The Florida Senate

282.0041  Definitions.--As used in this chapter, the term:

(1)  "Agency" has the same meaning as in s. 216.011(1)(qq).

(2)  "Agency chief information officer" means the person employed by the agency head to coordinate and manage the information technology functions and responsibilities applicable to that agency, to participate and represent the agency in developing strategies for implementing enterprise information technology services established pursuant to this part, and to develop recommendations for enterprise information technology policy.

(3)  "Agency Chief Information Officers Council" means the council created in s. 282.315

(4)  "Agency for Enterprise Information Technology" means the agency created in s. 14.204

(5)  "Agency information technology service" means a service that directly helps an agency fulfill its statutory or constitutional responsibilities and policy objectives and is usually associated with the agency's primary or core business functions.

(6)  "Annual budget meeting" means a meeting of the board of trustees of a primary data center to review data center usage to determine the apportionment of board members for the following fiscal year, review rates for each service provided, and determine any other required changes.

(7)  "Breach" has the same meaning as in s. 817.5681(4).

(8)  "Business continuity plan" means a plan for disaster recovery which provides for the continued functioning of a primary data center during and after a disaster.

(9)  "Computing facility" means agency space containing fewer than a total of 10 physical or logical servers, any of which supports a strategic or nonstrategic information technology service, as described in budget instructions developed pursuant to s. 216.023, but excluding single, logical-server installations that exclusively perform a utility function such as file and print servers.

(10)  "Customer entity" means an entity that obtains services from a primary data center.

(11)  "Data center" means agency space containing 10 or more physical or logical servers any of which supports a strategic or nonstrategic information technology service, as described in budget instructions developed pursuant to s. 216.023

(12)  "Department" means the Department of Management Services.

(13)  "Enterprise information technology service" means an information technology service that is used in all agencies or a subset of agencies and is established in law to be designed, delivered, and managed at the enterprise level.

(14)  "E-mail, messaging, and calendaring service" means the enterprise information technology service that enables users to send, receive, file, store, manage, and retrieve electronic messages, attachments, appointments, and addresses.

(15)  "Information-system utility" means a full-service information-processing facility offering hardware, software, operations, integration, networking, and consulting services.

(16)  "Information technology" means equipment, hardware, software, firmware, programs, systems, networks, infrastructure, media, and related material used to automatically, electronically, and wirelessly collect, receive, access, transmit, display, store, record, retrieve, analyze, evaluate, process, classify, manipulate, manage, assimilate, control, communicate, exchange, convert, converge, interface, switch, or disseminate information of any kind or form.

(17)  "Information technology policy" means statements that describe clear choices for how information technology will deliver effective and efficient government services to residents and improve state agency operations. A policy may relate to investments, business applications, architecture, or infrastructure. A policy describes its rationale, implications of compliance or noncompliance, the timeline for implementation, metrics for determining compliance, and the accountable structure responsible for its implementation.

(18)  "Performance metrics" means the measures of an organization's activities and performance.

(19)  "Primary data center" means a state or nonstate agency data center that is a recipient entity for consolidation of nonprimary data centers and computing facilities. A primary data center may be authorized in law or designated by the Agency for Enterprise Information Technology pursuant to s. 282.201

(20)  "Project" means an endeavor that has a defined start and end point; is undertaken to create or modify a unique product, service, or result; and has specific objectives that, when attained, signify completion.

(21)  "Risk analysis" means the process of identifying security risks, determining their magnitude, and identifying areas needing safeguards.

(22)  "Service level" means the key performance indicators (KPI) of an organization or service which must be regularly performed, monitored, and achieved.

(23)  "Service-level agreement" means a written contract between a data center and a customer entity which specifies the scope of services provided, service level, the duration of the agreement, the responsible parties, and service costs. A service-level agreement is not a rule pursuant to chapter 120.

(24)  "Standards" means required practices, controls, components, or configurations established by an authority.

(25)  "Threat" means any circumstance or event that may cause harm to the integrity, availability, or confidentiality of information technology resources.

(26)  "Total cost" means all costs associated with information technology projects or initiatives, including, but not limited to, value of hardware, software, service, maintenance, incremental personnel, and facilities. Total cost of a loan or gift of information technology resources to an agency includes the fair market value of the resources; however, the total cost of loans or gifts of information technology to state universities to be used in instruction or research does not include fair market value.

(27)  "Usage" means the billing amount charged by the primary data center, less any pass-through charges, to the customer entity.

(28)  "Usage rate" means a customer entity's usage or billing amount as a percentage of total usage.

History.--ss. 3, 11, ch. 83-92; s. 17, ch. 87-137; ss. 10, 11, ch. 90-160; s. 4, ch. 91-171; s. 10, ch. 91-221; s. 5, ch. 91-429; s. 3, ch. 92-98; s. 95, ch. 92-142; s. 14, ch. 94-226; s. 11, ch. 94-340; s. 9, ch. 97-286; s. 16, ch. 2000-164; s. 51, ch. 2001-61; s. 10, ch. 2001-261; s. 4, ch. 2007-105; s. 5, ch. 2008-116; s. 6, ch. 2009-80.

Note.--Former s. 282.303.