Florida Senate - 2014 COMMITTEE AMENDMENT Bill No. PCS (290876) for SB 928 Ì696398hÎ696398 LEGISLATIVE ACTION Senate . House Comm: RCS . 03/13/2014 . . . . ————————————————————————————————————————————————————————————————— ————————————————————————————————————————————————————————————————— following: 1 Senate Amendment 2 3 Delete lines 1618 - 1695 4 and insert: 5 Section 26. (1) All records, property, pending issues and 6 existing contracts, administrative authority, administrative 7 rules in chapters 71A-1 and 71A-2, Florida Administrative Code, 8 in effect as of November 15, 2010, trust funds, and unexpended 9 balances of appropriations, allocations, and other funds of the 10 Agency for Enterprise Information Technology are transferred by 11 a type two transfer pursuant to s. 20.06(2), Florida Statutes, 12 to the Agency for State Technology established pursuant to s. 13 20.61, Florida Statutes, as created by this act. 14 (2) Except for those rules in chapters 71A-1 and 71A-2, 15 Florida Administrative Code, transferred pursuant to subsection 16 (1), any other rules adopted by the Agency for Enterprise 17 Information Technology, if any, are void. 18 Section 27. The Northwood Shared Resource Center is 19 transferred by a type two transfer, pursuant to s. 20.06, 20 Florida Statutes, from the Department of Management Services to 21 the Agency for State Technology. Any binding contract or 22 interagency agreement entered into and between the Northwood 23 Shared Resource Center or an entity or agent of the center and 24 any other agency, entity, or person shall continue as a binding 25 contract or agreement of the Agency for State Technology for the 26 remainder of the term of such contract or agreement. 27 Section 28. The Southwood Shared Resource Center is 28 transferred by a type two transfer, pursuant to s. 20.06, 29 Florida Statutes, from the Department of Management Services to 30 the Agency for State Technology. Any binding contract or 31 interagency agreement entered into and between the Southwood 32 Shared Resource Center or an entity or agent of the center and 33 any other agency, entity, or person shall continue as a binding 34 contract or agreement of the Agency for State Technology for the 35 remainder of the term of such contract or agreement. 36 Section 29. (1) The Agency for State Technology shall 37 conduct a feasibility study that analyzes, evaluates, and 38 provides recommendations for managing state government data in a 39 manner that promotes interoperability and openness; ensures 40 that, wherever legally permissible and not cost prohibitive, 41 such data is available to the public in ways that make the data 42 easy to find and use; and complies with the provisions of 43 chapter 119, Florida Statutes. 44 (2) By June 1, 2015, the Agency for State Technology shall 45 submit a report on the feasibility study to the Governor, the 46 President of the Senate, and the Speaker of the House of 47 Representatives. The report, at a minimum, shall include the 48 following components: 49 (a) A clear description of what state government data is 50 public information. The guiding principle for this component is 51 a presumption of openness to the extent permitted by law and 52 subject to privacy, confidentiality, security, and other fiscal 53 and legal restrictions. 54 (b) A fiscal analysis that identifies the impact to any 55 agency that is authorized to assess a fee for providing certain 56 state government data to the public if the description in 57 paragraph (a) includes that data. 58 (c) Recommended standards to make uniform the format and 59 accessibility of public information and to ensure that the data 60 is published in a nonproprietary, searchable, sortable, 61 platform-independent, and machine-readable format. The report 62 shall include the projected cost to state agencies to implement 63 and maintain the standards. 64 (d) A project plan for implementing a single Internet 65 website that contains the public information or links to the 66 public information. The plan shall include a timeline and 67 benchmarks for making public information available online and 68 shall identify costs associated with the development and ongoing 69 maintenance of the website. 70 (e) A recommended governance structure and a review and 71 compliance process to ensure accountability on the part of those 72 who create, maintain, manage, or store public information or 73 post it on the single Internet website. The report shall include 74 associated costs to implement and maintain the recommended 75 governance structure and the review and compliance process. 76 Section 30. Effective June 30, 2014, there is created the 77 state data center task force comprised of all individuals who, 78 upon that date are members of the boards of trustees of the 79 Northwood Shared Resource Center or the Southwood Shared 80 Resource Center, and agree to serve on the task force. The 81 members of the task force shall elect a chair. The purpose of 82 the task force is to assist with the transfer of the Northwood 83 Shared Resource Center and Southwood Shared Resource Center to 84 the Agency for State Technology and the transition to the state 85 data center established pursuant to s. 282.201, Florida 86 Statutes. The task force shall identify any operational or 87 fiscal issues impacting the transition and provide 88 recommendations to the Agency for State Technology for 89 resolution of such issues. The task force does not have 90 authority to make decisions regarding the state data center or 91 the former Northwood Shared Resource Center or Southwood Shared 92 Resource Center. The task force is abolished June 30, 2015, or 93 at an earlier date as provided by the task force. 94 Section 31. (1) For the 2014-2015 fiscal year, the sums of 95 $3,563,573 in recurring funds and $1,095,005 in nonrecurring 96 funds are appropriated from the General Revenue Fund to the 97 Agency for State Technology, and 25 full-time equivalent 98 positions and associated salary rate of 2,083,482 are 99 authorized, for the purpose of implementing this act. 100 (2)(a) The recurring general revenue funds shall be 101 allocated to an Executive Direction and Support Services budget 102 entity in specific appropriation categories: $2,851,452 in 103 Salaries and Benefits, $252,894 in Expenses, $115,000 in 104 Administrative Overhead, $10,000 in Operating Capital Outlay, 105 $317,627 in Contracted Services, $3,000 in Risk Management 106 Insurance, $8,600 in Transfer to Department of Management 107 Services/Statewide Human Resources Contract, and $5,000 in Data 108 Processing Services/Southwood Shared Resource Center. 109 (b) The nonrecurring general revenue funds shall be 110 allocated to an Executive Direction and Support Services budget 111 entity in specific appropriation categories: $95,005 in Expenses 112 and $1,000,000 in Contracted Services. 113 Section 32. A Data Center Administration budget entity is 114 created within the Agency for State Technology. Appropriations 115 to the Data Center Administration budget entity shall reflect 116 the indirect data center costs allocated to customer agencies. 117 Section 33. For the 2014-2015 fiscal year only, the 118 Northwood Shared Resource Center budget entity is created within 119 the Agency for State Technology. Effective July 1, 2014, the 120 appropriations provided for the Northwood Shared Resource Center 121 in the General Appropriations Act for the 2014-2015 fiscal year 122 shall be transferred to the Northwood Shared Resource Center 123 budget entity within the Agency for State Technology. 124 Section 34. For the 2014-2015 fiscal year only, the 125 Southwood Shared Resource Center budget entity is created within 126 the Agency for State Technology. Effective July 1, 2014, the 127 appropriations provided for the Southwood Shared Resource Center 128 in the General Appropriations Act for the 2014-2015 fiscal year 129 shall be transferred to the Southwood Shared Resource Center 130 budget entity within the Agency for State Technology. 131 Section 35. (1) For the 2014-2015 fiscal year, the sums of 132 $144,870 in recurring funds and $7,546 in nonrecurring funds are 133 appropriated from the General Revenue Fund to the Department of 134 Law Enforcement, and 2 full-time equivalent positions and 135 associated salary rate of 93,120 are authorized, for the purpose 136 of implementing the sections of this act related to cybercrime 137 capacity and capability. 138 (2)(a) The recurring general revenue funds shall be 139 allocated to the Provide Investigative Services budget entity in 140 specific appropriation categories: $131,660 in Salaries and 141 Benefits, $12,522 in Expenses, and $688 in Transfer to 142 Department of Management Services/Statewide Human Resources 143 Contract. 144 (b) The nonrecurring general revenue funds of $7,546 shall 145 be allocated to the Provide Investigative Services budget entity 146 in the Expenses appropriation category. 147 Section 36. Beginning with the 2015-2016 fiscal year, the 148 State Data Center budget entity is created within the Agency for 149 State Technology. Appropriations to the State Data Center budget 150 entity shall reflect the direct data center costs allocated to 151 customer agencies. 152 Section 37. (1) From the funds appropriated in section 31, 153 $500,000 in nonrecurring general revenue funds shall be used by 154 the Agency for State Technology to contract with an independent 155 third party consulting firm to complete a risk assessment of 156 information technology security that analyzes and provides 157 recommendations for protecting the state’s information, data, 158 and information technology resources. The risk assessment shall: 159 (a) Focus on the state data center created in s. 282.201, 160 Florida Statutes, and the state data center’s state agency 161 customers. 162 (b) Identify the existing security standards, guidelines, 163 frameworks, and practices currently managing the state’s 164 information, data, and information technology resources. 165 (c) Evaluate industry best practices, standards, 166 guidelines, and frameworks and provide recommendations to 167 increase overall security within the state data center and its 168 state agency customers. 169 (d) Identify the differences between current operations or 170 practices and the Agency for State Technology’s recommendations 171 and prioritize the identified gaps in order of relative 172 importance to state agency customers’ business objectives. 173 (2) The Agency for State Technology shall submit the 174 results of the completed risk assessment to the Governor, the 175 President of the Senate, and the Speaker of the House of 176 Representatives by June 30, 2015. 177 Section 38. (1) The Agency for State Technology shall 178 complete an operational assessment of the state data center 179 created by s. 282.201, Florida Statutes. The operational 180 assessment shall focus on: 181 (a) Standardizing the state data center’s operational 182 processes and practices to include its cost recovery 183 methodologies. 184 (b) Identifying duplication of any staff resources 185 supporting the operation of the state data center and any 186 positions created within the Agency for State Technology. 187 (2) Based upon the results of the operational assessment, 188 the Agency for State Technology shall provide recommendations 189 for the potential reorganization of the state data center, 190 including recommendations for the reduction or reclassification 191 of duplicative positions, and submit its recommendations to the 192 Governor, the President of the Senate, and the Speaker of the 193 House of Representatives by February 1, 2015. 194 Section 39. Notwithstanding s. 216.292(4)(d), Florida Statutes, 195 the transfers authorized in sections 27 and 28 of this act do 196 not require Legislative Budget Commission approval.