83R22017 YDB-D

By: Elkins H.B. No. 3093

Substitute the following for H.B. No. 3093:

By: Elkins C.S.H.B. No. 3093

A BILL TO BE ENTITLED

AN ACT

relating to the powers and duties of the Department of Information Resources and the Legislative Budget Board regarding information resources technologies of state agencies.

BE IT ENACTED BY THE LEGISLATURE OF THE STATE OF TEXAS:

SECTION 1. Section 2054.051, Government Code, is amended by adding Subsection (h) to read as follows:

(h) The department shall:

(1) coordinate with the quality assurance team and Legislative Budget Board to develop contracting standards for information resources technologies acquisition and purchased services; and

(2) work with state agencies to ensure deployment of standardized contracts.

SECTION 2. Section 2054.055, Government Code, is amended by amending Subsection (b) and adding Subsection (b-2) to read as follows:

(b) The report must:

(1) assess the progress made toward meeting the goals and objectives of the state strategic plan for information resources management;

(2) describe major accomplishments of the state or a specific state agency in information resources management;

(3) describe major problems in information resources management confronting the state or a specific state agency;

(4) provide a summary of the total expenditures for information resources and information resources technologies by the state;

(5) make recommendations for improving the effectiveness and cost-efficiency of the state's use of information resources;

(6) describe the status, progress, benefits, and efficiency gains of the state electronic Internet portal project, including any significant issues regarding contract performance;

(7) provide a financial summary of the state electronic Internet portal project, including project costs and revenues;

(8) provide a summary of the amount and use of Internet-based training conducted by each state agency and institution of higher education;

(9) provide a summary of agency and statewide results in providing access to electronic and information resources to individuals with disabilities as required by Subchapter M; [and]

(10) assess the progress made toward accomplishing the goals of the plan for a state telecommunications network and developing a system of telecommunications services as provided by Subchapter H;

(11) identify proposed major information resources projects for the next state fiscal biennium, including project costs through stages of the project and across state fiscal years from project initiation to implementation;

(12) examine major information resources projects completed in the previous state fiscal biennium to determine the performance of the implementing state agency, cost and value effectiveness, timeliness, and other performance criteria necessary to assess the quality and value of the investment; and

(13) examine major information resources projects after the second anniversary of the project's completion to determine progress toward meeting performance goals and operating budget savings.

(b-2) The information required under Subsection (b)(11) must include:

(1) final total cost of ownership budget data for the entire life cycle of the major information resources project, including capital and operational costs that itemize staffing costs, contracted services, hardware purchased or leased, software purchased or leased, travel, and training;

(2) the original project schedule and the final actual project schedule;

(3) data on the progress toward meeting the original goals and performance measures of the project, specifically those related to operating budget savings;

(4) lessons learned on the project, performance evaluations of any vendors used in the project, and reasons for project delays or cost increases; and

(5) the benefits, cost avoidance, and cost savings generated by major technology resources projects.

SECTION 3. Subchapter C, Chapter 2054, Government Code, is amended by adding Sections 2054.065 and 2054.066 to read as follows:

Sec. 2054.065. IDENTITY MANAGEMENT PILOT PROGRAM. (a) In this section, "identity management" means the act of controlling information about computer users, including information that:

(1) authenticates the identity of a user;

(2) describes the user, the data the user is authorized to access, and the actions the user is authorized to perform; and

(3) specifies the individuals who and methods that are authorized to access and modify the data.

(b) The department, using available funds and with the cooperation of state agencies selected by the department, shall develop and execute an identity management pilot program to address the delivery, support, maintenance, and operation of a centralized identity management technology.

(c) The pilot program shall assess:

(1) the costs of identity management to each state agency participating in the pilot program;

(2) the opportunities for other state agencies to use identity management policies and best practices identified by the department;

(3) the benefits to state agencies of identity management based on the results of the pilot program; and

(4) to the extent feasible, the use by state agencies of multifactor authentication, including biometric measures.

(d) Not later than November 1, 2014, the department shall:

(1) prepare a report on the assessments made under Subsection (c) that identifies the short-term and long-term costs, risks, benefits, and other impacts to state agencies and this state of implementing centralized identity management; and

(2) submit a copy of the report to the governor, the lieutenant governor, the speaker of the house of representatives, the standing committees of the legislature with jurisdiction over state agency technology, and the Legislative Budget Board.

(e) To implement the pilot program, the department may contract with one or more private providers for identity management services.

(f) This section expires January 1, 2016.

Sec. 2054.066. DEPARTMENT REVIEW. (a) The department, in consultation with the quality assurance team and Legislative Budget Board, shall review existing statutes, procedures, data, and organizational structures to identify opportunities to increase efficiency, customer service, and transparency in information resources technologies. The department must:

(1) identify and address financial data needed to comprehensively evaluate information resources technologies spending from an enterprise perspective;

(2) review best practices in information resources technologies governance, including private sector practices and lessons learned from other states; and

(3) review existing statutes regarding information resources technologies governance, standards, and financing to identify inconsistencies between current law and best practices.

(b) The department shall report its findings and recommendations to the governor, lieutenant governor, speaker of the house of representatives, and House Technology Committee not later than December 1, 2014.

(c) This section expires January 1, 2016.

SECTION 4. Section 2054.102, Government Code, is amended by adding Subsection (b-1) to read as follows:

(b-1) The Legislative Budget Board, in consultation with the department, shall establish criteria to evaluate state agency biennial operating plans. In developing the criteria, the board shall include criteria on:

(1) the feasibility of proposed information resources projects for the biennium;

(2) the consistency of the plan with the state strategic plan;

(3) the appropriate provision of public electronic access to information;

(4) evidence of business process streamlining and gathering of business and technical requirements; and

(5) services, costs, and benefits.

SECTION 5. Subchapter E, Chapter 2054, Government Code, is amended by adding Section 2054.105 to read as follows:

Sec. 2054.105. ENTERPRISE-BASED STRATEGY. (a) The department, in consultation with the quality assurance team and Legislative Budget Board, shall develop an enterprise-based strategy for information resources technologies in state government based on information resources technologies expenditure information collected from state agencies under this chapter.

(b) In developing the enterprise-based strategy for the state, the department must consider the following opportunities to achieve greater efficiency:

(1) developing personal computer replacement policies for the state, with consideration given to alternative models of personal computer use for state government, including thin client, software as a service, browser-based functionality, mobile computing, and other models that are less dependent on traditional computing;

(2) pursuing shared services initiatives across functional areas, including e-mail, telephony, and data storage;

(3) pursuing pilot programs, including a pilot program to demonstrate the value of application management services, to identify opportunities to achieve operational efficiencies;

(4) in consultation with the state auditor, the state archivist, the state records administrator, and the Texas State Library and Archives Commission, developing recommended policies for state agencies regarding data storage, record retention requirements and schedules, and the creation of a digital repository for permanently valuable electronic records of state government;

(5) reviewing existing software maintenance contracts to identify opportunities to renegotiate the price of those contracts or the level of service; and

(6) partnering with private providers for commonly used information resources technologies.

(c) A department, commission, board, office, council, authority, or other agency of the legislative branch may coordinate with and participate in shared service initiatives, pilot programs, and the development of the enterprise-based strategy, where appropriate.

(d) The department, quality assurance team, and Legislative Budget Board shall work with state agencies to improve the acquisition and delivery of information resources technologies products and services.

SECTION 6. This Act takes effect September 1, 2013.