Bill Text: MS SB2755 | 2026 | Regular Session | Introduced
Bill Title: ITS; create additional powers and responsibilities.
Sponsorship: Partisan Bill (Republican 2)
Status: (Failed) 2026-02-03 - Died In Committee [SB2755 Detail]
Download: Mississippi-2026-SB2755-Introduced.html
MISSISSIPPI LEGISLATURE
2026 Regular Session
To: Technology
By: Senator(s) DeLano, Williams
Senate Bill 2755
AN ACT TO AMEND SECTION 25-53-5, MISSISSIPPI CODE OF 1972, TO CREATE ADDITIONAL POWERS AND RESPONSIBILITIES FOR THE DEPARTMENT OF INFORMATION TECHNOLOGY SERVICES; TO AUTHORIZE ITS TO ESTABLISH AND ADMINISTER PROCUREMENT LISTS FOR CERTAIN PURPOSES; TO PROVIDE FOR COVERAGE OF TECHNOLOGY AND TELECOMMUNICATIONS HARDWARE NOT OTHERWISE AVAILABLE THROUGH PROCUREMENT; TO AUTHORIZE AWARD OF CERTAIN PROCUREMENTS BASED ON BEST VALUE; TO REQUIRE ITS TO ESTABLISH AND MAINTAIN A MANUFACTURER-BASED PROCUREMENT FRAMEWORK FOR CYBERSECURITY HARDWARE, CYBERSECURITY SOFTWARE, AND ASSOCIATED SERVICES; TO PROVIDE FOR ESTABLISHMENT OF CYBERSECURITY MANUFACTURER-BASED PROCUREMENT FRAMEWORK; TO PROVIDE THAT ANY CYBERSECURITY MANUFACTURER MEETING MINIMUM STANDARDS SHALL BE ELIGIBLE FOR INCLUSION IN THE CYBERSECURITY MANUFACTURER-BASED PROCUREMENT FRAMEWORK; TO AUTHORIZE ELIGIBLE ENTITIES TO SELECT CYBERSECURITY PRODUCTS OR SERVICES FROM ANY QUALIFIED MANUFACTURER UNDER THE FRAMEWORK; TO PRESCRIBE ELIGIBLE USERS; TO STIPULATE THAT PROCUREMENTS UNDER THIS ACT SHALL REMAIN SUBJECT TO OVERSIGHT BY THE DEPARTMENT OF FINANCE AND ADMINISTRATION, THE PUBLIC PROCUREMENT REVIEW BOARD AND THE STATE AUDITOR; AND FOR RELATED PURPOSES.
BE IT ENACTED BY THE LEGISLATURE OF THE STATE OF MISSISSIPPI:
SECTION 1. Section 25-53-5, Mississippi Code of 1972, is amended as follows:
25-53-5. (1) The authority shall have the following powers, duties, and responsibilities:
(a) The authority shall provide for the development of plans for the efficient acquisition and utilization of information technology by all agencies of state government, and provide for their implementation. In so doing, the authority may use the ITS' staff, at the discretion of the executive director of the authority, or the authority may contract for the services of qualified consulting firms in the field of information technology and utilize the service of such consultants as may be necessary for such purposes.
(b) The authority shall immediately institute procedures for carrying out the purposes of this chapter and supervise the efficient execution of the powers and duties of the executive director of the ITS. In the execution of its functions under this chapter, the authority shall maintain as a paramount consideration the successful internal organization and operation of the several agencies so that efficiency existing therein shall not be adversely affected or impaired. In executing its functions in relation to the institutions of higher learning and junior colleges in the state, the authority shall take into consideration the special needs of such institutions in relation to the fields of teaching and scientific research.
(c) The authority shall adopt rules, regulations, and procedures governing the acquisition of information technology which shall, to the fullest extent practicable, ensure the maximum of competition between all manufacturers of supplies or equipment or services. In the writing of specifications, in the making of contracts relating to the acquisition of such information technology, and in the performance of its other duties the authority shall provide for the maximum compatibility of all information systems hereafter installed or utilized by all state agencies and may require the use of common computer languages where necessary to accomplish the purposes of this chapter. The authority may establish by regulation and charge reasonable fees on a nondiscriminatory basis for the furnishing to bidders of copies of bid specifications and other documents issued by the authority.
(d) The authority shall adopt rules and regulations governing the sharing with, or the sale or lease of information technology services to any nonstate agency or person. Such regulations shall provide that any such sharing, sale or lease shall be restricted in that same shall be accomplished only where such services are not readily available otherwise within the state, and then only at a charge to the user not less than the prevailing rate of charge for similar services by private enterprise within this state.
(e) The authority may, in its discretion, establish a special technical advisory committee or committees to study and make recommendations on matters within the competence of the authority as the authority may see fit. Persons serving on any such committees shall be entitled to receive their actual and necessary expenses actually incurred in the performance of such duties, together with mileage as provided by law for state employees, provided the same has been authorized by a resolution duly adopted by the authority and entered on its minutes prior to the performance of such duties. For the purposes of this paragraph, such committee meetings are exempt from the requirements of Sections 25-41-1 through 25-41-17.
(f) The authority may provide for the development and require the adoption of standardized computer programs and may provide for the dissemination of information to and the establishment of training programs for the personnel of the various information technology centers of state agencies and personnel of the agencies utilizing the services thereof.
(g) The authority shall adopt reasonable rules and regulations requiring the reporting to the authority through the office of executive director of such information as may be required for carrying out the purposes of this chapter and may also establish such reasonable procedures to be followed in the presentation of bills for payment under the terms of all contracts for the acquisition of information technology now or hereafter in force as may be required by the authority or by the executive director in the execution of their powers and duties.
(h) The authority shall require such adequate documentation of information technology procedures utilized by the various state agencies and may require the establishment of such organizational structures within state agencies relating to information technology operations as may be necessary to effectuate the purposes of this chapter.
(i) The authority may adopt such further reasonable rules and regulations as may be necessary to fully implement the purposes of this chapter. All rules and regulations adopted by the authority shall be published in readily accessible form to all affected state agencies, and to all current suppliers of computer equipment and services to the state, and to all prospective suppliers requesting the same. Such rules and regulations shall be kept current, be periodically revised, and copies thereof shall be available at all times for inspection by the public at reasonable hours in the offices of the authority. Whenever possible no rule, regulation or any proposed amendment to such rules and regulations shall be finally adopted or enforced until copies of the proposed rules and regulations have been published.
(j) The authority shall establish rules and regulations which shall provide for the submission of all contracts proposed to be executed by the executive director for information technology, including cloud computing, to the authority for approval before final execution, and the authority may provide that such contracts involving the expenditure of less than such specified amount as may be established by the authority may be finally executed by the executive director without first obtaining such approval by the authority.
(k) The authority is authorized to consider new technologies, such as cloud computing, to purchase, lease, or rent information technology and to operate that information technology when in its opinion such operation will provide maximum efficiency and economy in the functions of any such agency or agencies.
(l) Upon the request of the governing body of a political subdivision or instrumentality, the authority shall assist the political subdivision or instrumentality in its development of plans for the efficient acquisition and utilization of information technology. An appropriate fee shall be charged the political subdivision by the authority for such assistance.
(m) The authority shall adopt rules and regulations governing the protest procedures to be followed by any actual or prospective bidder, offerer or contractor who is aggrieved in connection with the solicitation or award of a contract for the acquisition of information technology. Such rules and regulations shall prescribe the manner, time and procedure for making protests and may provide that a protest not timely filed shall be summarily denied. The authority may require the protesting party, at the time of filing the protest, to post a bond, payable to the state, in an amount that the authority determines sufficient to cover any expense or loss incurred by the state; however, in no event may the amount of the bond required exceed a reasonable estimate of the total project cost. The authority, in its discretion, also may prohibit any prospective bidder, offerer or contractor who is a party to any protest or litigation involving any such contract with the state, the authority or any agency of the state to participate in any other such bid, offer or contract, or to be awarded any such contract, during the pendency of the protest or litigation.
(n) The authority shall make a report in writing to the Legislature each year in the month of January. Such report shall contain a full and detailed account of the work of the authority for the preceding year as specified in Section 25-53-29(3).
All acquisitions of information technology involving the expenditure of funds in excess of the dollar amount established in Section 31-7-13(c), or rentals or leases in excess of the dollar amount established in Section 31-7-13(c) for the term of the contract, shall be based upon bid. The authority may reserve the right to reject any or all bids, and if all bids are rejected, the authority may negotiate a contract within the limitations of the specifications so long as the terms of any such negotiated contract are equal to or better than the lowest bidder, and so long as the total cost to the State of Mississippi does not exceed the lowest bid. If the authority accepts one (1) of such bids, it shall be that which is the lowest and best. The provisions of this paragraph shall not apply to acquisitions of information technology equipment and services made by the Mississippi Department of Health and the Mississippi Department of Revenue for the purposes of implementing, administering and enforcing the provisions of the Mississippi Medical Cannabis Act by June 30, 2024.
(o) When applicable, the authority may procure information technology in accordance with the law or regulations, or both, which govern the Bureau of Purchasing of the Office of General Services or which govern the Mississippi Department of Information Technology Services procurement of information technology.
(p) The authority is authorized to purchase, lease, or rent information technology for the purpose of establishing pilot projects to investigate emerging technologies. These acquisitions shall be limited to new technologies and shall be limited to an amount set by annual appropriation of the Legislature. These acquisitions shall be exempt from the advertising and bidding requirement.
(q) To promote the maximum use and benefit from technology and services now in operation or which will in the future be placed in operation and to identify opportunities, minimize duplication, reduce costs and improve the efficiency of providing common technology services the authority is authorized to:
(i) Enter into master agreements for information technology, including cloud computing, available for shared use by state agencies, institutions of higher learning and governing authorities; and
(ii) Enter into contracts for the acquisition of information technology, including cloud computing, that have been acquired by other entities, located within or outside of the State of Mississippi, so long as it is determined by the authority to be in the best interest of the state. The acquisitions provided in this paragraph (q) shall be exempt from the advertising and bidding requirements of Sections 25-53-1 et seq. and 31-7-1 et seq.
(r) All fees collected by the Mississippi Department of Information Technology Services shall be deposited into the Mississippi Department of Information Technology Services Revolving Fund unless otherwise specified by the Legislature.
(s) The authority shall work closely with the council to bring about effective coordination of policies, standards and procedures relating to procurement of remote sensing and geographic information systems (GIS) resources.
(t) The authority shall manage one or more State Data Centers to provide information technology services on a cost-sharing basis. In determining the appropriate services to be provided through the State Data Center, the authority should consider those services that:
(i) Result in savings to the state as a whole;
(ii) Improve and enhance the security and reliability of the state's information and business systems; and
(iii) Optimize the efficient use of the state's information technology assets, including, but not limited to, promoting partnerships with the state institutions of higher learning and community colleges to capitalize on advanced information technology resources.
(u) The authority shall oversee the Mississippi Statewide Data Exchange, ensuring compliance with the requirements of Section 25-53-281. The Department of Information Technology Services shall have the authority to promulgate rules and regulations necessary to develop, implement and oversee the Mississippi Statewide Data Exchange. The department shall engage with state agencies and other stakeholders to identify data-sharing opportunities and address potential barriers. Additionally, the department shall establish a Chief Information Officer (CIO) Council, composed of information technology leadership from state agencies, to provide strategic oversight, promote interoperability and recommend policies to enhance the effectiveness and security of statewide data-sharing initiatives.
(v) The authority shall increase federal participation in the cost of the State Data Center to the extent provided by law and its shared technology infrastructure through providing such shared services to agencies that receive federal funds. With regard to state institutions of higher learning and community colleges, the authority may provide shared services when mutually agreeable, following a determination by both the authority and the Board of Trustees of State Institutions of Higher Learning or the Mississippi Community College Board, as the case may be, that the sharing of services is mutually beneficial.
(w) The authority, in its discretion, may require new or replacement agency business applications to be hosted at the State Data Center. With regard to state institutions of higher learning and community colleges, the authority and the Board of Trustees of State Institutions of Higher Learning or the Mississippi Community College Board, as the case may be, may agree that institutions of higher learning or community colleges may utilize business applications that are hosted at the State Data Center, following a determination by both the authority and the applicable board that the hosting of those applications is mutually beneficial. In addition, the authority may establish partnerships to capitalize on the advanced technology resources of the Board of Trustees of State Institutions of Higher Learning or the Mississippi Community College Board, following a determination by both the authority and the applicable board that such a partnership is mutually beneficial.
(x) The authority shall provide a periodic update regarding reform-based information technology initiatives to the Chairmen of the House and Senate Accountability, Efficiency and Transparency Committees.
From and after July 1, 2018, the expenses of this agency shall be defrayed by appropriation from the State General Fund. In addition, in order to receive the maximum use and benefit from information technology and services, expenses for the provision of statewide shared services that facilitate cost-effective information technology shall be defrayed by pass-through funding and shall be deposited into the Mississippi Department of Information Technology Services Revolving Fund unless otherwise specified by the Legislature. These funds shall only be utilized to pay the actual costs incurred by the Mississippi Department of Information Technology Services for providing these shared services to state agencies. Furthermore, state agencies shall work in full cooperation with the Board of the Mississippi Department of Information Technology Services to identify information technology to minimize duplication, reduce costs, and improve the efficiency of providing common technology services across agency boundaries.
(2) In addition to any other powers and duties provided by law, the Department of Information Technology Services ("ITS") shall have the following powers and duties:
(a) ITS is authorized to establish and administer express procurement lists, preferred vendor lists, qualified vendor lists or similar procurement frameworks for information technology, telecommunications, cybersecurity, cloud services and related hardware and software.
(b) With respect to information technology or telecommunications hardware that is not otherwise available through an express procurement list or statewide contract administered by ITS, the Department of Information Technology Services shall provide a procurement pathway by:
(i) Entering into a participating addendum or other agreement under a nationally recognized cooperative purchasing program approved by the department; or
(ii) Establishing and administering an express procurement list, master agreement or similar procurement vehicle directly.
Such authority may be exercised for hardware categories that are commonly used in technology or telecommunications systems, including components, endpoints, appliances or related equipment, regardless of whether such hardware is bundled with software or services.
Nothing in this paragraph shall require the department to utilize a particular cooperative contract or to establish a procurement vehicle for every individual product, provided that the department ensures reasonable access to commonly used hardware categories not otherwise covered.
(c) Procurements conducted pursuant to an express procurement list, cooperative purchasing agreement approved by ITS, or cloud or shared services program administered by ITS may be awarded based on best value.
For purposes of this section, "best value" means a selection based on defined evaluation factors, of which price is required to be considered but is not the controlling factor. An eligible entity shall not be required to select the lowest-priced offering.
(d) For cybersecurity hardware, cybersecurity software and associated professional or managed services, ITS shall establish and maintain a manufacturer-based procurement framework.
(e) In establishing the cybersecurity manufacturer-based procurement framework, ITS shall:
(i) Establish minimum technical, security and qualification standards that manufacturers must meet to participate;
(ii) Evaluate manufacturers solely for compliance with such minimum standards;
(iii) Maintain and publish a list of qualified cybersecurity manufacturers eligible for procurement under the framework; and
(iv) Issue instructions for use governing procurement under the framework.
(f) Any cybersecurity manufacturer meeting the minimum standards established by ITS shall be eligible for inclusion in the cybersecurity manufacturer-based procurement framework. Once qualified, a manufacturer may offer its full portfolio of cybersecurity products, software, subscriptions and associated services under the framework.
(g) Eligible entities may select cybersecurity products or services from the offerings of any qualified manufacturer under the framework. Following such selection, procurement may be completed through authorized resellers, distributors or implementation partners in accordance with the applicable instructions for use and the value-based selection standard set forth in this section.
(h) Procurement frameworks established under this section may be utilized by state agencies, institutions of higher learning, community and junior colleges and local governing authorities. Use of such frameworks shall be permissive, not mandatory, for entities not under the operational control of ITS.
(i) Procurements conducted pursuant to this section shall remain subject to oversight by the Department of Finance and Administration, the Public Procurement Review Board and the State Auditor.
SECTION 2. This act shall take effect and be in force from and after July 1, 2026.
