Bill Text: IA SF539 | 2021-2022 | 89th General Assembly | Introduced
Bill Title: A bill for an act relating to the office of the chief information officer, including procurement preferences and a report detailing state information technology assets.(Formerly SF 29.)
Spectrum: Committee Bill
Status: (Introduced - Dead) 2021-04-01 - Referred to State Government. S.J. 726. [SF539 Detail]
Download: Iowa-2021-SF539-Introduced.html
Senate
File
539
-
Introduced
SENATE
FILE
539
BY
COMMITTEE
ON
STATE
GOVERNMENT
(SUCCESSOR
TO
SF
29)
A
BILL
FOR
An
Act
relating
to
the
office
of
the
chief
information
officer,
1
including
procurement
preferences
and
a
report
detailing
2
state
information
technology
assets.
3
BE
IT
ENACTED
BY
THE
GENERAL
ASSEMBLY
OF
THE
STATE
OF
IOWA:
4
TLSB
1409SV
(2)
89
jda/rn
S.F.
539
Section
1.
Section
8B.1,
Code
2021,
is
amended
by
adding
the
1
following
new
subsection:
2
NEW
SUBSECTION
.
2A.
“Cloud
computing”
means
the
same
as
3
defined
in
the
United
States
national
institute
of
standards
4
and
technology’s
special
publication
800-145.
5
Sec.
2.
Section
8B.24,
Code
2021,
is
amended
by
adding
the
6
following
new
subsection:
7
NEW
SUBSECTION
.
5A.
a.
The
office
shall,
when
feasible,
8
procure
from
providers
that
comply
with
federal
authorization
9
or
accreditation
programs
for
information
technology,
10
third-party
cloud
computing
solutions
and
other
information
11
technology
and
related
services
that
are
not
hosted
on
premises
12
by
the
state.
13
b.
If
the
office
determines
it
is
not
feasible
to
procure
14
third-party
cloud
computing
solutions
or
other
information
15
technology
and
related
services
pursuant
to
paragraph
“a”
,
and
16
if
on-premises
technology
upgrades
or
new
applications
to
be
17
housed
on-premises
are
proposed,
the
office
shall
include
all
18
of
the
following
in
a
report
to
the
members
of
the
general
19
assembly:
20
(1)
An
explanation
as
to
why
a
cloud
computing
deployment
21
was
not
feasible.
22
(2)
A
cost-benefit
analysis
of
the
on-premises
technology
23
upgrades
or
new
applications
compared
to
the
cloud
computing
24
solution
or
other
information
technology-related
service.
25
(3)
Compliance
frameworks
that
require
the
application
to
26
be
hosted
on-premises.
27
c.
The
office
may
contract
with
multiple
third-party
28
commercial
cloud
computing
service
providers.
29
d.
The
control
and
ownership
of
state
data
stored
with
cloud
30
computing
service
providers
shall
remain
with
the
state.
The
31
office
shall
ensure
the
portability
of
state
data
stored
with
32
cloud
computing
service
providers.
33
Sec.
3.
Section
8B.24,
subsection
6,
Code
2021,
is
amended
34
to
read
as
follows:
35
-1-
LSB
1409SV
(2)
89
jda/rn
1/
3
S.F.
539
6.
The
office
shall
adopt
rules
pursuant
to
chapter
17A
to
1
implement
the
procurement
methods
and
procedures
provided
for
2
in
subsections
2
through
5
5A
.
3
Sec.
4.
INVENTORY
OF
INFORMATION
TECHNOLOGY
ASSETS,
CURRENT
4
CLOUD
COMPUTING
ADOPTION,
AND
CLOUD
COMPUTING
MIGRATION
PLAN
5
——
REPORT.
By
November
1,
2021,
the
office
of
the
chief
6
information
officer,
in
collaboration
with
other
state
agencies
7
and
departments,
shall
provide
a
report
to
the
general
assembly
8
that
includes
all
of
the
following:
9
1.
An
inventory
of
all
state
information
technology
10
applications,
and
the
percentage
of
the
information
technology
11
applications
that
are
cloud-based
applications.
12
2.
Recommendations
regarding
state
information
technology
13
applications
that
should
migrate
to
cloud-based
applications.
14
Each
such
recommendation
shall
include
a
description
of
15
workloads
and
information
technology
applications
that
are
best
16
suited
to
migrate
to
cloud-based
applications
given
all
of
the
17
following
considerations:
18
a.
Whether
the
information
technology
application
has
19
underlying
storage,
networks,
or
infrastructure
that
supports
20
another
information
technology
application,
and
whether
the
21
information
technology
application
is
supported
by
another
22
information
technology
application.
23
b.
How
critical
the
information
technology
application
is
24
to
the
mission
of
the
state
agency
or
department.
25
c.
The
difficulty
of
migrating
the
information
technology
26
application
to
a
cloud-based
application.
27
d.
The
total
cost
of
ownership
of
the
target
environment
in
28
which
the
information
technology
application
shall
operate
if
29
migrated
to
a
cloud-based
application.
30
EXPLANATION
31
The
inclusion
of
this
explanation
does
not
constitute
agreement
with
32
the
explanation’s
substance
by
the
members
of
the
general
assembly.
33
This
bill
relates
to
the
office
of
the
chief
information
34
officer,
including
procurement
preferences
and
a
report
35
-2-
LSB
1409SV
(2)
89
jda/rn
2/
3
S.F.
539
detailing
state
information
technology
assets.
1
The
bill
defines
“cloud
computing”
by
reference
to
the
2
United
States
national
institute
of
standards
and
technology’s
3
special
publication
800-145,
which
defines
the
term
as
a
model
4
for
enabling
ubiquitous,
convenient,
on-demand
network
access
5
to
a
shared
pool
of
configurable
computing
resources
that
can
6
be
rapidly
provisioned
and
released
with
minimal
management
7
effort
or
service
provider
interaction.
8
The
bill
requires
the
office
to,
when
feasible,
procure
9
third-party
cloud
computing
solutions
and
other
information
10
technology
and
related
services
that
comply
with
federal
11
authorization
or
accreditation
programs,and
standards
for
12
information
technology.
13
The
bill
requires
the
office
to
submit
a
report
to
the
14
members
of
the
general
assembly
when
the
office
determines
15
it
is
not
feasible
to
procure
third-party
cloud
computing
16
solutions.
Additionally,
the
bill
requires
the
report
to
17
include
an
explanation
as
to
why
cloud
computing
deployment
18
was
not
feasible,
a
cost-benefit
analysis
of
the
on-premises
19
technology
upgrades
compared
to
the
cloud
computing
solution,
20
and
compliance
frameworks
that
require
the
application
to
be
21
hosted
on-premises.
22
The
bill
authorizes
the
office
to
contract
with
multiple
23
third-party
commercial
cloud
computing
service
providers.
24
The
bill
establishes
that
control
and
ownership
of
state
25
data
stored
with
cloud
computing
service
providers
shall
remain
26
with
the
state.
The
bill
requires
the
office
to
ensure
the
27
portability
of
state
data
stored
with
cloud
computing
service
28
providers.
29
The
bill
requires
the
office
to
provide
a
report
to
the
30
general
assembly
by
November
1,
2021,
that
includes
an
31
inventory
of
all
state
information
technology
applications,
32
and
recommendations
regarding
state
information
technology
33
applications
that
should
migrate
to
cloud-based
applications.
34
-3-
LSB
1409SV
(2)
89
jda/rn
3/
3
