Bills › 89th General Assembly
Relating to the office of the chief information officer, including procurement preferences and a report detailing state information technology assets
Topics:State government
Where it is now
- Done: IntroducedJanuary 11, 2021
- Done: SubcommitteeJanuary 14, 2021
- Done: Senate committeeMarch 4, 2021
- Skipped: Passes the SenateContinued as SF 539
- Next: House committee
- Next: Passes the House
- Next: To the Governor
- Next: Signed into law
Became SF 539 → Its progress continues under the new number. Go to SF 539 What’s a funnel?
What’s in it
AI summary Iowa's chief information officer will now prioritize buying cloud computing services from outside companies instead of hosting everything on state-owned equipment. If the state decides not to use a cloud solution, the office must explain why and look for other ways to save money. The state will also keep ownership of all its data and must ensure that information can be easily moved between different service providers.1
Read the official explanation
This bill relates to the office of the chief information officer, including procurement preferences and a report detailing state information technology assets. The bill defines “cloud computing” by reference to the United States national institute of standards and technology’s special publication 800-145, which defines the term as a model for enabling ubiquitous, convenient, on-demand network access to a shared pool of configurable computing resources that can be rapidly provisioned and released with minimal management effort or service provider interaction. Current law requires the office to submit a quarterly report regarding the status of technology upgrades or enhancements for state agencies. The bill requires this report to also include information related to the office’s determination that it was not feasible to procure a cloud computing solution, including an explanation as to why a cloud computing deployment was not feasible, whether the application can be deployed using a hybrid or containerized approach to minimize on-premise costs, and compliance frameworks that require the application to be hosted on-premises. The bill requires the office to, when feasible, procure third-party cloud computing solutions and other information technology and related services that are not hosted on premises by the state from providers that meet or exceed applicable state and federal laws, regulations, and standards for information technology. third-party commercial cloud computing service providers. The bill establishes that control and ownership of state data stored with cloud computing service providers shall remain with the state. The bill requires the office to ensure the portability of state data stored with cloud computing service providers. The bill requires the office to provide a report to the general assembly by November 1, 2021, that includes an inventory of all state information technology applications, and recommendations regarding state information technology applications that should migrate to cloud-based applications.
Senate subcommittee
Named January 14, 2021. On January 27, 2021 it recommended passage.
Three legislators hear a bill first and recommend what the committee should do; it’s the best time to weigh in. How to take part
Fiscal note
AI summary This bill requires the Office of the Chief Information Officer to prefer cloud computing solutions for state technology services and submit specific reports to the General Assembly. The Office of the Chief Information Officer estimates it may need to hire three new positions, which would cost $350,000 annually for fiscal year 2022, fiscal year 2023, and fiscal year 2024. The estimated cost or savings from actually purchasing these cloud computing solutions cannot be estimated at this time.3
Read the fiscal note
Description
Senate File 539 relates to cloud computing procurement preferences for the Office of the Chief Information Officer (OCIO). The Bill requires the OCIO to procure, when feasible, cloud computing solutions and other information technology and related services not hosted on premises by the State from service providers that comply with federal authorization or accreditation programs for information technology. The Bill requires that the control and ownership of State data stored with cloud computing service providers is to remain with the State, requires the data to be portable, and allows the OCIO to contract with multiple providers. If the OCIO determines it is not feasible to procure a cloud computing solution, the Bill requires OCIO to submit a report to the General Assembly with the following information:
- An explanation as to why a cloud computing deployment was not feasible.
- A cost-benefit analysis of the on-premises technology upgrades or new applications compared to the cloud computing solution or other information technology-related service.
- Compliance frameworks that require the application to be hosted on premise. Senate File 539 also requires the OCIO to provide a report to the General Assembly by November 1, 2021, that includes a complete inventory of all State information technology applications, including the percentage of cloud-based applications, and recommendations for applications that should migrate to cloud-based applications.
Background
The National Institute of Standards and Technology (NIST) defines cloud computing in Special Publication 800-145 as a “model for enabling ubiquitous, convenient, on-demand network access to a shared pool of configurable computing resources that can be rapidly provisioned and released with minimal management effort or service provider interaction.” The OCIO has reported that many State agencies have migrated to cloud services on a case-by-case basis, including email, human resources, and Web hosting investments.
Assumptions
- To manage the implementation of annual reporting requirements, feasibility analysis, and review of agency inventories, the OCIO estimates that it may need to hire 3.0 additional full-time equivalent (FTE) positions that include: two Executive Officer 3 positions and one Budget Analyst 2 position.
- The OCIO’s salary and benefit estimates are based on hiring decisions at the high end of the pay scale for the identified position.
Fiscal Impact
The estimated cost or cost savings from procuring third-party cloud computing solutions cannot be estimated at this time. The OCIO estimates that cloud computing solutions may be cheaper in some circumstances but could significantly increase costs in other circumstances. As a result, the overall aggregate information technology costs cannot be determined. Table 1 below shows the estimated costs associated with filling the FTE positions on an annual basis, as reported by the OCIO.
The total cost reflects the full salary plus benefits for each position and assumes hiring at the high end of the pay grade. Therefore, costs could be expected to vary depending on the hire and selected benefit plans.
Sources
- Office of the Chief Information Officer
- Department of Management
- Cloud Computing Procurement Preference · March 8, 2021
- Cloud Computing Procurement Preference · March 1, 2021
Iowa Code it changes
Lobbying
5 for · 4 against · 8 undecided · Who →
Family tree
Tried before
Study bill
Earlier and later bills are matched by wording or an identical title.
Tried before
This idea has been filed in an earlier General Assembly. None became law, though one got through a chamber.
- SF 2349 Relating to the office of the chief information officer, including procurement preferences…88th General Assembly · Passed both chambers · nearly identicalPassed a chamber
Similar bills this General Assembly
- SSB 1050 SSB 105089th General Assembly · In committeeNearly identical
Matched by wording or an identical title.