{"data":{"id":"us-ok/okla.-stat.-tit.-62-62-34.12","jurisdiction":"us-ok","citation":"Okla. Stat. tit. 62, § 62-34.12","heading":"Information Services Division - Powers and duties","body":"A. The Information Services Division of the Office of\n\nManagement and Enterprise Services shall:\n\n1. Coordinate information technology planning through analysis\n\nof the long-term information technology plans for each agency;\n\n2. Develop a statewide information technology plan with annual\n\nmodifications to include, but not be limited to, individual agency\n\nplans and information systems plans for the statewide electronic\n\ninformation technology function;\n\n3. Establish and enforce minimum mandatory standards for:\n\na. information systems planning,\n\nb. systems development methodology,\n\nc. documentation,\n\nd. hardware requirements and compatibility,\n\ne. operating systems compatibility,\n\nf. acquisition of software, hardware and technology-\n\nrelated services,\n\ng. information security and internal controls,\n\nh. data base compatibility,\n\ni. contingency planning and disaster recovery, and\n\nj. imaging systems, copiers, facsimile systems, printers,\n\nscanning systems and any associated supplies.\n\nThe standards shall, upon adoption, be the minimum requirements\n\napplicable to all agencies. These standards shall be compatible\n\nwith the standards established for the Oklahoma Government\n\nTelecommunications Network. Individual agency standards may be more\n\nspecific than statewide requirements but shall in no case be less\n\nthan the minimum mandatory standards. Where standards required of\n\nan individual agency of the state by agencies of the federal\n\ngovernment are more strict than the state minimum standards, such\n\nfederal requirements shall be applicable;\n\n4. Develop and maintain applications for agencies not having\n\nthe capacity to do so;\n\n5. Operate a data service center to provide operations and\n\nhardware support for agencies requiring such services and for\n\nstatewide systems;\n\n6. Maintain a directory of the following which have a value of\n\nFive Hundred Dollars ($500.00) or more: application systems, systems\n\nsoftware, hardware, internal and external information technology,\n\ncommunication or telecommunication equipment owned, leased, or\n\nrented for use in communication services for state government\n\nincluding communication services provided as part of any other total\n\nsystem to be used by the state or any of its agencies, and studies\n\nand training courses in use by all agencies of the state; and\n\nfacilitate the utilization of the resources by any agency having\n\nrequirements which are found to be available within any agency of\n\nthe state;\n\n7. Assist agencies in the acquisition and utilization of\n\ninformation technology systems and hardware to effectuate the\n\nmaximum benefit for the provision of services and accomplishment of\n\nthe duties and responsibilities of agencies of the state;\n\n8. Coordinate for the executive branch of state government\n\nagency information technology activities, encourage joint projects\n\nand common systems, linking of agency systems through the review of\n\nagency plans, review and approval of all statewide contracts for\n\nsoftware, hardware and information technology consulting services\n\nand development of a statewide plan and its integration with the\n\nbudget process to ensure that developments or acquisitions are\n\nconsistent with statewide objectives and that proposed systems are\n\njustified and cost effective;\n\n9. Develop performance reporting guidelines for information\n\ntechnology facilities and conduct an annual review to compare agency\n\nplans and budgets with results and expenditures;\n\n10. Establish operations review procedures for information\n\ntechnology installations operated by agencies of the state for\n\nindependent assessment of productivity, efficiency, cost\n\neffectiveness, and security;\n\n11. Establish data center user charges for billing costs to\n\nagencies based on the use of all resources;\n\n12. Provide system development and consultant support to state\n\nagencies on a contractual, cost reimbursement basis; and\nures for information\n\ntechnology installations operated by agencies of the state for\n\nindependent assessment of productivity, efficiency, cost\n\neffectiveness, and security;\n\n11. Establish data center user charges for billing costs to\n\nagencies based on the use of all resources;\n\n12. Provide system development and consultant support to state\n\nagencies on a contractual, cost reimbursement basis; and\n\n13. In conjunction with the Oklahoma Office of Homeland\n\nSecurity, enforce the minimum information security and internal\n\ncontrol standards established by the Information Services Division.\n\nAn enforcement team consisting of the Chief Information Officer of\n\nthe Information Services Division or a designee, a representative of\n\nthe Oklahoma Office of Homeland Security, and a representative of\n\nthe Oklahoma State Bureau of Investigation shall enforce the minimum\n\ninformation security and internal control standards. If the\n\nenforcement team determines that an agency is not in compliance with\n\nthe minimum information security and internal control standards, the\n\nChief Information Officer shall take immediate action to mitigate\n\nthe noncompliance including the removal of the agency from the\n\ninfrastructure of the state until the agency becomes compliant,\n\ntaking control of the information technology function of the agency\n\nuntil the agency is compliant, and transferring the administration\n\nand management of the information technology function of the agency\n\nto the Information Services Division or another state agency.\n\nB. No agency of the executive branch of the state shall use\n\nstate funds for or enter into any agreement for the acquisition of\n\nany category of computer hardware, software or any contract for\n\ninformation technology or telecommunication services and equipment,\n\nservice costs, maintenance costs, or any other costs or fees\n\nassociated with the acquisition of the services or equipment,\n\nwithout written authorization of the Chief Information Officer or a\n\ndesignee except the following:\n\n1. A purchase less than or equal to Five Thousand Dollars\n\n($5,000.00) if such product is purchased using a state purchase card\n\nand the product is listed on either the Approved Hardware or\n\nApproved Software list located on the Office of Management and\n\nEnterprise Services website;\n\n2. A purchase over Five Thousand Dollars ($5,000.00) and less\n\nthan or equal to Twenty-five Thousand Dollars ($25,000.00) if such\n\nproduct is purchased using a state purchase card, the product is\n\nlisted on an information technology or telecommunications statewide\n\ncontract, and the product is listed on either the Approved Hardware\n\nor Approved Software list located on the Office of Management and\n\nEnterprise Services website; or\n\n3. A purchase of computer hardware or software or any services\n\nrelated to software development, software modifications, or any\n\nother services related to the operation and maintenance of computer\n\nhardware and software or both independently that is made by the\n\nMilitary Department of the State of Oklahoma.\n\nIf written authorization is not obtained prior to incurring an\n\nexpenditure or entering into any agreement as required in this\n\nsubsection or as required in Section 35.4 of this title, the Office\n\nof Management and Enterprise Services may not process any claim\n\nassociated with the expenditure and the provisions of any agreement\n\nshall not be enforceable. The provisions of this subsection shall\n\nnot be applicable to any member of The Oklahoma State System of\n\nHigher Education, any public elementary or secondary schools of the\n\nstate, any technology center school district as defined in Section\n\n14-108 of Title 70 of the Oklahoma Statutes, or CompSource Mutual\n\nInsurance Company.\n\nC. The Chief Information Officer and Information Services\n\nDivision of the Office of Management and Enterprise Services and all\n\nagencies of the executive branch of the state shall not be required\ny public elementary or secondary schools of the\n\nstate, any technology center school district as defined in Section\n\n14-108 of Title 70 of the Oklahoma Statutes, or CompSource Mutual\n\nInsurance Company.\n\nC. The Chief Information Officer and Information Services\n\nDivision of the Office of Management and Enterprise Services and all\n\nagencies of the executive branch of the state shall not be required\n\nto disclose, directly or indirectly, any information of a state\n\nagency which is declared to be confidential or privileged by state\n\nor federal statute or the disclosure of which is restricted by\n\nagreement with the United States or one of its agencies, nor\n\ndisclose information technology system details that may permit the\n\naccess to confidential information or any information affecting\n\npersonal security, personal identity, or physical security of state\n\nassets.","path":["OK Code","Title 62"],"source_url":"https://www.oklegislature.gov/OK_Statutes/CompleteTitles/os62.pdf","current_through":"2026-08-14","vintage":"open-us-law v2026.08, retrieved 2026-09-14","retrieved_at":"2026-09-14T18:32:36Z","sha256":"9912b57485c092a4141a58615d8475daa8f5841e86a44752a57f080704efbe59","source_id":"us-ok","stale":false,"prev":"us-ok/okla.-stat.-tit.-62-62-34.11.9","next":"us-ok/okla.-stat.-tit.-62-62-34.12.1"},"notice":"GroundRules: Original legal text. Not legal advice."}