ORS 276A.223
Requirement that state agency or public corporation obtain quality management services when implementing information technology initiative

  • reports
  • exceptions

(1)

As used in this section:

(a)

Intentionally left blank —Ed.

(A)

“Information technology initiative” means a project to develop or provide, with a state contracting agency’s or public corporation’s own personnel and resources, or to obtain by means of a procurement or set of related procurements:
(i)
New hardware, software or services for data processing, office automation or telecommunications;
(ii)
An overhaul, upgrade or replacement of a substantial portion of the hardware or software in an existing data processing, office automation or telecommunications system; or
(iii)
A substantial expansion of existing data processing, office automation or telecommunications services.

(B)

“Information technology initiative” does not include:
(i)
A procurement for preliminary quality assurance services or quality management services;
(ii)
A routine update to or purchase of hardware or software within an existing data processing, office automation or telecommunications system;
(iii)
A renewal of an existing contract for data processing, office automation or telecommunications services under terms and conditions that are substantially the same as in the existing contract; or
(iv)
A replacement of a component of an existing data processing, office automation or telecommunications system that is not essential for the system to function as designed or that occurs at the end of the component’s anticipated life cycle.

(b)

“Preliminary quality assurance services” means a set of services in which a contractor provides an independent and objective review of a state contracting agency’s or a public corporation’s plans, specifications, estimates, documentation, available resources and overall purpose for an information technology initiative, including services in which the contractor evaluates a proposed information technology initiative against applicable quality standards and best practices from private industry and other sources.

(c)

“Procurement” has the meaning given that term in ORS 279A.010 (Definitions for Public Contracting Code).

(d)

Intentionally left blank —Ed.

(A)

“Public corporation” means a corporation:
(i)
The operations of which are subject to control by this state or by an agency or instrumentality of this state, or by officers of this state or of an agency or instrumentality of this state;
(ii)
That is organized, at least in part, to serve a public purpose; and
(iii)
That receives public funds or other support from an entity described in sub-subparagraph (i) of this subparagraph.

(B)

“Public corporation” does not include:
(i)
A person or entity described in ORS 174.108 (Effect of definitions) (3);
(ii)
A city, county, local service district, school district, education service district, community college district or community college service district or a public university listed in ORS 352.002 (Public universities); or
(iii)
An administrative subdivision of an entity described in sub-subparagraph (ii) of this subparagraph.

(e)

“Quality management services” means a set of services in which a contractor provides an independent and objective review and evaluation of a state contracting agency’s, a public corporation’s or another contractor’s performance with respect to an information technology initiative, such as services in which the contractor:

(A)

Identifies quality standards that apply or should apply to the information technology initiative;

(B)

Suggests methods and means by which the state contracting agency, the public corporation or the other contractor may meet quality standards identified in subparagraph (A) of this paragraph;

(C)

Reviews and evaluates the state contracting agency’s, the public corporation’s or the other contractor’s performance regularly as the information technology initiative progresses from start to finish;

(D)

Identifies omissions or gaps in the state contracting agency’s, the public corporation’s or the other contractor’s planning, execution, control, methodology, communication or reporting as the information technology initiative progresses from start to finish;

(E)

Identifies risks in the state contracting agency’s, the public corporation’s or the other contractor’s plans or approach to designing, developing or implementing the information technology initiative and suggests methods to reduce, mitigate or eliminate the risks;

(F)

Assists the state contracting agency or the public corporation in testing or otherwise evaluating the hardware, software or services that are developed, provided or obtained as part of an information technology initiative to determine whether the hardware, software or services conform with the quality standards identified in subparagraph (A) of this paragraph;

(G)

Advises the State Chief Information Officer, the state contracting agency or the public corporation as to whether the hardware, software or services that are developed, provided or obtained as part of an information technology initiative meet the contracting agency’s or the public corporation’s needs, specifications or expectations and otherwise enable the state contracting agency or the public corporation to achieve the objectives for the information technology initiative; or

(H)

Identifies unsatisfactory performance and suggests methods the State Chief Information Officer, the state contracting agency, the public corporation or the other contractor might use to eliminate the causes of unsatisfactory performance.

(f)

“State contracting agency” has the meaning given that term in ORS 279A.010 (Definitions for Public Contracting Code).

(2)

Intentionally left blank —Ed.

(a)

A state contracting agency or a public corporation that implements an information technology initiative shall obtain quality management services from a qualified contractor if the value of the information technology initiative exceeds $5 million, unless the State Chief Information Officer determines that the quality management services are not necessary. The State Chief Information Officer may require quality management services for an information technology initiative the value of which does not exceed $5 million if the information technology initiative meets criteria or standards that the State Chief Information Officer specifies in rule or policy. The State Chief Information Officer not later than December 31 of each year shall submit to the Legislative Fiscal Officer a report that identifies information technology initiatives for which:

(A)

The value exceeds $5 million; and

(B)

The State Chief Information Officer determines that quality management services are not necessary.

(b)

A state contracting agency or public corporation may, subject to ORS 279B.040 (Prohibition on accepting bid or proposal from contractor that advised or assisted contracting agency to develop specifications or solicitation documents), procure preliminary quality assurance services from a contractor if the information technology initiative meets the criteria set forth in paragraph (a) of this subsection or if the state contracting agency or public corporation otherwise believes that the preliminary quality assurance services will enable the contracting agency or public corporation to implement an information technology initiative successfully.

(3)

A state contracting agency or public corporation may not artificially divide or fragment an information technology initiative so as to avoid the application of this section.

(4)

Notwithstanding any procurement authority that a state contracting agency or a public corporation has that is not subject to the authority of the Director of the Oregon Department of Administrative Services or the State Chief Information Officer under ORS 279A.050 (Procurement authority) (2) or (7), the state contracting agency or public corporation is subject to the provisions of subsection (2) of this section and shall consult with and follow the rules, policies and procedures of the State Chief Information Officer in determining the extent of preliminary quality assurance services or quality management services that the state contracting agency or public corporation will require for an information technology initiative.

(5)

Intentionally left blank —Ed.

(a)

If a state contracting agency or a public corporation awards a contract for preliminary quality assurance services or quality management services, the contract must provide that at the same time a contractor provides a preliminary or final report to the contract administrator, the contractor shall also provide a copy of the report to:

(A)

The State Chief Information Officer;

(B)

The Director of the Oregon Department of Administrative Services;

(C)

The Legislative Fiscal Officer; and

(D)

As appropriate for the specific information technology initiative, to:
(i)
The director of the state contracting agency or, if a board or commission sets policy for the state contracting agency, to the board or commission; or
(ii)
The governing body of the public corporation.

(b)

The state contracting agency or public corporation shall provide the contractor with names, addresses and other contact information the contractor needs to comply with paragraph (a) of this subsection.

(6)

This section does not apply to the Secretary of State or the State Treasurer. [Formerly 291.035]

Source: Section 276A.223 — Requirement that state agency or public corporation obtain quality management services when implementing information technology initiative; reports; exceptions, https://www.­oregonlegislature.­gov/bills_laws/ors/ors276A.­html.

276A.200
Legislative findings on information resources
276A.203
State Chief Information Officer
276A.206
Oversight of state information and telecommunications technology by State Chief Information Officer
276A.209
State Information Technology Operating Fund
276A.223
Requirement that state agency or public corporation obtain quality management services when implementing information technology initiative
276A.230
Definitions
276A.233
Information technology portfolio-based management
276A.236
Enterprise information resources management
276A.239
Portfolio-based management of information technology resources for Secretary of State
276A.242
Portfolio-based management of information technology resources for State Treasurer
276A.250
Definitions
276A.253
Oregon transparency website
276A.256
Reports of tax expenditures connected to economic development
276A.259
Transparency Oregon Advisory Commission
276A.262
Transparency Oregon Advisory Commission Fund
276A.270
Definitions
276A.273
Electronic Government Portal Advisory Board
276A.276
Ability to offer government services through portal
276A.300
Information systems security in executive department
276A.303
Information systems security for Secretary of State, State Treasurer and Attorney General
276A.306
Information security incidents and assessments
276A.323
State agency coordination
276A.326
Oregon Cybersecurity Advisory Council
276A.329
Oregon Cybersecurity Center of Excellence
276A.332
Authority of State Chief Information Officer to enter into agreements
276A.335
Moneys from federal government and other sources
276A.350
Definitions
276A.353
Chief Data Officer
276A.356
Open data standard
276A.359
Technical standards manual
276A.362
Release of publishable data on web portal
276A.365
Information management by state agencies
276A.368
Purpose of data
276A.371
Obligations of state agency under public records law
276A.374
Application to Secretary of State and State Treasurer
276A.400
Policy
276A.403
Coordination of telecommunications systems
276A.406
Acquisition of broadband and communications services
276A.409
Use of agency travel and transportation funds for telecommunications services
276A.412
Contracts for telecommunications equipment and services not to exceed 10 years
276A.415
Agreements to fund or acquire telecommunications equipment and services
276A.418
Public contracts for broadband Internet access service
276A.421
Provision of broadband services that compete with services of private telecommunications provider
276A.424
Connecting Oregon Schools Fund
276A.500
Definitions
276A.503
Oregon Geographic Information Council
276A.506
Powers of council
276A.509
Public body duty to share geospatial framework data with council
276A.512
Oregon Geographic Information Council Fund
276A.515
State geographic information officer
Green check means up to date. Up to date