Get Full Government Meeting Transcripts, Videos, & Alerts Forever!
Get email alerts on the Oversight Notifications topic
No spam. Unsubscribe anytime.
Committee and agency debate MOU vs. statute to define urgent notification expectations
Summary
Sen. Brock proposed a memorandum of understanding to memorialize what incidents the agency should notify the Joint Information Technology Oversight Committee about between sessions; members discussed whether to instead codify notifications in statute and agreed to draft a list of items for the next agenda.
The committee discussed how the Agency of Digital Services should notify legislative oversight between regular meetings, particularly for cybersecurity incidents and other urgent matters.
"Whether or not there, ought to be, an effective exchange of a memorandum of understanding between the agency and this committee as to what the expectations are or what kinds of issues would be brought to our attention as a matter of urgency," said Sen. Brock. Brock said the idea is to memorialize expectations so committee members and agency staff share the same understanding about what would trigger urgent notification.
Denise Riley agreed the idea had merit and said the agency would bring forward measures and metrics around core enterprise services, including cybersecurity and network services, that the committee could use to assess oversight needs. Committee members debated whether a flexible MOU or codifying expectations in statute would be preferable; members agreed first to draft a list of items the committee wants to receive and to place the item on a future agenda.
The agencies and committee asked staff to prepare a proposed list of notification items so the group can decide whether an MOU or statutory language best serves oversight and operational needs.
