23.0017.01000
Sixty-eighth
Legislative Assembly HOUSE BILL NO. 1327
of North Dakota
Introduced by
Representatives Mock, Bosch, Christensen, Kiefert, Kreidt, Nelson
Senators Davison, K. Roers, Wobbema
1 A BILL for an Act to amend and reenact sections 54-59-05 and 54-59-22 of the North Dakota
2 Century Code, relating to powers and duties of the information technology department and
3 information technology requirements of the veterans' home.
4 BE IT ENACTED BY THE LEGISLATIVE ASSEMBLY OF NORTH DAKOTA:
5 SECTION 1. AMENDMENT. Section 54-59-05 of the North Dakota Century Code is
6 amended and reenacted as follows:
7 54-59-05. Powers and duties of department. (Effective through July 31, 2023)
8 The department:
9 1. Shall provide, supervise, and regulate information technology of all executive branch
10 state entities, excluding the institutions under the control of the state board of higher
11 education and the veterans' home.
12 2. Shall provide network services in a way that ensures the network requirements of a
13 single entity do not adversely affect the functionality of the whole network, facilitates
14 open communications with the citizens of the state, minimizes the state's investment in
15 human resources, accommodates an ever-increasing amount of traffic, supports rapid
16 detection and resolution of problems, protects the network infrastructure from damage
17 and security breaches, provides for the aggregation of data, voice, video, and
18 multimedia into a statewide transport mechanism or backbone, and provides for the
19 network support for the entity to carry out its mission.
20 3. May review and approve additional network services that are not provided by the
21 department.
22 4. May purchase, finance the purchase, or lease equipment, software, or implementation
23 services or replace, including by trade or resale, equipment or software as may be
24 necessary to carry out this chapter. With the exception of agreements entered related
Page No. 1 23.0017.01000
 Sixty-eighth
Legislative Assembly
1 to the statewide interoperable radio network, an agreement to finance the purchase of
2 software, equipment, or implementation services may not exceed a period of five
3 years. The department shall submit any intended financing proposal for the purchase
4 of software, equipment, or implementation services under this subsection, which is in
5 excess of one million dollars, to the legislative assembly or the budget section if the
6 legislative assembly is not in session before executing a financing agreement. Any
7 request considered by the budget section must comply with section 54-35-02.9. If the
8 legislative assembly or the budget section does not approve the execution of a
9 financing agreement, the department may not proceed with the proposed financing
10 arrangement. With the exception of financing for the statewide interoperable radio
11 network, the department may finance the purchase of software, equipment, or
12 implementation services only to the extent the purchase amount does not exceed
13 seven and one-half percent of the amount appropriated to the department during that
14 biennium.
15 5. Shall review requests for lease, purchase, or other contractual acquisition of
16 information technology as required by this subsection. Each executive branch agency
17 or institution, excluding the institutions under the control of the board of higher
18 education, shall submit to the department, in accordance with guidelines established
19 by the department, a written request for the lease, purchase, or other contractual
20 acquisition of information technology. The department shall review requests for
21 conformance with the requesting entity's information technology plan and compliance
22 with statewide policies and standards. If the request is not in conformance or
23 compliance, the department may disapprove the request or require justification for the
24 departure from the plan or statewide policy or standard.
25 6. Shall provide information technology, including assistance and advisory service, to the
26 executive, legislative, and judicial branches. If the department is unable to fulfill a
27 request for service from the legislative or judicial branch, the information technology
28 may be procured by the legislative or judicial branch within the limits of legislative
29 appropriations.
30 7. Shall request and review information, including project startup information
31 summarizing the project description, project objectives, business need or problem,
Page No. 2 23.0017.01000
 Sixty-eighth
Legislative Assembly
1 cost-benefit analysis, and project risks and a project closeout information summarizing
2 the project objectives achieved, project budget and schedule variances, and lessons
3 learned, regarding any major information technology project of an executive branch
4 agency. The department shall present the information to the information technology
5 committee on request of the committee.
6 8. May request and review information regarding any information technology project of
7 an executive branch agency with a total cost of between one hundred thousand and
8 five hundred thousand dollars as determined necessary by the department. The
9 department shall present the information to the information technology committee on
10 request of the committee.
11 9. Shall study emerging technology and evaluate its impact on the state's system of
12 information technology.
13 10. Shall develop guidelines for reports to be provided by each agency of the executive,
14 legislative, and judicial branches, excluding the institutions under the control of the
15 board of higher education, on information technology in those entities.
16 11. Shall collaborate with the state board of higher education on guidelines for reports to
17 be provided by institutions under control of the state board of higher education on
18 information technology in those entities.
19 12. Shall perform all other duties necessary to carry out this chapter.
20 13. May provide wide area network services to a state agency, city, county, school district,
21 or other political subdivision of this state. The information technology department may
22 not provide wide area network service to any private, charitable, or nonprofit entity
23 except the information technology department may continue to provide the wide area
24 network service the department provided to the private, charitable, and nonprofit
25 entities receiving services from the department on January 1, 2003.
26 14. Shall assure proper measures for security, firewalls, and internet protocol addressing
27 at the state's interface with other facilities.
28 15. Notwithstanding subsection 13, may provide wide area network services for a period
29 not to exceed four years to an occupant of a technology park associated with an
30 institution of higher education or to a business located in a business incubator
31 associated with an institution of higher education.
Page No. 3 23.0017.01000
 Sixty-eighth
Legislative Assembly
1 16. Shall advise and oversee cybersecurity strategy for all executive branch state
2 agencies, including institutions under the control of the state board of higher
3 education, counties, cities, school districts, or other political subdivisions. For
4 purposes of this subsection, the department shall consult with the attorney general on
5 cybersecurity strategy.
6 17. Shall advise and consult with the legislative and judicial branches regarding
7 cybersecurity strategy.
8 18. Notwithstanding chapter 54-40.2, may enter a memorandum of understanding with
9 other state, local, tribal, or territorial governments of the United States for purposes of
10 ensuring the confidentiality, availability, and integrity of state, local, and tribal
11 information systems and data, including consulting, developing cybersecurity strategy,
12 prevention of cybersecurity incidents, and response strategies to cybersecurity
13 incidents. The department may charge an amount equal to the cost of the services
14 rendered by the department to all agencies that receive and expend moneys from
15 other than the general fund.
16 19. Notwithstanding chapter 54-40.2, may enter a mutual aid agreement with other state,
17 local, tribal, or territorial governments of the United States agreeing to the reciprocal
18 exchange of resources and services for mutual benefit of the parties related to
19 cybersecurity efforts for the purposes of responding to or mitigating active
20 cybersecurity incidents. The department may receive in-kind benefits that reduce
21 cybersecurity risks to information technology or shall charge an amount equal to the
22 cost of the services rendered by the department to all agencies that receive and
23 expend moneys from other than the general fund.
24 Powers and duties of department. (Effective after July 31, 2023)
25 The department:
26 1. Shall provide, supervise, and regulate information technology of all executive branch
27 state entities, excluding the institutions under the control of the state board of higher
28 education and the veterans' home.
29 2. Shall provide network services in a way that ensures the network requirements of a
30 single entity do not adversely affect the functionality of the whole network, facilitates
31 open communications with the citizens of the state, minimizes the state's investment in
Page No. 4 23.0017.01000
 Sixty-eighth
Legislative Assembly
1 human resources, accommodates an ever-increasing amount of traffic, supports rapid
2 detection and resolution of problems, protects the network infrastructure from damage
3 and security breaches, provides for the aggregation of data, voice, video, and
4 multimedia into a statewide transport mechanism or backbone, and provides for the
5 network support for the entity to carry out its mission.
6 3. May review and approve additional network services that are not provided by the
7 department.
8 4. May purchase, finance the purchase, or lease equipment, software, or implementation
9 services or replace, including by trade or resale, equipment or software as may be
10 necessary to carry out this chapter. An agreement to finance the purchase of software,
11 equipment, or implementation services may not exceed a period of five years. The
12 department shall submit any intended financing proposal for the purchase of software,
13 equipment, or implementation services under this subsection, which is in excess of
14 one million dollars, to the legislative assembly or the budget section if the legislative
15 assembly is not in session before executing a financing agreement. Any request
16 considered by the budget section must comply with section 54-35-02.9. If the
17 legislative assembly or the budget section does not approve the execution of a
18 financing agreement, the department may not proceed with the proposed financing
19 arrangement. The department may finance the purchase of software, equipment, or
20 implementation services only to the extent the purchase amount does not exceed
21 seven and one-half percent of the amount appropriated to the department during that
22 biennium.
23 5. Shall review requests for lease, purchase, or other contractual acquisition of
24 information technology as required by this subsection. Each executive branch agency
25 or institution, excluding the institutions under the control of the board of higher
26 education, shall submit to the department, in accordance with guidelines established
27 by the department, a written request for the lease, purchase, or other contractual
28 acquisition of information technology. The department shall review requests for
29 conformance with the requesting entity's information technology plan and compliance
30 with statewide policies and standards. If the request is not in conformance or
Page No. 5 23.0017.01000
 Sixty-eighth
Legislative Assembly
1 compliance, the department may disapprove the request or require justification for the
2 departure from the plan or statewide policy or standard.
3 6. Shall provide information technology, including assistance and advisory service, to the
4 executive, legislative, and judicial branches. If the department is unable to fulfill a
5 request for service from the legislative or judicial branch, the information technology
6 may be procured by the legislative or judicial branch within the limits of legislative
7 appropriations.
8 7. Shall request and review information, including project startup information
9 summarizing the project description, project objectives, business need or problem,
10 cost-benefit analysis, and project risks and a project closeout information summarizing
11 the project objectives achieved, project budget and schedule variances, and lessons
12 learned, regarding any major information technology project of an executive branch
13 agency. The department shall present the information to the information technology
14 committee on request of the committee.
15 8. May request and review information regarding any information technology project of
16 an executive branch agency with a total cost of between one hundred thousand and
17 five hundred thousand dollars as determined necessary by the department. The
18 department shall present the information to the information technology committee on
19 request of the committee.
20 9. Shall study emerging technology and evaluate its impact on the state's system of
21 information technology.
22 10. Shall develop guidelines for reports to be provided by each agency of the executive,
23 legislative, and judicial branches, excluding the institutions under the control of the
24 board of higher education, on information technology in those entities.
25 11. Shall collaborate with the state board of higher education on guidelines for reports to
26 be provided by institutions under control of the state board of higher education on
27 information technology in those entities.
28 12. Shall perform all other duties necessary to carry out this chapter.
29 13. May provide wide area network services to a state agency, city, county, school district,
30 or other political subdivision of this state. The information technology department may
31 not provide wide area network service to any private, charitable, or nonprofit entity
Page No. 6 23.0017.01000
 Sixty-eighth
Legislative Assembly
1 except the information technology department may continue to provide the wide area
2 network service the department provided to the private, charitable, and nonprofit
3 entities receiving services from the department on January 1, 2003.
4 14. Shall assure proper measures for security, firewalls, and internet protocol addressing
5 at the state's interface with other facilities.
6 15. Notwithstanding subsection 13, may provide wide area network services for a period
7 not to exceed four years to an occupant of a technology park associated with an
8 institution of higher education or to a business located in a business incubator
9 associated with an institution of higher education.
10 16. Shall advise and oversee cybersecurity strategy for all executive branch state
11 agencies, including institutions under the control of the state board of higher
12 education, counties, cities, school districts, or other political subdivisions. For
13 purposes of this subsection, the department shall consult with the attorney general on
14 cybersecurity strategy.
15 17. Shall advise and consult with the legislative and judicial branches regarding
16 cybersecurity strategy.
17 18. Notwithstanding chapter 54-40.2, may enter a memorandum of understanding with
18 other state, local, tribal, or territorial governments of the United States for purposes of
19 ensuring the confidentiality, availability, and integrity of state, local, and tribal
20 information systems and data, including consulting, developing cybersecurity strategy,
21 prevention of cybersecurity incidents, and response strategies to cybersecurity
22 incidents. The department may charge