paragraph (a) of subsection (4) of section
16 216.023, Florida Statutes, is amended to read:
17 216.023 Legislative budget requests to be furnished to
18 Legislature by agencies.--
19 (4)(a) The legislative budget request must contain for
20 each program:
21 1. The constitutional or statutory authority for a
22 program, a brief purpose statement, and approved program
23 components.
24 2. Information on expenditures for 3 fiscal years
25 (actual prior-year expenditures, current-year estimated
26 expenditures, and agency budget requested expenditures for the
27 next fiscal year) by appropriation category.
28 3. Details on trust funds and fees.
29 4. The total number of positions (authorized, fixed,
30 and requested).
31
25
CODING: Words stricken are deletions; words underlined are additions.
ENROLLED
2007 Legislature CS for CS for SB 1974, 2nd Engrossed (ntc)
1 5. An issue narrative describing and justifying
2 changes in amounts and positions requested for current and
3 proposed programs for the next fiscal year.
4 6. Information resource requests.
5 7. Supporting information, including applicable
6 cost-benefit analyses, business case analyses, performance
7 contracting procedures, service comparisons, and impacts on
8 performance standards for any request to outsource or
9 privatize agency functions. The cost-benefit and business case
10 analyses must include an assessment of the impact on each
11 affected activity from those identified in accordance with
12 paragraph (b). Performance standards must include standards
13 for each affected activity and be expressed in terms of the
14 associated unit of activity.
15 8. An evaluation of any major outsourcing and
16 privatization initiatives undertaken during the last 5 fiscal
17 years having aggregate expenditures exceeding $10 million
18 during the term of the contract. The evaluation shall include
19 an assessment of contractor performance, a comparison of
20 anticipated service levels to actual service levels, and a
21 comparison of estimated savings to actual savings achieved.
22 Consolidated reports issued by the Department of Management
23 Services may be used to satisfy this requirement.
24 9. Supporting information for any proposed
25 consolidated financing of deferred-payment commodity contracts
26 including guaranteed energy performance savings contracts.
27 Supporting information must also include narrative describing
28 and justifying the need, baseline for current costs, estimated
29 cost savings, projected equipment purchases, estimated
30 contract costs, and return on investment calculation.
31
26
CODING: Words stricken are deletions; words underlined are additions.
ENROLLED
2007 Legislature CS for CS for SB 1974, 2nd Engrossed (ntc)
1 10. For projects that exceed $10 million in total
2 cost, the statutory reference of the existing policy or the
3 proposed substantive policy that establishes and defines the
4 project's governance structure, planned scope, main business
5 objectives that must be achieved, and estimated completion
6 timeframes. Information technology budget requests for the
7 continuance of existing hardware and software maintenance
8 agreements, renewal of existing software licensing agreements,
9 or the replacement of desktop units with new technology that
10 is similar to the technology currently in use are exempt from
11 this requirement.
12 Section 13. Paragraph (a) of subsection (1) of section
13 943.0313, Florida Statutes, is amended to read:
14 943.0313 Domestic Security Oversight Council.--The
15 Legislature finds that there exists a need to provide
16 executive direction and leadership with respect to terrorism
17 prevention, preparation, protection, response, and recovery
18 efforts by state and local agencies in this state. In
19 recognition of this need, the Domestic Security Oversight
20 Council is hereby created. The council shall serve as an
21 advisory council pursuant to s. 20.03(7) to provide guidance
22 to the state's regional domestic security task forces and
23 other domestic security working groups and to make
24 recommendations to the Governor and the Legislature regarding
25 the expenditure of funds and allocation of resources related
26 to counter-terrorism and domestic security efforts.
27 (1) MEMBERSHIP.--
28 (a) The Domestic Security Oversight Council shall
29 consist of the following voting members:
30 1. The executive director of the Department of Law
31 Enforcement.
27
CODING: Words stricken are deletions; words underlined are additions.
ENROLLED
2007 Legislature CS for CS for SB 1974, 2nd Engrossed (ntc)
1 2. The director of the Division of Emergency
2 Management within the Department of Community Affairs.
3 3. The Attorney General.
4 4. The Commissioner of Agriculture.
5 5. The Secretary of Health.
6 6. The Commissioner of Education.
7 7. The State Fire Marshal.
8 8. The adjutant general of the Florida National Guard.
9 9. The state chief information officer of the State
10 Technology Office within the Department of Management
11 Services.
12 10. Each sheriff or chief of police who serves as a
13 co-chair of a regional domestic security task force pursuant
14 to s. 943.0312(1)(b).
15 11. Each of the department's special agents in charge
16 who serve as a co-chair of a regional domestic security task
17 force.
18 12. Two representatives of the Florida Fire Chiefs
19 Association.
20 13. One representative of the Florida Police Chiefs
21 Association.
22 14. One representative of the Florida Prosecuting
23 Attorneys Association.
24 15. The chair of the Statewide Domestic Security
25 Intelligence Committee.
26 16. One representative of the Florida Hospital
27 Association.
28 17. One representative of the Emergency Medical
29 Services Advisory Council.
30 18. One representative of the Florida Emergency
31 Preparedness Association.
28
CODING: Words stricken are deletions; words underlined are additions.
ENROLLED
2007 Legislature CS for CS for SB 1974, 2nd Engrossed (ntc)
1 19. One representative of the Florida Seaport
2 Transportation and Economic Development Council.
3 Section 14. Unless otherwise specified in this act,
4 the Department of Management Services, established in s.
5 20.22, Florida Statutes, shall assume the duties and
6 responsibilities of the State Technology Office as set forth
7 in ss. 215.322(2), 282.102, 282.103, 282.104, 282.105,
8 282.106, 282.107, 282.1095, 282.111, 282.21, 282.22, 288.1092,
9 288.1093, 365.171, 365.172, and 365.173, Florida Statutes.
10 Section 15. Sections 186.022, 282.005, 282.101,
11 282.23, 282.3031, 282.3032, 282.3063, and 282.310, Florida
12 Statutes, and subsection (24) of section 287.057, Florida
13 Statutes, are repealed.
14 Section 16. Paragraph (d) of subsection (2) of section
15 215.95, Florida Statutes, is amended to read:
16 215.95 Financial Management Information Board.--
17 (2) To carry out its duties and responsibilities, the
18 board shall by majority vote:
19 (d) By March 1 of each year, approve a strategic plan
20 pursuant to the requirements set forth in s. 186.022(9).
21 Section 17. Paragraph (a) of subsection (3) of section
22 215.96, Florida Statutes, is amended to read:
23 215.96 Coordinating council and design and
24 coordination staff.--
25 (3) The coordinating council, assisted by the design
26 and coordination staff, shall have the following duties,
27 powers, and responsibilities pertaining to the Florida
28 Financial Management Information System:
29 (a) To conduct such studies and to establish
30 committees, workgroups, and teams to develop recommendations
31 for rules, policies, procedures, principles, and standards to
29
CODING: Words stricken are deletions; words underlined are additions.
ENROLLED
2007 Legislature CS for CS for SB 1974, 2nd Engrossed (ntc)
1 the board as necessary to assist the board in its efforts to
2 design, implement, and perpetuate a financial management
3 information system, including, but not limited to, the
4 establishment of common data codes, and the development of
5 integrated financial management policies that address the
6 information and management needs of the functional owner
7 subsystems, and the development of a strategic plan pursuant
8 to the requirements set forth in s. 186.022. The coordinating
9 council shall make available a copy of the approved plan in
10 writing or through electronic means to each of the
11 coordinating council members, the fiscal committees of the
12 Legislature, and any interested person.
13 Section 18. Section 282.102, Florida Statutes, is
14 amended to read:
15 282.102 Creation of the State Technology Office;
16 Powers and duties.--There is created a State Technology Office
17 within the Department of Management Services. The office shall
18 be a separate budget entity, and shall be headed by a Chief
19 Information Officer who is appointed by the Governor and is in
20 the Senior Management Service. The Chief Information Officer
21 shall be an agency head for all purposes. The Department of
22 Management Services shall provide administrative support and
23 service to the office to the extent requested by the Chief
24 Information Officer. The office may adopt policies and
25 procedures regarding personnel, procurement, and transactions
26 for State Technology Office personnel. The office shall have
27 the following powers, duties, and functions:
28 (1) To publish electronically the portfolio of
29 services available from the department office, including
30 pricing information; the policies and procedures of the state
31 communications network office governing usage of available
30
CODING: Words stricken are deletions; words underlined are additions.
ENROLLED
2007 Legislature CS for CS for SB 1974, 2nd Engrossed (ntc)
1 services; and a forecast of the priorities and initiatives for
2 the state communications system for the ensuing 2 years.
3 (2) To adopt rules implementing policies and
4 procedures providing best practices to be followed by agencies
5 in acquiring, using, upgrading, modifying, replacing, or
6 disposing of information technology.
7 (3) To perform, in consultation with an agency, the
8 enterprise resource planning and management for the agency.
9 (4) To advise and render aid to state agencies and
10 political subdivisions of the state as to systems or methods
11 to be used for organizing and meeting information technology
12 requirements efficiently and effectively.
13 (5) To integrate the information technology systems
14 and services of state agencies.
15 (2)(6) To adopt technical standards for the state
16 communications network information technology system which
17 will ensure assure the interconnection of computer networks
18 and information systems of agencies.
19 (7) To assume management responsibility for any
20 integrated information technology system or service when
21 determined by the office to be economically efficient or
22 performance-effective.
23 (3)(8) To enter into agreements related to information
24 technology with state agencies and political subdivisions of
25 the state.
26 (9) To use and acquire, with agency concurrence,
27 information technology now owned or operated by any agency.
28 (4)(10) To purchase from or contract with information
29 technology providers for information technology, including
30 private line services.
31
31
CODING: Words stricken are deletions; words underlined are additions.
ENROLLED
2007 Legislature CS for CS for SB 1974, 2nd Engrossed (ntc)
1 (5)(11) To apply for, receive, and hold, and to assist
2 agencies in applying for, receiving, or holding, such
3 authorizations, patents, copyrights, trademarks, service
4 marks, licenses, and allocations or channels and frequencies
5 to carry out the purposes of this part.
6 (6)(12) To purchase, lease, or otherwise acquire and
7 to hold, sell, transfer, license, or otherwise dispose of
8 real, personal, and intellectual property, including, but not
9 limited to, patents, trademarks, copyrights, and service
10 marks.
11 (7)(13) To cooperate with any federal, state, or local
12 emergency management agency in providing for emergency
13 communications services.
14 (8)(14) To delegate, as necessary, to state agencies
15 the authority to purchase, lease, or otherwise acquire and to
16 use information technology or, as necessary, To control and
17 approve the purchase, lease, or acquisition and the use of all
18 information technology, including, but not limited to,
19 communications services provided as part of any other total
20 system to be used by the state or any of its agencies.
21 (15) To acquire ownership, possession, custody, and
22 control of existing communications equipment and facilities,
23 including all right, title, interest, and equity therein, as
24 necessary, to carry out the purposes of this part. However,
25 the provisions of this subsection shall in no way affect the
26 rights, title, interest, or equity in any such equipment or
27 facilities owned by, or leased to, the state or any state
28 agency by any telecommunications company.
29 (9)(16) To adopt rules pursuant to ss. 120.536(1) and
30 120.54 relating to communications information technology and
31 to administer the provisions of this part.
32
CODING: Words stricken are deletions; words underlined are additions.
ENROLLED
2007 Legislature CS for CS for SB 1974, 2nd Engrossed (ntc)
1 (17) To provide a means whereby political subdivisions
2 of the state may use state information technology systems upon
3 such terms and under such conditions as the office may
4 establish.
5 (10)(18) To apply for and accept federal funds for any
6 of the purposes of this part as well as gifts and donations
7 from individuals, foundations, and private organizations.
8 (11)(19) To monitor issues relating to communications
9 facilities and services before the Florida Public Service
10 Commission and, when necessary, prepare position papers,
11 prepare testimony, appear as a witness, and retain witnesses
12 on behalf of state agencies in proceedings before the
13 commission.
14 (12)(20) Unless delegated to the agencies by the
15 department Chief Information Officer, to manage and control,
16 but not intercept or interpret, communications within the
17 SUNCOM Network by:
18 (a) Establishing technical standards to physically
19 interface with the SUNCOM Network.
20 (b) Specifying how communications are transmitted
21 within the SUNCOM Network.
22 (c) Controlling the routing of communications within
23 the SUNCOM Network.
24 (d) Establishing standards, policies, and procedures
25 for access to the SUNCOM Network.
26 (e) Ensuring orderly and reliable communications
27 services in accordance with the service level agreements
28 executed with state agencies.
29 (13)(21) To plan, design, and conduct experiments for
30 communications information technology services, equipment, and
31 technologies, and to implement enhancements in the state
33
CODING: Words stricken are deletions; words underlined are additions.
ENROLLED
2007 Legislature CS for CS for SB 1974, 2nd Engrossed (ntc)
1 communications network information technology system when in
2 the public interest and cost-effective. Funding for such
3 experiments shall be derived from SUNCOM Network service
4 revenues and shall not exceed 2 percent of the annual budget
5 for the SUNCOM Network for any fiscal year or as provided in
6 the General Appropriations Act. New services offered as a
7 result of this subsection shall not affect existing rates for
8 facilities or services.
9 (14)(22) To enter into contracts or agreements, with
10 or without competitive bidding or procurement, to make
11 available, on a fair, reasonable, and nondiscriminatory basis,
12 property and other structures under departmental office
13 control for the placement of new facilities by any wireless
14 provider of mobile service as defined in 47 U.S.C. s. 153(n)
15 or s. 332(d) and any telecommunications company as defined in
16 s. 364.02 when it is determined to be practical and feasible
17 to make such property or other structures available. The
18 department office may, without adopting a rule, charge a just,
19 reasonable, and nondiscriminatory fee for the placement of the
20 facilities, payable annually, based on the fair market value
21 of space used by comparable communications facilities in the
22 state. The department office and a wireless provider or
23 telecommunications company may negotiate the reduction or
24 elimination of a fee in consideration of services provided to
25 the department office by the wireless provider or
26 telecommunications company. All such fees collected by the
27 department office shall be deposited directly into the Law
28 Enforcement Radio Operating Trust Fund, and may be used by the
29 department office to construct, maintain, or support the
30 system.
31
34
CODING: Words stricken are deletions; words underlined are additions.
ENROLLED
2007 Legislature CS for CS for SB 1974, 2nd Engrossed (ntc)
1 (23) To provide an integrated electronic system for
2 deploying government products, services, and information to
3 individuals and businesses.
4 (a) The integrated electronic system shall reflect
5 cost-effective deployment strategies in keeping with industry
6 standards and practices, including protections and security of
7 private information as well as maintenance of public records.
8 (b) The office shall provide a method for assessing
9 fiscal accountability for the integrated electronic system and
10 shall establish the organizational structure required to
11 implement this system.
12 (24) To provide administrative support to the Agency
13 Chief Information Officers Council and other workgroups
14 created by the Chief Information Officer.
15 (25) To facilitate state information technology
16 education and training for senior management and other agency
17 staff.
18 (26) To prepare, on behalf of the Executive Office of
19 the Governor, memoranda on recommended guidelines and best
20 practices for information resources management, when
21 requested.
22 (27) To prepare, publish, and disseminate the State
23 Annual Report on Enterprise Resource Planning and Management
24 under s. 282.310.
25 (28) To study and make a recommendation to the
26 Governor and Legislature on the feasibility of implementing
27 online voting in this state.
28 (29) To facilitate the development of a network access
29 point in this state, as needed.
30 (30) To designate a State Chief Privacy Officer who
31 shall be responsible for the continual review of policies,
35
CODING: Words stricken are deletions; words underlined are additions.
ENROLLED
2007 Legislature CS for CS for SB 1974, 2nd Engrossed (ntc)
1 laws, rules, and practices of state agencies which may affect
2 the privacy concerns of state residents.
3 Section 19. Subsection (1) of section 282.103, Florida
4 Statutes, is amended to read:
5 282.103 SUNCOM Network; exemptions from the required
6 use.--
7 (1) There is created within the Department of
8 Management Services State Technology Office the SUNCOM Network
9 which shall be developed to serve as the state communications
10 system for providing local and long-distance communications
11 services to state agencies, political subdivisions of the
12 state, municipalities, state universities, and nonprofit
13 corporations pursuant to ss. 282.102-282.111 ss.
14 282.101-282.111. The SUNCOM Network shall be developed to
15 transmit all types of communications signals, including, but
16 not limited to, voice, data, video, image, and radio. State
17 agencies shall cooperate and assist in the development and
18 joint use of communications systems and services.
19 Section 20. Subsections (1) and (2) of section
20 282.107, Florida Statutes, are amended to read:
21 282.107 SUNCOM Network; criteria for usage.--
22 (1) The Department of Management Services State
23 Technology Office shall periodically review the qualifications
24 of subscribers using the state SUNCOM Network and shall
25 terminate services provided to any facility not qualified
26 pursuant to ss. 282.102-282.111 ss. 282.101-282.111 or rules
27 adopted hereunder. In the event of nonpayment of invoices by
28 subscribers whose SUNCOM Network invoices are paid from
29 sources other than legislative appropriations, such nonpayment
30 represents good and sufficient reason to terminate service.
31
36
CODING: Words stricken are deletions; words underlined are additions.
ENROLLED
2007 Legislature CS for CS for SB 1974, 2nd Engrossed (ntc)
1 (2) The Department of Management Services State
2 Technology Office shall adopt rules for implementing and
3 operating the state SUNCOM Network, which shall include
4 setting forth its procedures for withdrawing and restoring
5 authorization to use the state SUNCOM Network. Such rules
6 shall provide a minimum of 30 days' notice to affected parties
7 prior to termination of voice communications service.
8 Section 21. Paragraph (b) of subsection (3) and
9 subsection (4) of section 339.155, Florida Statutes, are
10 amended to read:
11 339.155 Transportation planning.--
12 (3) FORMAT, SCHEDULE, AND REVIEW.--The Florida
13 Transportation Plan shall be a unified, concise planning
14 document that clearly defines the state's long-range
15 transportation goals and objectives and documents the
16 department's short-range objectives developed to further such
17 goals and objectives. The plan shall include a glossary that
18 clearly and succinctly defines any and all phrases, words, or
19 terms of art included in the plan, with which the general
20 public may be unfamiliar and shall consist of, at a minimum,
21 the following components:
22 (b) A short-range component documenting the short-term
23 objectives and strategies necessary to implement the goals and
24 long-term objectives contained in the long-range component.
25 The short-range component must define the relationship between
26 the long-range goals and the short-range objectives, specify
27 those objectives against which the department's achievement of
28 such goals will be measured, and identify transportation
29 strategies necessary to efficiently achieve the goals and
30 objectives in the plan. It must provide a policy framework
31 within which the department's legislative budget request, the
37
CODING: Words stricken are deletions; words underlined are additions.
ENROLLED
2007 Legislature CS for CS for SB 1974, 2nd Engrossed (ntc)
1 strategic information resource management plan, and the work
2 program are developed. The short-range component shall serve
3 as the department's annual agency strategic plan pursuant to
4 s. 186.021. The short-range component shall be developed
5 consistent with the requirements of s. 186.022 and consistent
6 with available and forecasted state and federal funds. In
7 addition to those entities listed in s. 186.022, The
8 short-range component shall also be submitted to the Florida
9 Transportation Commission.
10 (4) ANNUAL PERFORMANCE REPORT.--The department shall
11 develop an annual performance report evaluating the operation
12 of the department for the preceding fiscal year. The report,
13 which shall meet the requirements of s. 186.022, shall also
14 include a summary of the financial operations of the
15 department and shall annually evaluate how well the adopted
16 work program meets the short-term objectives contained in the
17 short-range component of the Florida Transportation Plan. In
18 addition to the entities listed in s. 186.022, This
19 performance report shall also be submitted to the Florida
20 Transportation Commission and the legislative appropriations
21 and transportation committees.
22 Section 22. Subsection (7) of section 381.90, Florida
23 Statutes, is amended to read:
24 381.90 Health Information Systems Council; legislative
25 intent; creation, appointment, duties.--
26 (7) The council's duties and responsibilities include,
27 but are not limited to, the following:
28 (a) By June 1 of each year, to develop and approve a
29 strategic plan pursuant to the requirements set forth in s.
30 186.022.
31
38
CODING: Words stricken are deletions; words underlined are additions.
ENROLLED
2007 Legislature CS for CS for SB 1974, 2nd Engrossed (ntc)
1 (a)(b) To develop a mission statement, goals, and plan
2 of action, based on the guiding principles specified in s.
3 282.3032, for the identification, collection, standardization,
4 sharing, and coordination of health-related data across
5 federal, state, and local government and private-sector
6 entities.
7 (b)(c) To develop a review process to ensure
8 cooperative planning among agencies that collect or maintain
9 health-related data.
10 (c)(d) To create ad hoc issue-oriented technical
11 workgroups, on an as-needed basis, to make recommendations to
12 the council.
13 Section 23. Subsection (4) of section 403.973, Florida
14 Statutes, is amended to read:
15 403.973 Expedited permitting; comprehensive plan
16 amendments.--
17 (4) The office may delegate to a Quick Permitting
18 County designated under s. 288.1093 the responsibility for
19 convening regional permit teams and, in consultation with the
20 office, for certifying as eligible for expedited review
21 projects that meet the criteria of subsection (3) and that are
22 consistent with the economic goals of the county. In order to
23 receive such a delegation, the Quick Permitting County must
24 hold the public hearing required under subsection (7) and
25 agree to execute a memorandum of agreement for each qualified
26 project.
27 Section 24. Paragraph (h) of subsection (8) of section
28 408.05, Florida Statutes, is amended to read:
29 408.05 Florida Center for Health Information and
30 Policy Analysis.--
31
39
CODING: Words stricken are deletions; words underlined are additions.
ENROLLED
2007 Legislature CS for CS for SB 1974, 2nd Engrossed (ntc)
1 (8) STATE CONSUMER HEALTH INFORMATION AND POLICY
2 ADVISORY COUNCIL.--
3 (h) The council's duties and responsibilities include,
4 but are not limited to, the following:
5 1. To develop a mission statement, goals, and a plan
6 of action based on the guiding principles specified in s.
7 282.3032 for the identification, collection, standardization,
8 sharing, and coordination of health-related data across
9 federal, state, and local government and private sector
10 entities.
11 2. To develop a review process to ensure cooperative
12 planning among agencies that collect or maintain
13 health-related data.
14 3. To create ad hoc issue-oriented technical
15 workgroups on an as-needed basis to make recommendations to
16 the council.
17 Section 25. Paragraph (b) of subsection (4) of section
18 420.0003, Florida Statutes, is amended to read:
19 420.0003 State housing strategy.--
20 (4) IMPLEMENTATION.--The Department of Community
21 Affairs and the Florida Housing Finance Corporation in
22 carrying out the strategy articulated herein shall have the
23 following duties:
24 (b) The agency strategic plan of the Department of
25 Community Affairs, prepared pursuant to the provisions of ss.
26 186.021 and 186.022, shall include specific goals, objectives,
27 and strategies that implement the housing policies in this
28 section and shall include the strategic plan for housing
29 production prepared by the corporation pursuant to s. 420.511.
30 Section 26. Subsection (2) of section 420.511, Florida
31 Statutes, is amended to read:
40
CODING: Words stricken are deletions; words underlined are additions.
ENROLLED
2007 Legislature CS for CS for SB 1974, 2nd Engrossed (ntc)
1 420.511 Business plan; strategic plan; annual
2 report.--
3 (2) The corporation, in equal partnership with the
4 department, shall develop annually a strategic plan for the
5 provision of affordable housing in Florida as part of the
6 department's agency strategic plan required pursuant to
7 chapter 186. In part, the plan shall include provisions that
8 maximize the abilities of the corporation and the department
9 to implement the state housing strategy established under s.
10 420.0003, to respond to federal housing initiatives, and to
11 develop programs in a manner that is more responsive to the
12 needs of public and private partners. The plan shall be
13 developed on a schedule consistent with that established by s.
14 ss. 186.021 and 186.022. For purposes of this act, the
15 executive director or his or her designee shall serve as the
16 corporation's representative to achieve a coordinated and
17 integrated planning relationship with the department.
18 Section 27. Subsection (3) of section 943.08, Florida
19 Statutes, is amended to read:
20 943.08 Duties; Criminal and Juvenile Justice
21 Information Systems Council.--
22 (3) The council shall develop and approve a long-range
23 program strategic plan pursuant to the requirements set forth
24 in s. 186.021 s. 186.022. Copies of the approved plan shall be
25 transmitted, electronically or in writing, to the Executive
26 Office of the Governor, the Speaker of the House of
27 Representatives, the President of the Senate, and the council
28 members.
29 Section 28. For the 2007-2008 fiscal year, the sum of
30 $1,100,160 in recurring funds is appropriated from the General
31 Revenue Fund and 10 full-time equivalent positions with an
41
CODING: Words stricken are deletions; words underlined are additions.
ENROLLED
2007 Legislature CS for CS for SB 1974, 2nd Engrossed (ntc)
1 associated salary rate of 732,000 are authorized to the Agency
2 for Enterprise Information Technology to carry out the duties
3 as provided in this act.
4 Section 29. For the 2007-2008 fiscal year, the sum of
5 $581,751 in recurring funds is appropriated from the General
6 Revenue Fund and five full-time equivalent positions with an
7 associated salary rate of 342,577 are authorized to the Agency
8 for Enterprise Information Technology to carry out the duties
9 of information security as provided in this act.
10 Section 30. The unexpended balance of funds provided
11 in Specific Appropriation 2243A of chapter 2006-25, Laws of
12 Florida, shall revert July 1, 2007, and is appropriated for
13 the 2007-2008 fiscal year for any efforts to consolidate data
14 center operations at the Technology Resource Center which are
15 cost-effective or for the purpose of offsetting any temporary
16 revenue shortfalls of the Technology Resource Center during
17 the transition to a full cost-recovery plan.
18 Section 31. For the 2007-2008 fiscal year, the sum of
19 $350,000 from nonrecurring funds is appropriated from the
20 General Revenue Fund to the Agency for Enterprise Information
21 Technology to contract for a feasibility study for a customer
22 relationship management system that defines and establishes
23 all state agency requirements for receiving, managing,
24 responding to, tracking, and reporting on telephone, e-mail,
25 personnel, and other communications received from the public.
26 Section 32. For the 2007-2008 fiscal year, the sum of
27 $300,000 from nonrecurring funds is appropriated from the
28 General Revenue Fund to the Executive Office of the Governor
29 to contract for services to develop a process to review and
30 analyze nonenterprise agency information technology requests.
31 Section 33. This act shall take effect July 1, 2007.
42
CODING: Words stricken are deletions; words underlined are additions.