reglab/statecodes huggingface dataset:
New Mexico Administrative Code › Title 1 - GENERAL GOVERNMENT ADMINISTRATION › Chapter 12 - INFORMATION TECHNOLOGY › Part 5 - OVERSIGHT OF INFORMATION TECHNOLOGY PROJECTS › Section 1.12.5.8 - PROJECT MANAGEMENT METHODOLOGY

Current through Register Vol. 35, No. 13, July 16, 2024
A. All IT projects shall be managed:
(1) using a qualified project
				manager;
(2) using a formal project
				management methodology, processes, and techniques approved by the office;
				and
(3) by analyzing and monitoring
				risk at periodic intervals during the project management lifecycle, and
				mitigating risks before they negatively impact the IT project schedule, scope,
				or budget.
New Mexico Administrative Code › Title 1 - GENERAL GOVERNMENT ADMINISTRATION › Chapter 12 - INFORMATION TECHNOLOGY › Part 5 - OVERSIGHT OF INFORMATION TECHNOLOGY PROJECTS › Section 1.12.5.9 - LEAD AGENCY RESPONSIBILITIES

Current through Register Vol. 35, No. 13, July 16, 2024
A. A
				lead agency shall perform the following functions.
(1) Manage its own information technology
				(IT) projects and project resources and use the state project management
				methodology for planning, executing, and controlling the project.
(2) Appoint a qualified state employee as the
				lead project manager and if applicable a project director. If the agency hires
				a contract project manager, the lead project manager/director shall be
				responsible for ensuring that the consulting firm and/ or contract project
				manager is managed to the best interests of the state.
(3) Provide to the office all project
				management and product deliverables. Deliverables shall include but not limited
				to the project plan, project schedule, initial and periodic risk assessments,
				quality strategies and plan, periodic project status reports, requirement and
				design documents for all projects. The lead agency must make available all
				deliverables in a repository with open access for the Information Technology
				Commission (ITC) and office review.
(4) Prepare and submit a written project
				status report at least monthly to the office, and more frequently at the
				request of the ITC or the office.
(5) Prepare a written risk assessment report
				at the inception of a project and at the end of each product development
				lifecycle phase or more frequently for large and high-risk projects. Each risk
				assessment shall be included as a project activity in the project
				schedule.
(6) Develop and provide
				quality strategies, including Independent Verification and Validation, in
				compliance with the office best practices and standards.
New Mexico Administrative Code › Title 1 - GENERAL GOVERNMENT ADMINISTRATION › Chapter 12 - INFORMATION TECHNOLOGY › Part 5 - OVERSIGHT OF INFORMATION TECHNOLOGY PROJECTS › Section 1.12.5.10 - RESPONSIBILITIES OF THE OFFICE

Current through Register Vol. 35, No. 13, July 16, 2024
The office shall:
A.
				provide oversight of all IT projects;
B. review agency IT plans;
C. make recommendations to the ITC regarding
				prudent allocation of IT resources, reduction of redundant data, hardware, and
				software, and improve interoperability and data accessibility between
				agencies;
D. approve agency RFPs,
				contract vendor requests and IT contracts including amendments, emergency
				procurements, sole source contracts and price agreements;
E. recommend procedure and rules to the ITC
				to improve oversight of IT procurement;
F. monitor agency compliance and report to
				the Governor, ITC and agency management on noncompliance;
G. review IT cost recovery mechanisms and
				rate structures and make recommendations to the ITC;
H. provide technical support to agencies for
				IT plan development;
I. review
				appropriation requests to ensure compliance with agency plans and the strategic
				plan;
J. monitor the progress of
				agency IT projects, including ensuring adequate project management, risk
				management and disaster recovery practices;
K. submit project portfolio status reports to
				the ITC; and
L. recommend IT
				project funding as required by law.
New Mexico Administrative Code › Title 1 - GENERAL GOVERNMENT ADMINISTRATION › Chapter 12 - INFORMATION TECHNOLOGY › Part 5 - OVERSIGHT OF INFORMATION TECHNOLOGY PROJECTS › Section 1.12.5.11 - REPORTING REQUIREMENTS

Current through Register Vol. 35, No. 13, July 16, 2024
A.
				Project status reports. For all projects that require office oversight, the
				lead agency project manager shall submit an agency approved project status
				report on a monthly basis to the office.
B. Independent verification and validation
				assessment reporting. The office requires all projects subject to oversight to
				engage an independent verification and validation contractor unless waived by
				the office. The IV&V contractor shall perform the following activities.
(1) Prepare an initial risk assessment report
				at project inception. This assessment will include recommended mitigation
				activity to reduce the impact and probability of the identified risk.
(2) Prepare initial status report at project
				inception to disclose the effectiveness of project management and whether the
				documented project activities are meeting the objectives set forth by
				project.
(3) Prepare interim
				reports based on the phases as indicated within the project schedule. Included
				in the report will be an evaluation on whether product development requirements
				are being met, project management is effective, continuing risk analysis, and
				how the project is implementing previous recommended risk mitigation
				strategies.
(4) Prepare a post
				implementation assessment at project close to indicate whether project
				objectives were met based on the project's scope and acceptance
				criteria.
(5) Submit each risk
				assessment report, status report, interim report, and post-implementation
				assessment report to the office within five (5) business days of each
				deliverable due date as indicated on the project schedule. All reports must be
				submitted to the agency heads and the office.
New Mexico Administrative Code › Title 1 - GENERAL GOVERNMENT ADMINISTRATION › Chapter 12 - INFORMATION TECHNOLOGY › Part 7 - DIGITAL / ELECTRONIC SIGNATURE › Section 1.12.7.2 - SCOPE

Current through Register Vol. 35, No. 13, July 16, 2024
To implement the electronic signature authority pursuant to
				  the Public Records Act, Section
				  14-3-15.2
				  NMSA 1978 and the New Mexico Uniform Electronic Transactions Act, Section
				  14-16-1 et seq NMSA
				  1978.
New Mexico Administrative Code › Title 1 - GENERAL GOVERNMENT ADMINISTRATION › Chapter 12 - INFORMATION TECHNOLOGY › Part 7 - DIGITAL / ELECTRONIC SIGNATURE › Section 1.12.7.3 - STATUTORY AUTHORITY

Current through Register Vol. 35, No. 13, July 16, 2024
Public Records Act, Section
				  14-3-15.2
				  NMSA 1978; Uniform Electronic Transactions Act, Section
				  14-16-1 et seq NMSA
				  1978.
New Mexico Administrative Code › Title 1 - GENERAL GOVERNMENT ADMINISTRATION › Chapter 12 - INFORMATION TECHNOLOGY › Part 7 - DIGITAL / ELECTRONIC SIGNATURE › Section 1.12.7.6 - OBJECTIVE

Current through Register Vol. 35, No. 13, July 16, 2024
To establish standards for state agencies regarding the use
				  of electronic signatures for legal signing purposes as authorized under the
				  provisions of the Uniform Electronic Transactions Act. These rules are an
				  adaption of the Use of Electronic Signatures in federal Organization
				  Transactions, Version 1.0 issued January 25, 2013.
New Mexico Administrative Code › Title 1 - GENERAL GOVERNMENT ADMINISTRATION › Chapter 12 - INFORMATION TECHNOLOGY › Part 7 - DIGITAL / ELECTRONIC SIGNATURE › Section 1.12.7.7 - DEFINITIONS

Current through Register Vol. 35, No. 13, July 16, 2024
For purposes of this part, all terms defined in the Uniform
				  Electronic Transactions Act, Section
				  14-16-1 et seq NMSA 1978 have the
				  meanings set forth in statute. Additionally, the following terms shall have the
				  following meanings:
A.
Terms
				beginning with the letter "A":
(1)
"Agreement"
refer to Uniform Electronic Transactions Act, Section
				14-16-2(1) NMSA 1978.
(2)
"Attribution"
means the process of establishing or confirming that
				someone is the previously identified person they claim to be.
(3)
"Authenticate"
refer to
				Electronic Authentication of Documents Act, Section 14-15-3(A) NMSA
				1978.
(4)
"Automated
				transaction"
refer to Uniform Electronic Transactions Act, Section
				14-16-2(2) NMSA 1978.
New Mexico Administrative Code › Title 1 - GENERAL GOVERNMENT ADMINISTRATION › Chapter 12 - INFORMATION TECHNOLOGY › Part 7 - DIGITAL / ELECTRONIC SIGNATURE › Section 1.12.7.8 - GENERAL OVERVIEW

Current through Register Vol. 35, No. 13, July 16, 2024
A.A
				signature, whether electronic or on paper, is the means by which a person
				indicates an intent to associate oneself with a document in a manner that has
				legal significance (e.g., to adopt or approve a specific statement regarding,
				or reason for signing, a document). It constitutes legally-binding evidence of
				the signer's intention with regard to a document. The reasons for signing a
				document will vary with the transaction, and in most cases can be determined
				only by examining the context in which the signature was made. Generally, a
				person's reason for signing a document falls into one of the following
				categories:
(1) approving, assenting to, or
				agreeing to the information in the document or record signed (e.g., agreeing to
				the terms of a contract or inter-agency memorandum or indicating approval for
				legal sufficiency);
(2) certifying
				or affirming the accuracy of the information stated in the document or record
				signed (e.g., certifying that the statements in one's tax return are true and
				correct);
(3) acknowledging access
				to or receipt of information set forth in the document or record signed (e.g.,
				acknowledging receipt of a disclosure document);
(4) witnessing the signature or other act of
				another (e.g., notarization); or
(5) certifying the source of the information
				in the document or record signed (e.g., certifying data in a clinical trial
				record, certifying an inventory count, etc.).
New Mexico Administrative Code › Title 1 - GENERAL GOVERNMENT ADMINISTRATION › Chapter 12 - INFORMATION TECHNOLOGY › Part 7 - DIGITAL / ELECTRONIC SIGNATURE › Section 1.12.7.9 - ELECTRONIC SIGNATURES COMPARED TO DIGITAL SIGNATURES

Current through Register Vol. 35, No. 13, July 16, 2024
A. "Electronic signature" is the term used
				for the electronic equivalent of a handwritten signature. It is a generic,
				technology- neutral term that refers to the universe of all of the various
				methods by which one can "sign" an electronic record. Although all electronic
				signatures may be represented digitally (i.e., as a series of ones and zeroes),
				they can take many forms and can be created by many different
				technologies.
B. "Digital
				signature" is the term used to describe the small segment of encrypted data
				produced when a specific mathematical process (involving a hash algorithm and
				public key cryptography) is applied to an electronic record.
New Mexico Administrative Code › Title 1 - GENERAL GOVERNMENT ADMINISTRATION › Chapter 12 - INFORMATION TECHNOLOGY › Part 7 - DIGITAL / ELECTRONIC SIGNATURE › Section 1.12.7.10 - ELECTRONIC SIGNATURE, SECURITY PROCEDURE AND SIGNING PROCESS

Current through Register Vol. 35, No. 13, July 16, 2024
A. An electronic
				signature is used to indicate a person's intent to associate themselves in some
				way to information or to a reason for signing (e.g., agreeing to the terms of a
				contract, acknowledging receipt of information, etc.) with legal effect. Any
				sound, symbol, or process that is made or adopted by a person with intent to
				sign a document can be used as the form of signature for purposes of creating
				an electronic signature. This includes, for example, a typed name, clicking on
				an "I Agree" button, or a cryptographically created digital signature. But the
				mere use of any such sound, symbol, or process does not necessarily create a
				legally binding electronic signature.
B. A security procedure is employed for the
				purpose of verifying that an electronic record, signature, or performance is
				that of a specific person or for detecting changes or errors in the information
				in an electronic record (integrity). A digital signature can be used as both a
				security procedure and as a legally binding form of signature. It is important
				that the context make clear whether the digital signature is intended merely
				for purposes of attribution, integrity, or whether it is also intended to be a
				legally binding electronic signature.
C. A signing process is the overall set of
				actions, steps, and elements that is used to create a valid and enforceable
				electronic signature, and includes both the application to an electronic record
				of a form of signature (i.e., the sound, symbol, or process) to be used as the
				electronic signature, and one or more processes or security procedures to
				address the other signature requirements listed.
New Mexico Administrative Code › Title 1 - GENERAL GOVERNMENT ADMINISTRATION › Chapter 12 - INFORMATION TECHNOLOGY › Part 7 - DIGITAL / ELECTRONIC SIGNATURE › Section 1.12.7.11 - LEGAL REQUIREMENT FOR A SIGNATURE

Current through Register Vol. 35, No. 13, July 16, 2024
A transaction is governed by a law or regulation that
				  requires the presence of a signature before it will be considered legally
				  effective. A state agency must review the law applicable to each proposed
				  transaction to determine if it requires that the transaction be "signed." If
				  the applicable law or regulation requires a signature, then to conduct the
				  transaction in electronic form requires an electronic
				  signature.
New Mexico Administrative Code › Title 1 - GENERAL GOVERNMENT ADMINISTRATION › Chapter 12 - INFORMATION TECHNOLOGY › Part 7 - DIGITAL / ELECTRONIC SIGNATURE › Section 1.12.7.12 - TRANSACTION-BASED NEED FOR A SIGNATURE

Current through Register Vol. 35, No. 13, July 16, 2024
If there is no legal requirement for a signature on a
				  particular type of transaction a state agency may undertake a further analysis
				  to evaluate the desirability of incorporating a signature requirement into the
				  transaction. An electronic signature may be desirable, even when not legally
				  required, where there is a:
A. Need
				for emphasizing the seriousness of the transaction. A signature may serve to
				reinforce the significance of the undertaking to the party involved. It gives
				the transaction a more formal tone, and helps to drive home to the signing
				party the seriousness of what is being undertaken.
B. Need for binding a party to the
				transaction. If the transaction involves an intent element (e.g., agreement,
				approval, acknowledgment, receipt, witnessing, etc.), a signature may be useful
				to help formally bind a person to that reason for signing and make it more
				likely to be enforced (e.g., to mitigate concerns regarding
				repudiation).
New Mexico Administrative Code › Title 1 - GENERAL GOVERNMENT ADMINISTRATION › Chapter 12 - INFORMATION TECHNOLOGY › Part 7 - DIGITAL / ELECTRONIC SIGNATURE › Section 1.12.7.13 - REQUIREMENTS FOR LEGALLY BINDING ELECTRONIC SIGNATURE

Current through Register Vol. 35, No. 13, July 16, 2024
Where an electronic signature is required by law or otherwise
				  deemed desirable, it is critical that the electronic signature and the
				  associated signing process satisfy all of the applicable legal requirements.
				  Generally, creating a valid and enforceable electronic signature requires
				  satisfying the following signing requirements.
A.A person (i.e., the signer) must use an
				acceptable electronic form of signature. Electronic signatures can take many
				forms, and can be created by many different technologies. No specific
				technology or form of signature is required. Generally, any electronic "sound,
				symbol, or process" can be used as the form of signature. Examples of commonly
				used electronic forms of signature include, but are not limited to:
(1) Symbols such as a typed name (e.g., typed
				at the end of an e-mail message by the sender, or typed into a signature block
				on a website form by a party); digitized image of a handwritten signature that
				is attached to an electronic record; a shared secret (e.g., a secret code,
				password, or PIN) used by a person to sign the electronic record; a unique
				biometrics-based identifier, such as a fingerprint, voice print, or a retinal
				scan; or a digital signature.
(2)
				Sounds such as sound recording of a person's voice expressing
				consent.
(3)Processes such as using
				a mouse to click a button or hyperlink (such as clicking an "I Agree" button);
				using a private key and applicable software to apply a "digital signature;" or
				scanning and applying a fingerprint.
New Mexico Administrative Code › Title 1 - GENERAL GOVERNMENT ADMINISTRATION › Chapter 12 - INFORMATION TECHNOLOGY › Part 7 - DIGITAL / ELECTRONIC SIGNATURE › Section 1.12.7.15 - ELECTRONIC FORM OF SIGNATURE

Current through Register Vol. 35, No. 13, July 16, 2024
A.Low
				risk transactions.
(1) For low risk
				transactions, any form of signature is acceptable. This includes clicking an on
				screen button, checking an on-screen box, typing ones name, using a PIN number,
				or any other reasonable method, so long as it is clear to the signer that such
				act constitutes a signature, and is not being done for any other
				purpose.
(2) Evidence of intent to
				sign may be included either in the record being signed or in the on screen
				signing process. Shorter or more cursory indicators of intent may be used as
				necessary to facilitate the signing experience, so long as it is reasonably
				clear to the signer that they are signing the record, not doing something
				else.
(3) Any method may be used to
				associate the signature to the records being signed. This can include
				establishing a process that could not be completed unless a person has signed;
				using a process that appends the signature date to the record signed; or
				establishing a database-type link between the signature date and the records
				signed.
(4) Any approach to
				identification and authentication of the signer is acceptable. This includes
				self-assertion of identity by the signer. Successful authentication at this
				level requires that the signer prove through a secure authentication protocol
				that they possess and control the token. However, this level does not require
				cryptographic methods that block offline attacks. Refer to NIST Special
				Publication 800-63-2 for additional information related to electronic
				authentication guidelines.
(5)The
				system or application must be reasonably trusted to invalidate signature upon
				modification of the record and provide a secure method to transfer and store
				the signed record.
New Mexico Administrative Code › Title 1 - GENERAL GOVERNMENT ADMINISTRATION › Chapter 12 - INFORMATION TECHNOLOGY › Part 6 - ARCHITECTURAL CONFIGURATION REQUIREMENTS › Section 1.12.6.7 - DEFINITIONS

Current through Register Vol. 35, No. 13, July 16, 2024
As used in this rule:
A.
architectural configuration
				requirement (ACR)
means the technical specifications for information
				architecture and computer system purchases for executive agencies;
B.
IAS
means any information
				architecture subcommittee of the commission.
New Mexico Administrative Code › Title 1 - GENERAL GOVERNMENT ADMINISTRATION › Chapter 12 - INFORMATION TECHNOLOGY › Part 6 - ARCHITECTURAL CONFIGURATION REQUIREMENTS › Section 1.12.6.8 - STANDARDS FOR ACRs

Current through Register Vol. 35, No. 13, July 16, 2024
ACRs will be based on an evaluation of an item's:
A. life cycle;
B. system interoperability and data
				accessibility;
C. technical
				quality;
D. training
				compatibility;
E. wide
				use;
F. company financial
				stability; and
G. ability to
				advance government efficiency.
New Mexico Administrative Code › Title 1 - GENERAL GOVERNMENT ADMINISTRATION › Chapter 12 - INFORMATION TECHNOLOGY › Part 6 - ARCHITECTURAL CONFIGURATION REQUIREMENTS › Section 1.12.6.9 - PROPOSED ACRs

Current through Register Vol. 35, No. 13, July 16, 2024
A. An IAS may
				submit a proposal for an ACR to the office.
B. The office shall evaluate the proposal for
				compliance with the state information architecture and the state strategic plan
				and shall report its findings and recommendations to the commission.
C. The commission may reject the proposal,
				agree to consider it further, or approve a comment draft. The comment draft may
				contain modifications agreed to by the commission.
New Mexico Administrative Code › Title 1 - GENERAL GOVERNMENT ADMINISTRATION › Chapter 12 - INFORMATION TECHNOLOGY › Part 6 - ARCHITECTURAL CONFIGURATION REQUIREMENTS › Section 1.12.6.10 - NOTICE OF PROPOSED ACR

Current through Register Vol. 35, No. 13, July 16, 2024
The office shall post notice of a proposed ACR on the
				  internet at its internet address at least twenty (20) calendar days prior to
				  adoption of the proposed ACR.
New Mexico Administrative Code › Title 1 - GENERAL GOVERNMENT ADMINISTRATION › Chapter 12 - INFORMATION TECHNOLOGY › Part 6 - ARCHITECTURAL CONFIGURATION REQUIREMENTS › Section 1.12.6.11 - AVAILABILITY OF COMMENT DRAFT

Current through Register Vol. 35, No. 13, July 16, 2024
The office shall:
A.
				post comment drafts on the internet at its internet address;
B. send comment drafts to all members of the
				information oversight committee;
C.
				notify all persons on the electronic distribution list that a comment draft is
				available for comment;
D. mail or
				fax a hard copy of a comment draft to any person requesting a copy of the
				comment draft in writing or by telephone.
New Mexico Administrative Code › Title 1 - GENERAL GOVERNMENT ADMINISTRATION › Chapter 12 - INFORMATION TECHNOLOGY › Part 6 - ARCHITECTURAL CONFIGURATION REQUIREMENTS › Section 1.12.6.12 - COMMENT PROCEDURE

Current through Register Vol. 35, No. 13, July 16, 2024
A. The
				office shall make a comment draft available for comment for at least twenty
				(20) calendar days prior to its adoption.
B. Any person may submit written comments on
				the proposed ACR to the office in hard copy or by electronic means.
C. All comments received before the deadline
				for receipt of comments will be considered; comments received after the
				deadline will not be considered.
New Mexico Administrative Code › Title 1 - GENERAL GOVERNMENT ADMINISTRATION › Chapter 12 - INFORMATION TECHNOLOGY › Part 6 - ARCHITECTURAL CONFIGURATION REQUIREMENTS › Section 1.12.6.13 - REVIEW

Current through Register Vol. 35, No. 13, July 16, 2024
The office shall review all comments for compliance with the
				  state information architecture and the state strategic plan, prepare a summary
				  of all comments received before the deadline, and report its findings and
				  recommendations to the commission.
New Mexico Administrative Code › Title 1 - GENERAL GOVERNMENT ADMINISTRATION › Chapter 12 - INFORMATION TECHNOLOGY › Part 6 - ARCHITECTURAL CONFIGURATION REQUIREMENTS › Section 1.12.6.14 - COMMISSION ACTION

Current through Register Vol. 35, No. 13, July 16, 2024
A. The
				commission shall consider the comment draft, the summary of comments, and the
				findings and recommendations of the office at a meeting held after the comment
				period.
B. The commission may adopt
				the proposed ACR without revision, revise and adopt the proposed ACR, revise
				the proposed ACR and seek additional comments, or reject the proposed
				ACR.
New Mexico Administrative Code › Title 1 - GENERAL GOVERNMENT ADMINISTRATION › Chapter 12 - INFORMATION TECHNOLOGY › Part 6 - ARCHITECTURAL CONFIGURATION REQUIREMENTS › Section 1.12.6.15 - AMENDMENT AND REPEAL OF ACR

Current through Register Vol. 35, No. 13, July 16, 2024
The commission may amend, replace or repeal an ACR in
				  accordance with the procedures set forth in this rule.
New Mexico Administrative Code › Title 1 - GENERAL GOVERNMENT ADMINISTRATION › Chapter 12 - INFORMATION TECHNOLOGY › Part 6 - ARCHITECTURAL CONFIGURATION REQUIREMENTS › Section 1.12.6.16 - AVAILABILITY OF ADOPTED ACRs

Current through Register Vol. 35, No. 13, July 16, 2024
The office shall post all ACRs adopted by the commission on
				  the internet at the office's internet address.
New Mexico Administrative Code › Title 1 - GENERAL GOVERNMENT ADMINISTRATION › Chapter 12 - INFORMATION TECHNOLOGY › Part 6 - ARCHITECTURAL CONFIGURATION REQUIREMENTS › Section 1.12.6.17 - EXEMPTION

Current through Register Vol. 35, No. 13, July 16, 2024
A. An agency may
				request exemption from an ACR. Exemptions shall be granted only if complying
				with an ACR would:
(1) result in a
				significant increase in agency costs;
(2) decrease the security of agency
				operations;
(3) compromise
				essential service attributes critical to agency success; or
(4) result in inadequate resource
				levels.
New Mexico Administrative Code › Title 1 - GENERAL GOVERNMENT ADMINISTRATION › Chapter 12 - INFORMATION TECHNOLOGY › Part 8 - NOTIFICATION OF INTERNET PROTOCOL ADDRESSES › Section 1.12.8.2 - SCOPE

Current through Register Vol. 35, No. 13, July 16, 2024
This rule applies to all state agencies, boards, and
				  commissions to whom the General Services Department provides Internet
				  access.
New Mexico Administrative Code › Title 1 - GENERAL GOVERNMENT ADMINISTRATION › Chapter 12 - INFORMATION TECHNOLOGY › Part 8 - NOTIFICATION OF INTERNET PROTOCOL ADDRESSES › Section 1.12.8.5 - EFFECTIVE DATE

Current through Register Vol. 35, No. 13, July 16, 2024
March 15, 2002 unless a later date is cited at the end of a
				  section.
New Mexico Administrative Code › Title 1 - GENERAL GOVERNMENT ADMINISTRATION › Chapter 12 - INFORMATION TECHNOLOGY › Part 8 - NOTIFICATION OF INTERNET PROTOCOL ADDRESSES › Section 1.12.8.6 - OBJECTIVE

Current through Register Vol. 35, No. 13, July 16, 2024
The purpose of this rule is to provide the underlying data
				  necessary to provide Internet security for state agencies, boards and
				  commissions.
New Mexico Administrative Code › Title 1 - GENERAL GOVERNMENT ADMINISTRATION › Chapter 12 - INFORMATION TECHNOLOGY › Part 8 - NOTIFICATION OF INTERNET PROTOCOL ADDRESSES › Section 1.12.8.7 - DEFINITIONS

Current through Register Vol. 35, No. 13, July 16, 2024
As used in this rule:
A.
access protocols
means the
				standard set of protocols and ports for all types of access as defined by the
				Internet Architecture Board of the Internet Society International Board;
				including, but not limited to: http, https, remote terminal (telnet), simple
				mail transport protocol (SMTP), and file transfer protocol (FTP).
B.
internet
means a
				decentralized, global network of computers linked through the use of common
				communications protocols. The Internet allows users worldwide to exchange
				messages, data, and images.
C.
internet protocol (IP)
means the set of conventions that govern
				the interaction among processes, devices and components of the
				Internet.
D.
internet
				protocol (IP) number
means a unique number consisting of four (4) parts
				separated by dots. Every computer connected to the Internet has a unique IP
				number.
E.
ISD-OC
means the General Services Department, Information Systems Division, Office of
				Communications.
F.
network
				devices
means all servers, workstations, and peripheral devices that are
				connected to the Internet.
G.
protocol
means a set of rules and formats, semantic and syntactic,
				that govern the interaction among processes, devices and components, and allow
				information systems to exchange information with one another.
H.
Security and Privacy Advisory
				Committee
means the standing committee of the Commission.
I.
threat
means an activity,
				deliberate or unintentional, with the potential for causing harm to an
				automated information system or activity.
New Mexico Administrative Code › Title 1 - GENERAL GOVERNMENT ADMINISTRATION › Chapter 12 - INFORMATION TECHNOLOGY › Part 8 - NOTIFICATION OF INTERNET PROTOCOL ADDRESSES › Section 1.12.8.8 - RESPONSIBILITIES OF STATE AGENCIES

Current through Register Vol. 35, No. 13, July 16, 2024
A. Agencies shall submit to the Director of
				ISD-OC and the CIO a written listing (preferably in an Excel spreadsheet) of
				all agency IP addresses and the access protocols of all network devices that
				allow access to the public Internet.
B. Agencies shall inform the Director of
				ISD-OC and the CIO in writing of all new IP addresses, their devices and their
				access protocols within three (3) working days of implementation.
New Mexico Administrative Code › Title 1 - GENERAL GOVERNMENT ADMINISTRATION › Chapter 12 - INFORMATION TECHNOLOGY › Part 8 - NOTIFICATION OF INTERNET PROTOCOL ADDRESSES › Section 1.12.8.9 - RESPONSIBILITIES OF ISD-OC

Current through Register Vol. 35, No. 13, July 16, 2024
ISD-OC will deny access from and to the public Internet for
				  access protocols not specifically reported to ISD-OC and the
				  CIO.
New Mexico Administrative Code › Title 1 - GENERAL GOVERNMENT ADMINISTRATION › Chapter 12 - INFORMATION TECHNOLOGY › Part 8 - NOTIFICATION OF INTERNET PROTOCOL ADDRESSES › Section 1.12.8.10 - RESPONSIBILITIES OF THE CIO

Current through Register Vol. 35, No. 13, July 16, 2024
A. The
				CIO will maintain a listing of all IP addresses and access protocols by
				agency.
B. The listing will be
				protected as confidential information.
New Mexico Administrative Code › Title 1 - GENERAL GOVERNMENT ADMINISTRATION › Chapter 12 - INFORMATION TECHNOLOGY › Part 8 - NOTIFICATION OF INTERNET PROTOCOL ADDRESSES › Section 1.12.8.11 - REPONSIBILITY OF THE COMMISSION

Current through Register Vol. 35, No. 13, July 16, 2024
The Security and Privacy Advisory Committee will recommend to
				  the Commission for their approval access protocols, in addition to those
				  defined in
				  1.12.8.7 NMAC,
				  subject to this rule.
New Mexico Administrative Code › Title 1 - GENERAL GOVERNMENT ADMINISTRATION › Chapter 12 - INFORMATION TECHNOLOGY › Part 8 - NOTIFICATION OF INTERNET PROTOCOL ADDRESSES › Section 1.12.8.12 - NOTICE OF ADDITIONAL ACCESS PROTOCOLS

Current through Register Vol. 35, No. 13, July 16, 2024
Except in response to an active threat, within five (5)
				  working days of approval by the Commission of additional access protocols
				  subject to this rule, the Office shall:
A. post a notice of approved access protocols
				subject to this rule on the Internet at its internet address;
B. notify all persons on the electronic
				distribution list of approved access protocols subject to this rule;
				and
C. mail or fax a hard copy of
				the approved access protocols subject to this rule to any person requesting
				them in writing or by telephone.
New Mexico Administrative Code › Title 1 - GENERAL GOVERNMENT ADMINISTRATION › Chapter 12 - INFORMATION TECHNOLOGY › Part 9 - PROJECT CERTIFICATION OF TECHNOLOGY PROJECTS › Section 1.12.9.3 - STATUTORY AUTHORITY

Current through Register Vol. 35, No. 13, July 16, 2024
Sections
				  15-1C-5 and
				  15-1C-8 NMSA,
				  1978.
New Mexico Administrative Code › Title 1 - GENERAL GOVERNMENT ADMINISTRATION › Chapter 12 - INFORMATION TECHNOLOGY › Part 9 - PROJECT CERTIFICATION OF TECHNOLOGY PROJECTS › Section 1.12.9.5 - EFFECTIVE DATE

Current through Register Vol. 35, No. 13, July 16, 2024
October 17, 2005, unless a later date is cited at the end of
				  a section.
New Mexico Administrative Code › Title 1 - GENERAL GOVERNMENT ADMINISTRATION › Chapter 12 - INFORMATION TECHNOLOGY › Part 9 - PROJECT CERTIFICATION OF TECHNOLOGY PROJECTS › Section 1.12.9.7 - DEFINITIONS

Current through Register Vol. 35, No. 13, July 16, 2024
A.
"Agency"
means a state organizational entity of the executive
				branch, used interchangeably with department.
B.
"Certification"
means a
				process that releases project funds. The ITC certifies projects except as
				otherwise provided for in Section 1.12.9.10(c). The PCC is the subcommittee
				charged with making recommendations for certification to the ITC.
C.
"Emergency condition"
is a
				situation that creates a threat to public health, welfare, safety or property
				such as may arise by reason of floods, epidemics, riots, equipment failures or
				similar events. The existence of the emergency condition creates an immediate
				and serious need for services, construction or items of tangible personal
				property that cannot be met through normal procurement methods and the lack of
				which would seriously threaten the:
(1)
				functioning of government;
(2)
				preservation or protection of property; or
(3) health or safety of any person.
New Mexico Administrative Code › Title 1 - GENERAL GOVERNMENT ADMINISTRATION › Chapter 12 - INFORMATION TECHNOLOGY › Part 9 - PROJECT CERTIFICATION OF TECHNOLOGY PROJECTS › Section 1.12.9.8 - RESPONSIBILITIES OF THE PCC

Current through Register Vol. 35, No. 13, July 16, 2024
The PCC is a subcommittee of the ITC and shall perform the
				  following responsibilities.
A. Have
				the authority to recommend certification of information technology projects
				that meet one or more of the following:
(1)
				mission criticality;
(2) project
				cost equal to or exceeding $1,000,000;
(3) impact to customer on-line access;
				or
(4) projects the committee deems
				appropriate.
New Mexico Administrative Code › Title 1 - GENERAL GOVERNMENT ADMINISTRATION › Chapter 12 - INFORMATION TECHNOLOGY › Part 9 - PROJECT CERTIFICATION OF TECHNOLOGY PROJECTS › Section 1.12.9.9 - PCC MEMBERSHIP

Current through Register Vol. 35, No. 13, July 16, 2024
A. The
				PCC shall consist of members of the ITC appointed by the ITC chair.
B. The ITC chair shall appoint the chair of
				the PCC.
C. The PCC will select a
				vice chair from its membership.
New Mexico Administrative Code › Title 1 - GENERAL GOVERNMENT ADMINISTRATION › Chapter 12 - INFORMATION TECHNOLOGY › Part 9 - PROJECT CERTIFICATION OF TECHNOLOGY PROJECTS › Section 1.12.9.10 - CERTIFICATION PROCESS

Current through Register Vol. 35, No. 13, July 16, 2024
A.
PCC
				certification generally.
At a minimum, project certification shall be
				required at a project's initiation, during its implementation and closeout. The
				PCC may require additional certification phases, events or deliverables based
				on the progress, complexity, risk or size of the project. Project certification
				shall be required before funds can be released for any of the above
				certification phases. Regarding phased release of funds, project managers shall
				present the distinct components of a phased approach, with approval of what
				constitutes appropriate phases for a particular project to then be approved or
				modified by the office and the PCC.
B.
Agency request.
A report by
				the agency requesting approval of a project requiring certification must be
				submitted in writing for all certification phases specified by the PCC. The PCC
				shall determine the components of the reports and criteria for issuing
				certification.
C.
Verification.
The PCC shall verify that the project has been reviewed by
				the architectural committee and the office as appropriate.
D.
PCC recommendation.
The PCC
				shall make a recommendation to the ITC to issue or deny project certification
				or may provide contingent certification subject to the agency providing
				specific information. The PCC shall notify the agency submitting the project in
				writing of its decision. In the case of recommendation for denial of the
				project for certification, the PCC will cite the reasons for its decision and
				the recommended actions needed to be taken by the agency for resubmission of
				the project for certification.
E.
Office pre-certification.
The office shall release "phase zero"
				pre-certification planning phase funds to develop project phasing, IV&V or
				an overall project plan.
F.
Emergency Certification Review.
The PCC will make every effort, within
				reason, to review projects in a timely manner. If at any time the PCC cannot
				convene, and a project faces significant time constraints and major risks to
				the project an emergency certification review may be implemented. The emergency
				review is for circumstances outside of control of the agency and every effort
				should have been made to work within the existing process. All members of the
				PCC will be provided an opportunity for comment. Documentation will be sent toe
				the PCC electronically with notification of response timeline. Any comments
				from the PCC members must be sent electronically to the chair of the PCC. The
				CIO, PCC chair and the ITC chair shall have the authority to issue or deny
				certification for a particular phase of the project. If a certification is
				approved or denied, without convening the PCC, justification of the action
				shall be provided at the next regularly scheduled meeting of the ITC.
New Mexico Administrative Code › Title 1 - GENERAL GOVERNMENT ADMINISTRATION › Chapter 12 - INFORMATION TECHNOLOGY › Part 9 - PROJECT CERTIFICATION OF TECHNOLOGY PROJECTS › Section 1.12.9.11 - AGENCY RESPONSIBILITIES

Current through Register Vol. 35, No. 13, July 16, 2024
A. An
				executive agency shall:
(1) prepare a written
				project certification report prior to certification for large projects that are
				equal to or exceeding $1,00,000, high-risk projects or at the request of the
				PCC;
(2) schedule a certification
				review and provide documentation in a timely manner to the PCC;
(3) prepare a presentation to the PCC and
				answer questions prior to certification for large or high-risk projects or at
				the request of the PCC;
(4) shall
				keep a copy of each project status report on file;
(5) prepare a written risk assessment report
				at the concept phase of the project, at the end of each project phase, and
				following the culmination of each development lifecycle phase, or more
				frequently for large and high-risk projects;
(6) provide an independent verification and
				validation (IV&V) report to the PCC;
(7) be prepared to identify the value of the
				information technology project, as well as, relationship in support and
				consolidation with other information technology projects and agencies;
				and
(8) keep a copy of each risk
				assessment report on file.
New Mexico Administrative Code › Title 1 - GENERAL GOVERNMENT ADMINISTRATION › Chapter 12 - INFORMATION TECHNOLOGY › Part 9 - PROJECT CERTIFICATION OF TECHNOLOGY PROJECTS › Section 1.12.9.12 - PROJECT PLANS

Current through Register Vol. 35, No. 13, July 16, 2024
A.
Plan
				Required.
An agency shall prepare, in accordance with instructions
				contained in the project management guidelines and best practices document
				prepared by eth office, a project plan for every IT project regardless of its
				scope or cost. The agency project manager shall document the plan and all
				revisions to the plan, and shall keep it on file until the system is removed
				from operation.
B.
Plan
				contents.
The plan shall contain at a minimum:
(1) a description of the project;
(2) a description of the functions the system
				will provide;
(3) a description of
				the development lifecycle methodology;
(4) an initial risk assessment;
(5) risk management strategies, including
				mitigation actions;
(6) quality
				assurance strategies or plan;
(7)
				human and financial resource requirements and allocation;
(8) a project review schedule;
(9) IV&V plan and reports;
(10) project deliverables;
(11) a project schedule; and
(12) appropriate security planning for at
				least data, disaster recovery, and system back-up.
New Mexico Administrative Code › Title 1 - GENERAL GOVERNMENT ADMINISTRATION › Chapter 12 - INFORMATION TECHNOLOGY › Part 10 - INTERNET, INTRANET, EMAIL AND DIGITAL NETWORK USAGE › Section 1.12.10.1 - ISSUING AGENCY

Current through Register Vol. 35, No. 13, July 16, 2024
Information Technology Commission, 404 Montezuma, Santa Fe,
				  NM 87501.
New Mexico Administrative Code › Title 1 - GENERAL GOVERNMENT ADMINISTRATION › Chapter 12 - INFORMATION TECHNOLOGY › Part 10 - INTERNET, INTRANET, EMAIL AND DIGITAL NETWORK USAGE › Section 1.12.10.2 - SCOPE

Current through Register Vol. 35, No. 13, July 16, 2024
The policy governs the use of state of New Mexico information
				  technology (IT) and data telecommunications resources.
New Mexico Administrative Code › Title 1 - GENERAL GOVERNMENT ADMINISTRATION › Chapter 12 - INFORMATION TECHNOLOGY › Part 10 - INTERNET, INTRANET, EMAIL AND DIGITAL NETWORK USAGE › Section 1.12.10.3 - STATUTORY AUTHORITY

Current through Register Vol. 35, No. 13, July 16, 2024
Section
				  15-1C-5 NMSA
				  1978.
New Mexico Administrative Code › Title 1 - GENERAL GOVERNMENT ADMINISTRATION › Chapter 12 - INFORMATION TECHNOLOGY › Part 10 - INTERNET, INTRANET, EMAIL AND DIGITAL NETWORK USAGE › Section 1.12.10.5 - EFFECTIVE DATE

Current through Register Vol. 35, No. 13, July 16, 2024
September 15, 2004, unless a later date is cited at the end
				  of a section.
New Mexico Administrative Code › Title 1 - GENERAL GOVERNMENT ADMINISTRATION › Chapter 12 - INFORMATION TECHNOLOGY › Part 10 - INTERNET, INTRANET, EMAIL AND DIGITAL NETWORK USAGE › Section 1.12.10.6 - OBJECTIVE

Current through Register Vol. 35, No. 13, July 16, 2024
The purpose of this policy is to provide state of New Mexico
				  staff with guidance on the proper use of the state's information technology
				  resources, including but not limited to the internet, the intranet, email, and
				  the state's digital network and supporting systems.
New Mexico Administrative Code › Title 1 - GENERAL GOVERNMENT ADMINISTRATION › Chapter 12 - INFORMATION TECHNOLOGY › Part 10 - INTERNET, INTRANET, EMAIL AND DIGITAL NETWORK USAGE › Section 1.12.10.7 - DEFINITIONS

Current through Register Vol. 35, No. 13, July 16, 2024
As used in this policy:
A.
access
means the ability to
				read, change, or enter data using a computer or an information
				system;
B.
equipment
means computers, monitors, keyboards, mice, routers, switches, hubs, networks,
				or any other information technology assets;
C.
freeware or shareware
means
				software that is available free of charge and available for download from the
				internet. Freeware is protected by a copyright and is subject to applicable
				copyright laws;
D.
information technology resources (IT resources)
means computer hardware,
				software, databases, electronic message systems, communication equipment,
				computer networks, telecommunications circuits, and any information that is
				used by a state agency to support programs or operations that is generated by,
				transmitted within, or stored on any electronic media;
E.
malicious code
means any type
				of code intended to damage, destroy, or delete a computer system, network,
				file, or data;
F.
pirated
				software
means licensable software installed on a computer system for
				which a license has not been purchased or legally obtained;
G.
security mechanism
means a
				firewall, proxy, internet address-screening or filtering program, or other
				system installed to prevent the disruption or denial of services or the
				unauthorized use, damage, destruction, or modification of data and
				software;
H.
sexually
				explicit
or
extremist materials
means images, documents, or
				sounds that can reasonably be construed as:
(1) discriminatory or harassing; or
(2) defamatory or libelous; or
(3) obscene or pornographic; or
(4) threatening to an individual's physical
				or mental well-being; or
(5) read
				or heard for any purpose that is illegal; and
New Mexico Administrative Code › Title 1 - GENERAL GOVERNMENT ADMINISTRATION › Chapter 12 - INFORMATION TECHNOLOGY › Part 10 - INTERNET, INTRANET, EMAIL AND DIGITAL NETWORK USAGE › Section 1.12.10.8 - POLICY

Current through Register Vol. 35, No. 13, July 16, 2024
The internet and other information technology resources are
				  important assets that the state can use to gather information to improve
				  external and internal communications and increase efficiency in business
				  relationships. To encourage the effective and appropriate use of the state's IT
				  resources, the following policies govern the use of the state's IT
				  resources:
A. State agencies shall
				provide all users with a written copy of this rule.
(1) All users shall sign and date a statement
				indicating they have received and read this policy.
(2) Each user's signed statement shall be
				kept on file for as long as the user is employed by, has a contract with or
				otherwise provides services to the agency.
New Mexico Administrative Code › Title 1 - GENERAL GOVERNMENT ADMINISTRATION › Chapter 12 - INFORMATION TECHNOLOGY › Part 10 - INTERNET, INTRANET, EMAIL AND DIGITAL NETWORK USAGE › Section 1.12.10.10 - PERSONAL USE OF THE INTERNET

Current through Register Vol. 35, No. 13, July 16, 2024
Occasional and incidental personal use of the state's IT
				  resources and internet access is allowed subject to limitations. Personal use
				  of the internet is prohibited if:
A.
				it materially interferes with the use of IT resources by the state or any
				political subdivision thereof; or
B. such use burdens the state or any
				political subdivision thereof with additional costs; or
C. such use interferes with the user's
				employment duties or other obligations to the state or any political
				subdivision thereof; or
D. such
				personal use includes any activity that is prohibited under this
				rule.
New Mexico Administrative Code › Title 1 - GENERAL GOVERNMENT ADMINISTRATION › Chapter 12 - INFORMATION TECHNOLOGY › Part 10 - INTERNET, INTRANET, EMAIL AND DIGITAL NETWORK USAGE › Section 1.12.10.11 - AGENCY POLICIES

Current through Register Vol. 35, No. 13, July 16, 2024
All agencies shall implement this policy immediately upon its
				  effective date. At the discretion of the agency head, an agency may adopt
				  additional agency-specific IT resources usage policies that are more
				  restrictive than this rule, but in no case shall an agency adopt policies that
				  are less restrictive than this rule. This rule shall control in the event of
				  any conflict between an agency policy and this rule.
New Mexico Administrative Code › Title 1 - GENERAL GOVERNMENT ADMINISTRATION › Chapter 12 - INFORMATION TECHNOLOGY › Part 11 - ENTERPRISE ARCHITECTURE › Section 1.12.11.2 - SCOPE

Current through Register Vol. 35, No. 13, July 16, 2024
This rule applies to the enterprise architecture of the state
				  of New Mexico (SoNM) and all IT projects or programs undertaken by agencies.
				  This rule applies to any state government body or public entity that would like
				  to become a member or utilize services within the enterprise data
				  center.
New Mexico Administrative Code › Title 1 - GENERAL GOVERNMENT ADMINISTRATION › Chapter 12 - INFORMATION TECHNOLOGY › Part 11 - ENTERPRISE ARCHITECTURE › Section 1.12.11.3 - STATUTORY AUTHORITY

Current through Register Vol. 35, No. 13, July 16, 2024
NMSA 1978 Section
				  15-1C-5 and
				  15-1C-8.
New Mexico Administrative Code › Title 1 - GENERAL GOVERNMENT ADMINISTRATION › Chapter 12 - INFORMATION TECHNOLOGY › Part 11 - ENTERPRISE ARCHITECTURE › Section 1.12.11.5 - EFFECTIVE DATE

Current through Register Vol. 35, No. 13, July 16, 2024
The effective date is 06-15-2005, unless a later date is
				  specified at the end of a section.
New Mexico Administrative Code › Title 1 - GENERAL GOVERNMENT ADMINISTRATION › Chapter 12 - INFORMATION TECHNOLOGY › Part 11 - ENTERPRISE ARCHITECTURE › Section 1.12.11.6 - OBJECTIVE

Current through Register Vol. 35, No. 13, July 16, 2024
The purpose of this document is to establish rules,
				  standards, and policies for the enterprise architecture for the
				  SoNM.