This bill amends Idaho law to update the powers and duties of the Office of Information Technology Services, giving it greater authority to control and coordinate IT equipment purchases across state government departments. The legislation requires the office to conduct technical and financial analyses before approving IT acquisitions, allows for third-party broker assistance under specific ethical guidelines, and exempts smaller purchases under $15,000 from certain procurement rules. Key provisions include mandatory cybersecurity measures like multi-factor authentication for all state systems, requirements for criminal background checks on IT staff in specific roles, and directives to implement cybersecurity training and best practices across all state agencies. The bill also establishes the office's role in overseeing cybersecurity policies, managing federal IT funds, and coordinating public outreach efforts to protect personal information from cyber threats.
H 597 revises Idaho Code to update the powers and duties of the Office of Information Technology Services (OITS), strengthening state IT management and cybersecurity oversight. The bill grants OITS authority to control IT purchases across most state agencies (with exceptions for higher education, legislative/judicial branches, and public safety equipment) and requires agencies to implement cybersecurity training, multifactor authentication for system access, and criminal background checks for IT staff in specific roles like network engineering and security. It also updates OITS's responsibilities to oversee cybersecurity policies, vulnerability testing, and statewide cybersecurity best practices. These changes directly affect all state government departments, institutions, and IT personnel involved in state systems.
