reglab/housing_qa huggingface dataset:
CO Code § 24-37.5-112 (2021)
2021 Colorado Code|Title 24 - Government - State|Article 37.5 - Office of Information Technology|Part 1 - Office Created|§ 24-37.5-112. Information Technology Revolving Fund

    There is hereby established in the state treasury the information technology revolving fund. Except as otherwise provided in subsection (2) of this section, moneys shall be appropriated to the fund each year by the general assembly in the annual general appropriation act for the direct and indirect costs of the office. (1) (a) There is hereby established in the state treasury the information technology revolving fund. Except as otherwise provided in subsection (2) of this section, moneys shall be appropriated to the fund each year by the general assembly in the annual general appropriation act for the direct and indirect costs of the office.    The office shall develop a method for billing users of the office's services the full cost of the services, including materials, depreciation related to capital costs, labor, and administrative overhead. The billing method shall be fully implemented for all users of the office's services on or before July 1, 2013.    All interest earned on the investment of moneys in the fund shall be credited to the fund. Moneys in the revolving fund shall be continuously appropriated to the office of information technology to pay the costs of consolidation and information technology maintenance and upgrades. Any moneys credited to the revolving fund and unexpended and unencumbered at the end of any given fiscal year shall remain in the fund and shall not revert to the general fund.       Repealed.     Source: L. 2008: Entire section added, p. 1122, § 7, effective May 22. L. 2017: (2) amended, (SB 17-255), ch. 172, p. 627, § 2, effective April 28. L. 2020: (2) repealed, (HB 20-1382), ch. 208, p. 1019, § 1, effective June 30.
CO Code § 24-37.5-114 (2021)
2021 Colorado Code|Title 24 - Government - State|Article 37.5 - Office of Information Technology|Part 1 - Office Created|§ 24-37.5-114. Colorado Financial Reporting System Modernization Project - Reporting

 In the event that the executive committee of the legislative council, the joint budget committee, or the legislative audit committee deem certain functionality of the Colorado financial reporting system to be of particular importance to the legislative branch, this will be conveyed in writing to the office and the governor. The office must ensure that such functionality is incorporated or must promptly explain why such functionality cannot be incorporated. If the functionality cannot be included because such a change would require additional appropriations, the office must explain why additional appropriations are necessary. The office must report to the joint budget committee and the capital development committee regarding its progress on the project in a format and at time intervals specified by the joint budget committee and the capital development committee in writing. If a meeting is necessary for any report required by this section, when possible the meeting may be a joint meeting of the joint budget committee and the capital development committee.   Source: L. 2013: Entire section added, (SB 13-190), ch. 108, p. 376, § 3, effective April 4.   Cross references: (1) For the legislative declaration in the 2013 act adding this section, see section 1 of chapter 108, Session Laws of Colorado 2013.   (2) For the lease-purchase agreement in the 2013 act adding this section, see section 2 of chapter 108, Session Laws of Colorado 2013.
CO Code § 24-37.5-116 (2021)
2021 Colorado Code|Title 24 - Government - State|Article 37.5 - Office of Information Technology|Part 1 - Office Created|§ 24-37.5-116. Communications and Stakeholder Management Plan

  On or before July 1, 2020, the office shall develop and implement a communications and stakeholder management plan for interacting with any department, commission, council, board, bureau, committee, institution of higher education, agency, or other governmental unit of the executive, legislative, or judicial branch of state government that is billed for the use of the services provided by the office. The office shall enlist vendor services in the development of the plan.    On or before January 1, 2021, the office shall develop a method to annually solicit feedback from every department, commission, council, board, bureau, committee, institution of higher education, agency, or other governmental unit of the executive, legislative, or judicial branch of state government that is billed for the use of the services provided by the office to determine if the communications and stakeholder management plan developed and implemented pursuant to subsection (1) of this section is increasing the governmental unit's satisfaction with the services provided by the office for which it is billed.     Source: L. 2019: Entire section added, (SB 19-251), ch. 253, p. 2449, § 2, effective May 23.
CO Code § 24-37.5-117 (2021)
2021 Colorado Code|Title 24 - Government - State|Article 37.5 - Office of Information Technology|Part 1 - Office Created|§ 24-37.5-117. Use of Technology to Interact With Citizens - Working Group - Strategic Plan

  The office shall convene a working group of state agencies, as defined in section 24-37.5-102 (4), to develop and implement a strategic plan for how state agencies use technology to provide services, data, and information to citizens and businesses. The office shall implement the plan on or before July 1, 2020.    The office shall enlist vendor services in the development of the plan.     Source: L. 2019: Entire section added, (SB 19-251), ch. 253, p. 2449, § 2, effective May 23.
CO Code § 24-37.5-401 (2021)
2021 Colorado Code|Title 24 - Government - State|Article 37.5 - Office of Information Technology|Part 4 - Information Security|§ 24-37.5-401. Legislative Declaration

  The general assembly hereby finds, determines, and declares that:   Communication and information resources in the various public agencies of the state are strategic and vital assets belonging to the people of Colorado. Coordinated efforts and a sense of urgency are necessary to protect these assets against unauthorized access, disclosure, use, and modification or destruction, whether accidental or deliberate, as well as to assure the confidentiality, integrity, and availability of information.    State government has a duty to Colorado's citizens to ensure that the information the citizens have entrusted to public agencies is safe, secure, and protected from unauthorized access, unauthorized use, or destruction.    Securing the state's communication and information resources is a statewide imperative requiring a coordinated and shared effort from all departments, agencies, and political subdivisions of the state and a long term commitment to state funding that ensures the success of such efforts.    Risks to communication and information resources must be managed, and the integrity of data and the source, destination, and processes applied to data must be assured.    Information security standards, policies, and guidelines must be promulgated and implemented throughout public agencies to ensure the development and maintenance of minimum information security controls to protect communication and information resources that support the operations and assets of those agencies.    The extensive information security expertise in Colorado's private sector should be utilized for the long-term benefit of Colorado's citizens and public agencies.        Source: L. 2006: Entire part added, p. 1713, § 1, effective June 6.
CO Code § 24-37.5-402 (2021)
2021 Colorado Code|Title 24 - Government - State|Article 37.5 - Office of Information Technology|Part 4 - Information Security|§ 24-37.5-402. Definitions

 As used in this part 4, unless the context otherwise requires:    "Availability" means the timely and reliable access to and use of information created, generated, collected, or maintained by a public agency.    Repealed.    "Confidentiality" means the preservation of authorized restrictions on information access and disclosure, including the means for protecting personal privacy and proprietary information.    "Department of higher education" means the Colorado commission on higher education, collegeinvest, the Colorado student loan program, the Colorado college access network, the private occupational school division, and the state historical society.    "Information security" means the protection of communication and information resources from unauthorized access, use, disclosure, disruption, modification, or destruction in order to:   Prevent improper information modification or destruction;    Preserve authorized restrictions on information access and disclosure;    Ensure timely and reliable access to and use of information; and    Maintain the confidentiality, integrity, and availability of information.       "Information security plan" means the plan developed by a public agency pursuant to section 24-37.5-404.    "Institution of higher education" means a state-supported institution of higher education.    "Integrity" means the prevention of improper information modification or destruction and ensuring information nonrepudiation and authenticity. (8.5) "Joint technology committee" means the joint technology committee created in section 2-3-1702, C.R.S.    "Public agency" means every state office, whether executive or judicial, and all of its respective offices, departments, divisions, commissions, boards, bureaus, and institutions. "Public agency" does not include institutions of higher education or the general assembly.    "Security incident" means an accidental or deliberate event that results in or constitutes an imminent threat of the unauthorized access, loss, disclosure, modification, disruption, or destruction of communication and information resources.     Source: L. 2006: Entire part added, p. 1714, § 1, effective June 6. L. 2008: (2) repealed, p. 1130, § 14, effective May 22. L. 2010: (4) amended, (SB 10-158), ch. 231, p. 1014, § 4, effective July 1. L. 2011: (9) amended, (SB 11-062), ch. 128, p. 429, § 5, effective April 22. L. 2013: (8.5) added, (HB 13-1079), ch. 246, p. 1193, § 7, effective May 18.
CO Code § 24-37.5-403 (2021)
2021 Colorado Code|Title 24 - Government - State|Article 37.5 - Office of Information Technology|Part 4 - Information Security|§ 24-37.5-403. Chief Information Security Officer - Duties and Responsibilities

  The chief information officer shall appoint a chief information security officer who shall serve at the pleasure of the chief information officer. The security officer shall report to and be under the supervision of the chief information officer. The security officer shall exhibit a background and expertise in security and risk management for communications and information resources. In the event the security officer is unavailable to perform the duties and responsibilities under this part 4, all powers and authority granted to the security officer may be exercised by the chief information officer.    The chief information security officer shall:   Develop and update information security policies, standards, and guidelines for public agencies;    Promulgate rules pursuant to article 4 of this title containing information security policies, standards, and guidelines;    Ensure the incorporation of and compliance with information security policies, standards, and guidelines in the information security plans developed by public agencies pursuant to section 24-37.5-404;    Direct information security audits and assessments in public agencies in order to ensure program compliance and adjustments;    Establish and direct a risk management process to identify information security risks in public agencies and deploy risk mitigation strategies, processes, and procedures;    Approve or disapprove and review annually the information security plans of public agencies;    Conduct information security awareness and training programs;    In coordination and consultation with the office of state planning and budgeting and the chief information officer, review public agency budget requests related to information security systems and approve such budget requests for state agencies other than the legislative department; and    Coordinate with the Colorado commission on higher education for purposes of reviewing and commenting on information security plans adopted by institutions of higher education that are submitted pursuant to section 24-37.5-404.5 (3).       It is the intent of the general assembly that the cost of the services provided by the chief information security officer to a public agency be adequately funded in fiscal years commencing on and after July 1, 2007, through an appropriation to the public agency to pay for such services.     Source: L. 2006: Entire part added, p. 1715, § 1, effective June 6. L. 2008: (1) and (2)(h) amended, p. 1121, § 8, effective May 22. L. 2011: (1), (2)(b), and (3) amended, (SB 11-062), ch. 128, p. 429, § 6, effective April 22.
CO Code § 24-37.5-404 (2021)
2021 Colorado Code|Title 24 - Government - State|Article 37.5 - Office of Information Technology|Part 4 - Information Security|§ 24-37.5-404. Public Agencies - Information Security Plans

  On or before July 1 of each year, each public agency shall develop an information security plan utilizing the information security policies, standards, and guidelines developed by the chief information security officer. The information security plan shall provide information security for the communication and information resources that support the operations and assets of the public agency.    The information security plan shall include:   Periodic assessments of the risk and magnitude of the harm that could result from a security incident;    A process for providing adequate information security for the communication and information resources of the public agency;    Regularized security awareness training to inform the employees and users of the public agency's communication and information resources about information security risks and the responsibility of employees and users to comply with agency policies, standards, and procedures designed to reduce those risks;    Periodic testing and evaluation of the effectiveness of information security for the public agency, which shall be performed not less than annually;    A process for detecting, reporting, and responding to security incidents consistent with the information security standards, policies, and guidelines issued by the chief information security officer; and    Plans and procedures to ensure the continuity of operations for information resources that support the operations and assets of the public agency in the event of a security incident.       On or before July 15 of each year, each public agency shall submit the information security plan developed pursuant to this section to the chief information security officer for approval.    In the event that a public agency fails to submit to the chief information security officer an information security plan on or before July 15 of each year or such plan is disapproved by the chief information security officer, the officer shall notify the governor, the chief information officer, and the head of the public agency of noncompliance with this section. If no plan has been approved by September 15 of each year, the chief information security officer shall be authorized to temporarily discontinue or suspend the operation of a public agency's communication and information resources until such plan has been submitted to or is approved by the officer.    and (6) (Deleted by amendment, L. 2011, (SB 11-062), ch. 128, p. 430, § 7, effective April 22, 2011.)     Source: L. 2006: Entire part added, p. 1716, § 1, effective June 6. L. 2011: (1), (3), (4), (5), and (6) amended, (SB 11-062), ch. 128, p. 430, § 7, effective April 22.
CO Code § 24-37.5-404.7 (2021)
2021 Colorado Code|Title 24 - Government - State|Article 37.5 - Office of Information Technology|Part 4 - Information Security|§ 24-37.5-404.7. General Assembly - Information Security Plans

  The general assembly shall develop an information security plan. The information security plan shall provide information security for the communication and information resources that support the operations and assets of the general assembly.    The information security plan shall include:   Periodic assessments of the risk and magnitude of the harm that could result from a security incident;    A process for providing adequate information security for the communication and information resources of the general assembly;    Information security awareness training for regular employees of the general assembly;    Periodic testing and evaluation of the effectiveness of information security for the general assembly, which shall be performed not less than annually;    A process for detecting, reporting, and responding to security incidents consistent with the information security policy of the general assembly. The general assembly and the chief information security officer shall establish the terms and conditions by which the general assembly shall report information security incidents to the chief information security officer.    Plans and procedures to ensure the continuity of operations for information resources that support the operations and assets of the general assembly in the event of a security incident.       The legislative service agency directors shall maintain the information security plan pursuant to this section and keep the joint technology committee advised of the plan.    Nothing in this section shall be construed to require the general assembly to adopt policies or standards that conflict with federal law, rules, or regulations or with contractual arrangements governed by federal laws, rules, or regulations.    The general assembly shall provide regularized security awareness training to inform the regular legislative employees, administrators, and users about the information security risks and the responsibility of employees, administrators, and users to comply with the general assembly's information security plan and the policies, standards, and procedures designed to reduce those risks.     Source: L. 2011: Entire section added, (SB 11-062), ch. 128, p. 431, § 9, effective April 22. L. 2013: (3) amended, (HB 13-1079), ch. 246, p. 1193, § 8, effective May 18.
CO Code § 24-37.5-405 (2021)
2021 Colorado Code|Title 24 - Government - State|Article 37.5 - Office of Information Technology|Part 4 - Information Security|§ 24-37.5-405. Security Incidents - Authority of Chief Information Security Officer

  A security incident in a public agency shall be reported to the chief information security officer in accordance with state incident reporting policies, standards, and guidelines.    The chief information security officer shall be authorized to temporarily discontinue or suspend the operation of a public agency's communication and information resources in order to isolate the source of a security incident. The officer shall give notice to the governor, or the lieutenant governor in the event the governor is not available, the chief information officer, and the head of the public agency concurrent with such discontinuation or suspension of operations. The officer shall ensure, to the extent possible, the continuity of operations for the communication and information resources that support the operations and assets of the public agency.    The chief information security officer may enter into contracts with a private person or entity to assist with resolving a security incident in a public agency. The officer shall establish an approved list of certified private persons and entities that may provide contract services in the event of a security incident. The officer shall establish criteria for the placement of private persons and entities on the list and shall select such persons and entities for placement on the list utilizing a request for proposals containing such criteria.    Public agencies shall comply and cooperate with a directive of the chief information security officer pursuant to subsection (2) of this section to temporarily discontinue or suspend the operation of a public agency's communication and information resources.     Source: L. 2006: Entire part added, p. 1718, § 1, effective June 6. L. 2011: (2) amended, (SB 11-062), ch. 128, p. 432, § 10, effective April 22.
CO Code § 24-37.5-501 (2021)
2021 Colorado Code|Title 24 - Government - State|Article 37.5 - Office of Information Technology|Part 5 - Telecommunications Coordination Within State Government|§ 24-37.5-501. Powers, Duties, and Functions Concerning Telecommunications

  In order to more efficiently support the efforts of state departments, state institutions, state agencies, and law enforcement and public safety political subdivisions, and to better serve the public, there is authorized to be established a state telecommunications network, the construction, maintenance, and management of which shall be under the supervision of the chief information officer, in consultation with the chief of the Colorado state patrol.    The chief information officer shall appoint assistants, clerical staff, and other personnel as may be necessary to discharge the duties and responsibilities set forth by this part 5.     Source: L. 2008: Entire part added with relocations, p. 1122, § 9, effective May 22. L. 2018: Entire section amended with relocated provisions, (HB 18-1373), ch. 390, p. 2339, § 2, effective August 8.   Editor's note: (1) This section is similar to former § 24-30-902 as it existed prior to 2008.   (2) Subsection (1) is similar to former § 24-33.5-223 (1) as it existed prior to 2018.   Cross references: For the legislative declaration in HB 18-1373, see section 1 of chapter 390, Session Laws of Colorado 2018.
CO Code § 24-37.5-503 (2021)
2021 Colorado Code|Title 24 - Government - State|Article 37.5 - Office of Information Technology|Part 5 - Telecommunications Coordination Within State Government|§ 24-37.5-503. Legislative Department Exemption

 The provisions of this part 5 shall not apply to the legislative department of the state.   Source: L. 2008: Entire part added with relocations, p. 1124, § 9, effective May 22.   Editor's note: This section is similar to former § 24-30-906 as it existed prior to 2008.
CO Code § 24-37.5-504 (2021)
2021 Colorado Code|Title 24 - Government - State|Article 37.5 - Office of Information Technology|Part 5 - Telecommunications Coordination Within State Government|§ 24-37.5-504. Higher Education Exemption

 Local and internal telecommunications networks of institutions of higher education may be exempted from the provisions of this part 5 upon application to the chief information officer; except that all systems must be certified by the chief information officer as being technically compatible with plans and networks as described in section 24-37.5-502 (1).   Source: L. 2008: Entire part added with relocations, p. 1124, § 9, effective May 22.   Editor's note: This section is similar to former § 24-30-907 as it existed prior to 2008.