The legislature finds that the advent of the COVID-19 pandemic has increased the needs of the people of Washington for state services. From unemployment benefits to information on the incidence of disease in the state, Washingtonians have increasingly turned to state government for vital services and information.
The legislature further finds that the state's information technology infrastructure is outdated and with insufficient capacity to handle the increased demand and has, in many cases, not been adequate to enable the state to provide the needed services effectively and efficiently.
Therefore, the legislature intends to migrate the state's information technology toward cloud services, which will deliver the capacity, security, resiliency, disaster recovery capability, and data analytics necessary to allow the state to provide Washingtonians the services they require during this pandemic and in the future.
This section modifies existing section 43.105.020. Here is the modified chapter for context.
The definitions in this section apply throughout this chapter unless the context clearly requires otherwise.
"Agency" means the consolidated technology services agency.
"Board" means the technology services board.
"Cloud computing" has the same meaning as provided by the special publication 800-145 issued by the national institute of standards and technology of the United States department of commerce as of September 2011 or its successor publications.
"Customer agencies" means all entities that purchase or use information technology resources, telecommunications, or services from the consolidated technology services agency.
"Director" means the state chief information officer, who is the director of the consolidated technology services agency.
"Enterprise architecture" means an ongoing activity for translating business vision and strategy into effective enterprise change. It is a continuous activity. Enterprise architecture creates, communicates, and improves the key principles and models that describe the enterprise's future state and enable its evolution.
"Equipment" means the machines, devices, and transmission facilities used in information processing, including but not limited to computers, terminals, telephones, wireless communications system facilities, cables, and any physical facility necessary for the operation of such equipment.
"Information" includes, but is not limited to, data, text, voice, and video.
"Information security" means the protection of communication and information resources from unauthorized access, use, disclosure, disruption, modification, or destruction in order to:
Prevent improper information modification or destruction;
Preserve authorized restrictions on information access and disclosure;
Ensure timely and reliable access to and use of information; and
Maintain the confidentiality, integrity, and availability of information.
"Information technology" includes, but is not limited to, all electronic technology systems and services, automated information handling, system design and analysis, conversion of data, computer programming, information storage and retrieval, telecommunications, requisite system controls, simulation, electronic commerce, radio technologies, and all related interactions between people and machines.
"Information technology portfolio" or "portfolio" means a strategic management process documenting relationships between agency missions and information technology and telecommunications investments.
"K‑20 network" means the network established in RCW 43.41.391.
"Local governments" includes all municipal and quasi-municipal corporations and political subdivisions, and all agencies of such corporations and subdivisions authorized to contract separately.
"Office" means the office of the state chief information officer within the consolidated technology services agency.
"Oversight" means a process of comprehensive risk analysis and management designed to ensure optimum use of information technology resources and telecommunications.
"Proprietary software" means that software offered for sale or license.
"Public agency" means any agency of this state or another state; any political subdivision or unit of local government of this state or another state including, but not limited to, municipal corporations, quasi-municipal corporations, special purpose districts, and local service districts; any public benefit nonprofit corporation; any agency of the United States; and any Indian tribe recognized as such by the federal government.
"Public benefit nonprofit corporation" means a public benefit nonprofit corporation as defined in RCW 24.03.005 that is receiving local, state, or federal funds either directly or through a public agency other than an Indian tribe or political subdivision of another state.
"Public record" has the definitions in RCW 42.56.010 and chapter 40.14 RCW and includes legislative records and court records that are available for public inspection.
"Public safety" refers to any entity or services that ensure the welfare and protection of the public.
"Security incident" means an accidental or deliberative event that results in or constitutes an imminent threat of the unauthorized access, loss, disclosure, modification, disruption, or destruction of communication and information resources.
"State agency" means every state office, department, division, bureau, board, commission, or other state agency, including offices headed by a statewide elected official.
"Telecommunications" includes, but is not limited to, wireless or wired systems for transport of voice, video, and data communications, network systems, requisite facilities, equipment, system controls, simulation, electronic commerce, and all related interactions between people and machines.
"Utility-based infrastructure services" includes personal computer and portable device support, servers and server administration, security administration, network administration, telephony, email, and other information technology services commonly used by state agencies.
This section modifies existing section 43.105.375. Here is the modified chapter for context.
Except as provided by subsection (2) of this section, state agencies shall locate all existing and new information or telecommunications investments in the state data center or within third-party, commercial cloud computing services. State agencies must give preference to cloud computing services.
State agencies with a service requirement that precludes them from complying with subsection (1) of this section must receive a waiver from the office. Waivers must be based upon written justification from the requesting state agency citing specific service or performance requirements for locating servers outside the state's common platform.
3.
The legislature and the judiciary, which are constitutionally recognized as separate branches of government, may enter into an interagency agreement with the office to migrate its servers into the state data center or third-party, commercial cloud computing services.
[Empty]
A task force on cloud transition is established, with members as provided in this subsection.
The state chief information officer;
The state chief information security officer; and
The governor shall appoint:
(A) Two representatives from the represented employees' bargaining unit for state employees;
(B) One representative from a company providing third-party cloud computing services;
(C) One representative from a trade association representing cloud computing providers; and
(D) One member from the state board for community and technical colleges.
b. The task force shall be chaired by the state chief information officer, who shall convene the initial meeting.
The task force shall review the following issues:
The impacts on labor of transitioning to third-party cloud computing services;
The retraining needs that the existing workforce may require to maintain employment in the information technology sector and deliver cloud computing services effectively within state government; and
The optimal method for delivering such training.
Staff support for the task force, including administration of task force meetings, must be provided by the office of the chief information officer.
Members of the task force are not entitled to be reimbursed for travel expenses if they are elected officials or are participating on behalf of an employer, governmental entity, or other organization. Any reimbursement for other members is subject to chapter 43.03 RCW.
The task force shall report its findings and recommendations to the governor and the appropriate committees of the legislature by November 30, 2021.
This section expires December 31, 2021.