Get Full Government Meeting Transcripts, Videos, & Alerts Forever!
Get email alerts on the Cybersecurity topic
No spam. Unsubscribe anytime.
OITS outlines cybersecurity builds, ARPA projects and emergency fund; committee delays approval
Summary
The Office of Information Technology Services briefed the committee on ARPA‑funded website and phone upgrades, a 24/7 security operations center and other cybersecurity investments; the governor’s $2 million emergency IT fund was noted and the committee voted to postpone a final decision until the next day.
The Office of Information Technology Services presented its FY 2025–26 budget request and a summary of ongoing cybersecurity and infrastructure projects, including ARPA‑funded website modernization, phone‑system upgrades, enterprise cybersecurity tools and a 24/7 security operations center.
Why it matters: OITS provides networking, enterprise email, data center and cybersecurity services for nearly every state agency. The office’s investments and service models shape the security and reliability of state IT systems.
Key points presented by OITS and Legislative Research:
- On‑budget vs. off‑budget: OITS explained the distinction between on‑budget appropriations (rehabilitation/repair) and the fee‑funded, off‑budget services it bills to other agencies. The FY 2025 revised estimate contained a mix of on‑budget and off‑budget spending tied to infrastructure and licensing costs.
- ARPA projects: OITS reported using ARPA funds to modernize about 32 agency websites onto a unified platform, upgrade the state phone system, replace agency firewalls, and build an enterprise licensing/identity platform (work supporting the licensure verification effort referenced in Department of Administration testimony).
- Cybersecurity investments: The office has deployed enterprise endpoint detection and response, an enterprise privileged access management tool, and is staffing a 24/7 security operations center. OITS said it would use SGF investments to support enterprise security functions available to agencies at no additional cost.
- Data center and service‑delivery changes: OITS described a transition to vendor‑managed data center services and ongoing desktop as a service, enterprise service desk and other brokered services.
- Senate Bill 291 implementation: The office is executing new governance, cybersecurity and consolidation requirements created by SB 291, including a timetable to present an IT integration plan to the legislature in January 2026.
- ERP modernization support: OITS leaders expressed support for the Department of Administration’s ERP proposal and said OITS would be deeply involved in requirements, RFP design and vendor evaluation if the project moves forward.
The governor’s FY 2026 budget added a $2,000,000 “agency IT emergency fund” to OITS’s budget that would be used to address unforeseen agency IT expenses with oversight through OITS. The committee discussed the fund and how OITS would manage requests.
Action: Representative Turk moved a substitute motion to defer final action on OITS’ recommendations and related items until the following day so members could study materials and supporting documentation; the substitute motion passed by voice vote.
What’s next: Committee staff will circulate the materials and the committee will take up final budget recommendations the next day; OITS said it would provide more detailed FTE tracking, an ERP support plan and documentation of ARPA project scope and obligations.
