Alabama 2025 Regular Session

Alabama House Bill HB208 Compare Versions

Only one version of the bill is available at this time.

Old	New	Differences
1	1	HB208INTRODUCED
2	2	Page 0
3	3	HB208
4	4	I4K5ZW6-1
5	5	By Representative Shaw
6	6	RFD: State Government
7	7	First Read: 06-Feb-25
8	8	1
9	9	2
10	10	3
11	11	4
12	12	5 I4K5ZW6-1 02/04/2025 KMS (L)KMS 2025-180
13	13	Page 1
14	14	First Read: 06-Feb-25
15	15	SYNOPSIS:
16	16	Under existing law, the Office of Information
17	17	Technology was created to streamline information
18	18	technology and provide for the delivery of information
19	19	technology services for state government offices.
20	20	This bill would expand the services of the
21	21	office to include cybersecurity and would also create a
22	22	technology quality assurance board.
23	23	A BILL
24	24	TO BE ENTITLED
25	25	AN ACT
26	26	Relating to the powers and duties of the Secretary of
27	27	Information Technology; to amend Section 41-28-4, Code of
28	28	Alabama 1975, to authorize the secretary to adopt rules
29	29	providing for cybersecurity governance for state agencies; and
30	30	to authorize the secretary, in consultation with the Governor,
31	31	to adopt rules providing for the creation, operation, and
32	32	oversight of a technology quality assurance board.
33	33	BE IT ENACTED BY THE LEGISLATURE OF ALABAMA:
34	34	Section 1. Section 41-28-4 of the Code of Alabama 1975,
35	35	is amended to read as follows:
36	36	"§41-28-4
37	37	1
38	38	2
39	39	3
40	40	4
41	41	5
42	42	6
43	43	7
44	44	8
45	45	9
46	46	10
47	47	11
48	48	12
49	49	13
50	50	14
51	51	15
52	52	16
53	53	17
54	54	18
55	55	19
56	56	20
57	57	21
58	58	22
59	59	23
60	60	24
61	61	25
62	62	26
63	63	27
64	64	28 HB208 INTRODUCED
65	65	Page 2
66	66	"§41-28-4
67	67	The secretary shall have all of the following powers
68	68	and duties:
69	69	(1) Develop a comprehensive four-year strategic plan
70	70	for the state's information technology to include acquisition,
71	71	management, and use of information technology by state
72	72	agencies. The plan shall be developed in conjunction with the
73	73	planning and budgeting processes for state agencies and may
74	74	include review of state agencies' information technology
75	75	plans, capital budgets, and operating budgets as appropriate
76	76	to accomplish the goals of reducing redundant expenditures and
77	77	maximizing the return on information technology investments.
78	78	The plan shall be updated annually and submitted to the
79	79	Governor and shall be presented during a public meeting to the
80	80	Permanent Legislative Oversight Committee on Information
81	81	Technology. The plan shall further be coordinated with the
82	82	Boards of Directors of the Alabama Supercomputer Authority.
83	83	(2) Collaborate and coordinate with the Division of
84	84	Data Systems Management of the Department of Finance as set
85	85	forth in Article 8 of Chapter 4 of this title, the Alabama
86	86	Supercomputer Authority, or any state authority, board, or
87	87	agency of like kind, and promote standards and coordinate
88	88	services and infrastructure to ensure that information
89	89	technology is used to support designated needs areas,
90	90	including identifying applications, equipment, and services
91	91	that may be statewide in scope and assisting state agencies in
92	92	avoiding duplication of applications, equipment, and services.
93	93	(3) Serve as a member of the board, or boards, for the
94	94	Alabama Supercomputer Authority.
95	95	29
96	96	30
97	97	31
98	98	32
99	99	33
100	100	34
101	101	35
102	102	36
103	103	37
104	104	38
105	105	39
106	106	40
107	107	41
108	108	42
109	109	43
110	110	44
111	111	45
112	112	46
113	113	47
114	114	48
115	115	49
116	116	50
117	117	51
118	118	52
119	119	53
120	120	54
121	121	55
122	122	56 HB208 INTRODUCED
123	123	Page 3
124	124	Alabama Supercomputer Authority.
125	125	(4) Solicit, receive, and administer funds, goods,
126	126	services, and equipment from public and private entities to be
127	127	used for the purchase of computers, satellites, hardware,
128	128	software, and other information technology equipment and
129	129	services and for staff training in the use of information
130	130	technology development programs.
131	131	(5) Establish an inventory of information technology
132	132	resources to allow identification of underutilized or idle
133	133	resources and all data and data systems in state agencies to
134	134	promote improved asset management, utilization, and data
135	135	sharing, with information technology resources to include
136	136	personnel, software, hardware, and services.
137	137	(6) Establish and administer a structured system for
138	138	review and approval of new information technology initiatives
139	139	and projects, including business case, cost benefit analysis,
140	140	and compatibility analysis.
141	141	(7) Administer any funds appropriated to the secretary
142	142	by the Legislature for the establishment, operation, and
143	143	coordination of the office.
144	144	(8) Represent state information technology and related
145	145	areas with both the private and public sectors, including the
146	146	federal government.
147	147	(9) Issue annual reports to the Governor, the
148	148	Legislature, and the general public concerning the
149	149	coordination and operation of the office.
150	150	(10) Promulgate Adopt rules, regulations, and policies
151	151	and establish procedures and standards for the management and
152	152	operation of information technology by state agencies to carry
153	153	57
154	154	58
155	155	59
156	156	60
157	157	61
158	158	62
159	159	63
160	160	64
161	161	65
162	162	66
163	163	67
164	164	68
165	165	69
166	166	70
167	167	71
168	168	72
169	169	73
170	170	74
171	171	75
172	172	76
173	173	77
174	174	78
175	175	79
176	176	80
177	177	81
178	178	82
179	179	83
180	180	84 HB208 INTRODUCED
181	181	Page 4
182	182	operation of information technology by state agencies to carry
183	183	out this chapter, including coordinating state information
184	184	technology; providing technical assistance to state agency
185	185	administrators on design and management of state information
186	186	technology systems; evaluating the cost, system design, and
187	187	suitability of information technology equipment and related
188	188	services; establishing and enforcing cybersecurity governance
189	189	for state agencies, including supporting operations and
190	190	technology controls; establishing standards and policies for
191	191	project management and project methodologies; and developing a
192	192	unified and integrated structure and enterprise architecture
193	193	for information technology systems for all state agencies.
194	194	(11) In consultation with the Governor, adopt rules to
195	195	provide for the creation, operation, and oversight of a
196	196	technology quality assurance board that will promote the
197	197	responsible and transparent procurement, development, and use
198	198	of novel technologies, including artificial intelligence,
199	199	within state agencies through establishing and enforcing the
200	200	following measures for all of the following technologies:
201	201	a. Ethical guidelines and frameworks.
202	202	b. Security and privacy controls.
203	203	c. Ongoing compliance mechanisms.
204	204	(11)(12) Plan and coordinate information technology and
205	205	cybersecurity activities for state agencies in such a manner
206	206	as to promote the most economical and effective use of state
207	207	resources."
208	208	Section 2. This act shall become effective on October
209	209	1, 2025.
210	210	85
211	211	86
212	212	87
213	213	88
214	214	89
215	215	90
216	216	91
217	217	92
218	218	93
219	219	94
220	220	95
221	221	96
222	222	97
223	223	98
224	224	99
225	225	100
226	226	101
227	227	102
228	228	103
229	229	104
230	230	105
231	231	106
232	232	107
233	233	108
234	234	109
235	235	110
236	236	111