Iowa Administrative Code › Agency 129 - Chief Information Officer, Office of The › Title I - General Office Procedures › Chapter 8 - Information Technology Governance › Rule 129-8.2 - Purpose and Applicability

Current through Register Vol. 47, No. 3, July 24, 2024
(1)
Purpose.
The office is created for the purpose of leading,
				directing, managing, coordinating, and providing accountability for the
				information technology resources of state government. In furtherance of this
				role, the office is, among other things, required or authorized to:
a. Develop and implement an information
				strategic plan for the enterprise.
b. Establish an enterprise strategic and
				project management function for oversight of all information technology-related
				projects and resources of participating agencies. In exercising this power and
				duty, the office will endeavor to collaborate and coordinate with participating
				agencies to the maximum extent possible.
c. Develop information technology governance
				requirements that apply to participating agencies, including but not limited
				to:
(1) Standards of or related to
				cybersecurity, geospatial systems, application development, and information
				technology and procurement, including but not limited to system design and
				systems integration, and interoperability.
(2) Policies of or related to security to
				ensure the integrity of the state's information resources and to prevent the
				disclosure of confidential records, while still fostering transparency and data
				sharing.
(3) Statewide standards
				for information technology security to maximize the functionality, security,
				and interoperability of the state's distributed information technology assets,
				including but not limited to communications and encryption
				technologies.
(4) Standards for the
				implementation of electronic commerce, including standards for electronic
				signatures, electronic currency, and other items associated with electronic
				commerce.
(5) Guidelines for the
				appearance and functioning of applications.
(6) Standards for the integration of
				electronic data across state agencies.
(7) Standards, policies, and procedures of or
				applicable to the procurement of information technology.
d. Require all information technology
				security services, solutions, hardware, and software purchased or used by a
				participating agency to be subject to approval by the office in accordance with
				security standards. In exercising this power and duty, the office will endeavor
				to collaborate and coordinate with participating agencies to the maximum extent
				possible.
e. Develop and implement
				effective and efficient strategies for the use and provision of information
				technology and information technology staff for participating agencies and
				other governmental entities.
f.
				Manage and oversee the Iow Access program.
This chapter outlines the office's process for achieving such
				  objectives with appropriate stakeholder input, including the process by which
				  the office establishes information technology governance requirements; related
				  assessment and enforcement processes and procedures; and a uniform process for
				  the granting of information technology waivers requested by a participating
				  agency from such information technology governance
				  requirements.