46th legislature - STATE OF NEW MEXICO - first session, 2003
AN ACT
RELATING TO INFORMATION TECHNOLOGY; CLARIFYING PROVISIONS OF THE INFORMATION TECHNOLOGY MANAGEMENT ACT; REVISING THE MEMBERSHIP OF THE INFORMATION TECHNOLOGY COMMISSION; EXTENDING THE TERMINATION DATE FOR THE COMMISSION; PROVIDING PENALTIES FOR NONCOMPLIANCE BY PUBLIC OFFICIALS OR EMPLOYEES; AMENDING AND ENACTING SECTIONS OF THE NMSA 1978; DECLARING AN EMERGENCY.
BE IT ENACTED BY THE LEGISLATURE OF THE STATE OF NEW MEXICO:
Section 1. Section 15-1C-1 NMSA 1978 (being Laws 1999, Chapter 16, Section 1) is amended to read:
"15-1C-1. SHORT TITLE.--[Sections 1 through 9 of this
act] Chapter 15, Article 1C NMSA 1978 may be cited as the
"Information Technology Management Act"."
Section 2. Section 15-1C-2 NMSA 1978 (being Laws 1999, Chapter 16, Section 2) is amended to read:
"15-1C-2. PURPOSE.--The purpose of the Information Technology Management Act is to:
A. coordinate policies and procedures for e-government;
[A.] B. assess and inventory current information
[systems'] technology services and resources;
[B.] C. coordinate [the] central and individual
executive agency information [systems] technology in a manner
that ensures compliance with state information architecture and
that [the most] ensures cost-effective and efficient
information and communication systems and resources are being
used by executive agencies;
[C.] D. develop a [five-year] three-year state
information technology strategic plan for information and
communication management that is updated annually by the
information technology commission; and
[D.] E. promote data sharing between governmental
entities and provide a mechanism for information technology
expertise to be shared between the branches of state government
and local governments."
Section 3. Section 15-1C-3 NMSA 1978 (being Laws 1999, Chapter 16, Section 3) is amended to read:
"15-1C-3. DEFINITIONS.--As used in the Information Technology Management Act:
A. "agency plan" means an executive agency's annual information technology plan;
B. "commission" means the information technology commission;
[C. "development project" means the period from
when funding is made available for information technology
development until after system implementation;
D.] C. "executive agency" means a state agency of
the executive branch of government;
D. "e-government" means the provision of access to government information and services via the internet that complies with state information architecture;
E. "information technology" means computer and voice and data communication software and hardware, including imaging systems, terminals and communications networks and facilities, staff information systems services and professional services contracts for information systems services;
F. "information technology project" means the purchase, replacement, development or modification of a hardware or software system;
[F.] G. "office" means the [information technology
management] office of the chief information officer;
[G.] H. "state information architecture" [includes
the standards, guidelines, policies and protocols to implement
information technology] means a logically consistent set of
principles, policies and standards that guides the engineering
of state government's information technology systems and
infrastructure in a way that ensures alignment with state
government's business needs; and
[H.] I. "state information technology strategic
plan" means the [executive] information technology planning
document for the state that spans a [three- to five-year]
three-year period."
Section 4. Section 15-1C-4 NMSA 1978 (being Laws 1999, Chapter 16, Section 4) is amended to read:
"15-1C-4. COMMISSION CREATED--MEMBERSHIP.--
A. The "information technology commission" is
created. The commission consists of [thirteen] fifteen members
as follows:
(1) five members appointed by the governor, three of whom are from agencies whose primary funding is not from internal service funds;
(2) one staff member with telecommunications regulatory experience appointed by the chairman of the public regulation commission;
(3) two members representing education, one appointed by the commission on higher education and one appointed by the president of the state board of education;
(4) two members from the national
laboratories; [and]
(5) three members appointed by the governor to represent the public with information technology and management experience, but who are not employees of the state or a political subdivision of the state and who do not have any financial interest in the state information systems or state contracts. The public members shall serve for staggered three-year terms; and
(6) two members representing local government, one appointed by the New Mexico association of counties and one appointed by the New Mexico municipal league.
B. Additionally, the following advisory members may
[be appointed at the request of] serve on the commission:
(1) two members from the judicial information
systems council appointed by the chairman of [the] that
council;
[(2) two members from the house of
representatives and two members from the senate appointed by
the New Mexico legislative council; and
(3) two members representing local
governments, one appointed by the New Mexico association of
counties and one appointed by the New Mexico municipal league]
(2) one staff member from the legislative council service and one staff member from the legislative finance committee, appointed by their respective directors; and
(3) the chief information officer.
C. Members of the commission, except the three public members appointed by the governor, may select designees to represent them and vote on their behalf.
[C.] D. The members of the commission who are not
supported by public money, or their designees, may receive per
diem and mileage pursuant to the Per Diem and Mileage Act, but
shall receive no other compensation, perquisite or allowance.
[D. For the initial year of operation, the chief
information officer shall act as chairman. Thereafter, the
commission shall elect a chairman and vice chairman for a two-year term.]
E. The commission shall elect a chairman and vice chairman from the active membership of the commission for two-year terms.
[E.] F. The commission shall meet at least
semiannually and may meet at the call of the chairman or a
majority of the members."
Section 5. Section 15-1C-5 NMSA 1978 (being Laws 1999, Chapter 16, Section 5) is amended to read:
"15-1C-5. COMMISSION--POWERS AND DUTIES.--The commission shall:
A. adopt and promulgate rules that [specify]
delineate the state information architecture [to implement] as
a framework for the state information technology strategic
plan;
B. adopt and promulgate other rules necessary for the administration of the Information Technology Management Act and the conduct of the affairs of the office;
C. develop and annually review strategies for
identifying [and managing development] information technology
projects that [involve multiple agencies to ensure appropriate
and timely resolution of system development problems] impact
multiple agencies and ensure that those information technology
projects are appropriately designed and developed;
D. provide information technology planning guidelines for agency annual plans;
E. update state information architecture and the
state information technology strategic plan annually, including
identifying areas of noncompliance with the state information
technology strategic plan; [and]
F. submit proposed rules to the information technology oversight committee for its review prior to adoption;
G. review and comment on information technology appropriation requests presented to it by the chief information officer and report to the legislative finance committee and the information technology oversight committee regarding those requests;
H. establish policies, procedures and rules to ensure that information technology projects satisfy criteria established by the commission and are phased in, that funding is released in phases and that an executive agency's authority to proceed to the next phase of an information technology project is contingent upon successful completion of the prior phase. The policies, procedures and rules shall require the identification of one or more specific deliverables for each phase; and
I. adopt and promulgate rules to provide for mediation of disputes between an executive agency and the chief information officer pursuant to Paragraph (2) or (4) of Subsection B of Section 15-1C-7 NMSA 1978."
Section 6. Section 15-1C-6 NMSA 1978 (being Laws 1999, Chapter 16, Section 6) is amended to read:
"15-1C-6. [INFORMATION TECHNOLOGY MANAGEMENT] OFFICE OF
THE CHIEF INFORMATION OFFICER CREATED--ADMINISTRATIVE
ATTACHMENT--CHIEF INFORMATION OFFICER--QUALIFICATIONS--STAFF.--
A. The ["information technology management] "office
of the chief information officer" is created. The office is
administratively attached to the office of the governor.
B. The head of the office is the "chief information officer", who is appointed by the governor with the advice and consent of the senate. The chief information officer shall have a minimum of seven years' experience in the management of a large information technology enterprise. The chief information officer serves at the pleasure of the governor.
C. The chief information officer may hire staff as necessary to carry out the provisions of the Information Technology Management Act. Staff of the office are subject to the provisions of the Personnel Act."
Section 7. Section 15-1C-7 NMSA 1978 (being Laws 1999, Chapter 16, Section 7) is amended to read:
"15-1C-7. OFFICE--POWERS AND DUTIES.--
A. The office may:
(1) obtain information, documents and records that are not confidential by law from an executive agency as needed to carry out the provisions of the Information Technology Management Act;
(2) enter into contracts;
(3) perform [performance or other audits or]
reviews of executive agency [development] information
technology projects or information technology management
processes; and
(4) when requested, offer assistance or expertise to the judiciary, legislature, institutions of higher education, counties, municipalities, public school districts and other political subdivisions of the state.
B. The office shall:
(1) review agency plans and make
recommendations to the commission regarding prudent allocation
of information technology resources; reduction of data,
hardware and software redundancy; and improving system
interoperability and data accessibility [among] between
agencies;
(2) approve executive agency information technology requests for proposals and contract vendor requests that are subject to the Procurement Code, prior to final approval;
(3) recommend procedures and rules to the commission for improved oversight of information technology procurement;
(4) approve executive agency information
technology [professional service] contracts [for technical
sufficiency as they pertain to information technology] and
amendments to those contracts, including emergency
procurements, sole source contracts and price agreements, prior
to final execution;
(5) verify compliance with state information architecture and the state information technology strategic plan before approving documents referred to in Paragraphs (2) and (4) of this subsection;
[(3)] (6) monitor executive agency compliance
with its agency plan, the state information technology
strategic plan and state information architecture and report to
the governor, the commission and executive agency management on
noncompliance;
[(4)] (7) review information technology cost
recovery mechanisms and information systems rate structures of
executive agencies and make recommendations to the commission;
[(5)] (8) provide technical support to
executive agencies in the development of their agency plans;
[(6)] (9) review appropriation requests
related to executive agency information technology requests to
ensure compliance with agency plans and the state information
technology strategic plan and make written recommendations to
the department of finance and administration, the legislative
finance committee, [and] the information technology oversight
committee and the commission by November 30 of each year;
[(7)] (10) provide oversight of [development]
information technology projects, including ensuring adequate
risk management and disaster recovery practices and [monitor]
monitoring compliance with strategies developed by the
commission for [timely resolution of development technology
project problems] information technology projects that impact
multiple agencies; and
[(8)] (11) perform any other function assigned
by the commission."
Section 8. Section 15-1C-8 NMSA 1978 (being Laws 1999, Chapter 16, Section 8) is amended to read:
"15-1C-8. AGENCY PLANS--CERTIFICATION--NONCOMPLIANCE--PENALTIES.--
A. Agency plans shall:
(1) be consistent with the state information technology strategic plan;
(2) demonstrate that the executive agency has
developed information technology objectives consistent with the
agency plan, the state information technology strategic plan
and the state information [technology] architecture;
(3) show appropriate coordination with other executive agencies to improve customer service and reduce redundant data, hardware and software;
(4) include information about information technology objectives, inventories, data and expenditures for each fiscal year;
(5) demonstrate consistency with appropriations and budgets approved by the department of finance and administration; and
(6) include any other components required by the office or the commission.
B. Prior to making information technology
purchases, regardless of the funding source, an executive
agency shall certify to the [office] commission, pursuant to
rules adopted by the commission, that its proposed information
technology purchases are consistent with its agency plan, the
state information architecture adopted by the commission and
the state information technology strategic plan. The [office]
commission or the office may delay or stop a purchase if it
believes that the proposed purchase may not meet the
requirements of the agency plan, state information architecture
or the state information technology strategic plan.
C. A person who makes an information technology purchase or sale and intentionally fails to comply with the certification requirements set forth in Subsection B of this section is in violation of the provisions of that subsection and:
(1) is guilty of a misdemeanor, as provided in Section 31-19-1 NMSA 1978;
(2) is subject to a civil penalty in an amount not to exceed one thousand dollars ($1,000) for each violation; and
(3) shall be individually liable to the state for the amount of the purchase or sale."
Section 9. A new section of the Information Technology Management Act is enacted to read:
"[NEW MATERIAL] INFORMATION TECHNOLOGY PLANS AND PROJECTS--COMMISSION ON HIGHER EDUCATION--STATE DEPARTMENT OF PUBLIC EDUCATION--JUDICIAL BRANCH--LEGISLATIVE BRANCH.--
A. The commission on higher education, the state department of public education, the judicial branch of government and the legislative branch of government are encouraged to submit their annual information technology plans to the office, the legislative finance committee and the information technology oversight committee for review and comment by those entities.
B. The commission on higher education, the state department of public education, the judicial branch of government and the legislative branch of government are encouraged to submit periodic status reports regarding information technology projects to the office and the legislative finance committee for review and comment.
C. The commission on higher education, the state department of public education, the judicial branch of government and the legislative branch of government are encouraged, but not required, to certify to the commission that their information technology projects are consistent with their information technology plans."
Section 10. Section 15-1C-9 NMSA 1978 (being Laws 1999, Chapter 16, Section 9) is amended to read:
"15-1C-9. TERMINATION OF AGENCY LIFE--DELAYED
REPEAL.--The information technology commission [and information
technology management office are] is terminated July 1, [2005]
2009 pursuant to the Sunset Act. The commission [and office]
shall continue to operate according to the provisions of the
Information Technology Management Act until July 1, [2006.
Effective July 1, 2006, that act is repealed] 2010."
Section 11. Section 15-1C-11 NMSA 1978 (being Laws 1999, Chapter 16, Section 11) is amended to read:
"15-1C-11. OVERSIGHT COMMITTEE DUTIES.--
A. The information technology oversight committee shall hold one organizational meeting each year to develop a work plan and budget for the ensuing interim. The work plan and budget shall be submitted to the New Mexico legislative council for approval.
B. The committee shall:
(1) monitor the work of the information
technology commission and the [information technology
management] office of the chief information officer, including
reviewing the commission's rules setting out the policies,
standards, procedures and guidelines for information
architecture and development projects and the annual update of
the state information technology strategic plan;
(2) oversee the implementation of the Information Technology Management Act, review the work of the judicial information systems council and the judicial information division and oversee any other state-funded systems;
(3) meet on a regular basis to receive and
evaluate periodic reports from the information technology
commission and [information technology management] office of
the chief information officer; and
(4) perform such other related duties as assigned by the legislative council.
C. The committee shall make a report of its findings and recommendations for the consideration of each session of the legislature. The report and any suggested legislation shall be made available to the legislative council by December 31 preceding that session."
Section 12. EMERGENCY.--It is necessary for the public peace, health and safety that this act take effect immediately.