Relating to the office of the chief information officer, including procurement preferences and a report detailing state information technology assets

Current law requires the office to submit a quarterly report regarding the status of technology upgrades or enhancements for state agencies. The bill requires this report to also include information related to the office’s determination that it was not feasible to procure a cloud computing solution, including an explanation as to why a cloud computing deployment was not feasible, whether the application can be deployed using a hybrid or containerized approach to minimize on-premise costs, and compliance frameworks that require the application to be hosted on-premises. The bill requires the office to, when feasible, procure third-party cloud computing solutions and other information technology and related services that are not hosted on premises by the state from providers that meet or exceed applicable state and federal laws, regulations, and standards for information technology. The bill provides the office shall contract with multiple third-party commercial cloud computing service providers. The bill also encourages state agencies and departments to work with at least three third-party commercial cloud service providers. The bill establishes that control and ownership of state data stored with cloud computing service providers shall remain with the state. The bill requires the office to ensure the portability of state data stored with cloud computing service providers. The bill requires the office to provide a report to the general assembly by November 1, 2020, that includes an inventory of all state information technology applications, and recommendations regarding state information technology applications that should migrate to cloud-based applications.