ORS 276A.323
State agency coordination


(1)

As used in this section:

(a)

“Executive department” has the meaning given that term in ORS 174.112 (“Executive department” defined), except that “executive department” does not include:

(A)

The Secretary of State.

(B)

The State Treasurer.

(C)

The Attorney General.

(D)

The Oregon State Lottery.

(E)

Public universities listed in ORS 352.002 (Public universities).

(b)

“State agency” means an agency, as defined in ORS 183.310 (Definitions for chapter), in the executive department.

(2)

All state agencies shall:

(a)

Cooperate with the office of Enterprise Information Services in the implementation of a continuing statewide agency-by-agency risk-based information technology security assessment and remediation program.

(b)

Cooperate in the development of, and follow, the plans, rules, policies and standards adopted by the State Chief Information Officer with regard to the unification of agency information technology security functions in this state.

(c)

Conduct and document the completion of annual information technology security awareness training for all agency employees.

(d)

Report security metrics using methodologies developed by the office of Enterprise Information Services.

(e)

Participate in activities coordinated by the office of Enterprise Information Services in order to better understand and address security incidents and critical cybersecurity threats to the state.

(3)

The State Chief Information Officer shall determine and allocate the costs to state agencies associated with providing information technology services, third-party security evaluations, vulnerability assessments and remediation measures. State agencies shall pay the costs to the State Chief Information Officer in the same manner as the state agency pays other claims. The State Chief Information Officer shall deposit into the State Information Technology Operating Fund established under ORS 276A.209 (State Information Technology Operating Fund) all moneys that the State Chief Information Officer receives from state agencies for purposes of providing information technology services and administering and enforcing the duties, functions and powers under this section. [2017 c.513 §2; 2021 c.17 §3]

Source: Section 276A.323 — State agency coordination, https://www.­oregonlegislature.­gov/bills_laws/ors/ors276A.­html.

276A.200
Legislative findings on information resources
276A.203
State Chief Information Officer
276A.206
Oversight of state information and telecommunications technology by State Chief Information Officer
276A.209
State Information Technology Operating Fund
276A.223
Requirement that state agency or public corporation obtain quality management services when implementing information technology initiative
276A.230
Definitions
276A.233
Information technology portfolio-based management
276A.236
Enterprise information resources management
276A.239
Portfolio-based management of information technology resources for Secretary of State
276A.242
Portfolio-based management of information technology resources for State Treasurer
276A.250
Definitions
276A.253
Oregon transparency website
276A.256
Reports of tax expenditures connected to economic development
276A.259
Transparency Oregon Advisory Commission
276A.262
Transparency Oregon Advisory Commission Fund
276A.270
Definitions
276A.273
Electronic Government Portal Advisory Board
276A.276
Ability to offer government services through portal
276A.300
Information systems security in executive department
276A.303
Information systems security for Secretary of State, State Treasurer and Attorney General
276A.306
Information security incidents and assessments
276A.323
State agency coordination
276A.326
Oregon Cybersecurity Advisory Council
276A.329
Oregon Cybersecurity Center of Excellence
276A.332
Authority of State Chief Information Officer to enter into agreements
276A.335
Moneys from federal government and other sources
276A.350
Definitions
276A.353
Chief Data Officer
276A.356
Open data standard
276A.359
Technical standards manual
276A.362
Release of publishable data on web portal
276A.365
Information management by state agencies
276A.368
Purpose of data
276A.371
Obligations of state agency under public records law
276A.374
Application to Secretary of State and State Treasurer
276A.400
Policy
276A.403
Coordination of telecommunications systems
276A.406
Acquisition of broadband and communications services
276A.409
Use of agency travel and transportation funds for telecommunications services
276A.412
Contracts for telecommunications equipment and services not to exceed 10 years
276A.415
Agreements to fund or acquire telecommunications equipment and services
276A.418
Public contracts for broadband Internet access service
276A.421
Provision of broadband services that compete with services of private telecommunications provider
276A.424
Connecting Oregon Schools Fund
276A.500
Definitions
276A.503
Oregon Geographic Information Council
276A.506
Powers of council
276A.509
Public body duty to share geospatial framework data with council
276A.512
Oregon Geographic Information Council Fund
276A.515
State geographic information officer
Green check means up to date. Up to date