<?xml version='1.0' encoding='utf-8'?>
<section article="gsf" article_name="State Finance and Procurement" number="3.5-308" title_number="3.5" title_name="Department of Information Technology" subtitle_number="3" subtitle_name="Information Processing">
  <level label="a">
    <text>This section does not apply to a public institution of higher education.</text>
  </level>
  <level label="b">
    <text>Before submitting its information technology project requests, a unit of State government shall submit information in support of the request required by the Secretary for review and determination consistent with § 3.5–301(k) of this subtitle.</text>
  </level>
  <level label="c">
    <text>In reviewing information technology project requests, the Secretary may change a unit’s designation of a major information technology development project.</text>
  </level>
  <level label="d">
    <text>The Secretary shall review and, with the advice of the Secretary of Budget and Management, approve major information technology development projects and specifications for consistency with all statewide plans, policies, and standards, including a systems development life cycle plan.</text>
  </level>
  <level label="e">
    <level label="1">
      <text>Subject to paragraph (2) of this subsection, the Secretary shall be responsible for overseeing the implementation of major information technology development projects, regardless of fund source.</text>
    </level>
    <level label="2">
      <text>As part of the Secretary’s responsibilities under this section, the Secretary shall ensure that no funding is provided for the implementation of a major information technology development project unless:</text>
      <level label="i">
        <text>the Secretary determines that the unit has the internal capacity to adequately support the project, program management, and responsibility over program activities, including:</text>
        <level label="1">
          <text>human capital;</text>
        </level>
        <level label="2">
          <text>subject matter expertise; and</text>
        </level>
        <level label="3">
          <text>technical infrastructure;</text>
        </level>
      </level>
      <level label="ii">
        <text>within 30 days of awarding a contract, the managing unit sends to the Board of Public Works and the Legislative Policy Committee, in accordance with § 2–1257 of the State Government Article, notice that:</text>
        <level label="1">
          <text>identifies the project management team;</text>
        </level>
        <level label="2">
          <text>affirms that the Department has reviewed and approved the contract; and</text>
        </level>
        <level label="3">
          <text>is signed by the head of the unit acknowledging and accepting the accountability for the implementation of the information technology project or product; and</text>
        </level>
      </level>
      <level label="iii">
        <text>while a unit is managing an active project or product, the unit agrees to report to the Department every 3 months on the project status in a manner requested by the Department.</text>
      </level>
    </level>
  </level>
  <level label="f">
    <level label="1">
      <text>With the advice of the Secretary of Budget and Management, expenditures for major information technology development projects shall be subject to the approval of the Secretary who shall approve expenditures only when those projects are consistent with statewide plans, policies, and standards.</text>
    </level>
    <level label="2">
      <level label="i">
        <text>The Secretary shall make a recommendation to the Secretary of Budget and Management to withhold project funds, regardless of fund source, if:</text>
        <level label="1">
          <text>a unit of State government is not consistently reporting on the status of a project or projects to the Department in the form and manner required by the Department; or</text>
        </level>
        <level label="2">
          <text>the Department determines that project implementation issues exist, including project timeline delays, significant cost increases, vendor nonperformance, decreased agency capacity, or other issues that indicate issues of concern that could jeopardize successful implementation.</text>
        </level>
      </level>
      <level label="ii">
        <text>Notwithstanding any other provision of law, and except as provided in subparagraph (iii) of this paragraph, the Secretary of Budget and Management shall withhold any unexpended funds appropriated in a fiscal year for a major information technology development project at the Secretary’s recommendation issued under subparagraph (i) of this paragraph.</text>
      </level>
      <level label="iii">
        <text>The Secretary of Budget and Management may release funds withheld under this paragraph at the direction of the Secretary if the Secretary determines that the issue leading to the initial withholding of funds has been addressed.</text>
      </level>
    </level>
    <level label="3">
      <text>Within 30 days after funding is withheld in accordance with this subsection, the Department shall report on the purpose of the withholding:</text>
      <level label="i">
        <text>to the Governor; and</text>
      </level>
      <level label="ii">
        <text>subject to § 2–1257 of the State Government Article, to:</text>
        <level label="1">
          <text>the Senate Budget and Taxation Committee;</text>
        </level>
        <level label="2">
          <text>the Senate Committee on Education, Energy, and the Environment;</text>
        </level>
        <level label="3">
          <text>the House Appropriations Committee;</text>
        </level>
        <level label="4">
          <text>the House Health and Government Operations Committee; and</text>
        </level>
        <level label="5">
          <text>the Joint Committee on Cybersecurity, Information Technology, and Biotechnology.</text>
        </level>
      </level>
    </level>
    <level label="4">
      <level label="i">
        <text>Subject to subparagraph (ii) of this paragraph:</text>
        <level label="1">
          <text>the Secretary may recommend to the Secretary of Budget and Management that funding withheld under this section be reallocated to other expenses of the Information Technology Investment Fund under § 3.5–309 of this subtitle; and</text>
        </level>
        <level label="2">
          <text>the Secretary of Budget and Management may, at their discretion, follow the Secretary’s recommendation to reallocate funds.</text>
        </level>
      </level>
      <level label="ii">
        <text>If the reallocated funds exceed $500,000, the Secretary, in consultation with the Secretary of Budget and Management, shall submit a proposal to the Legislative Policy Committee for a 60–day review and comment period.</text>
      </level>
    </level>
  </level>
  <level label="g">
    <level label="1">
      <text>The Secretary shall approve funding for major information technology development projects, expedited projects, and other expenditures from the Fund only when:</text>
      <level label="i">
        <text>the major information technology development projects or the expedited projects are in compliance with statewide plans, policies, and standards, as determined by the Secretary; and</text>
      </level>
      <level label="ii">
        <text>the major information technology development projects are supported by an approved systems development life cycle plan.</text>
      </level>
    </level>
    <level label="2">
      <text>An approved systems development life cycle plan shall include submission of:</text>
      <level label="i">
        <text>a project planning request that details initial planning for the project, including:</text>
        <level label="1">
          <text>the project title, appropriation code, and summary;</text>
        </level>
        <level label="2">
          <text>a description of:</text>
        </level>
        <level label="A">
          <text>the business and technology outcomes to be achieved by the project;</text>
        </level>
        <level label="B">
          <text>the features available to the end user on completion, including user acceptance testing and accessibility plans;</text>
        </level>
        <level label="C">
          <text>the potential risks associated with the project;</text>
        </level>
        <level label="D">
          <text>possible alternatives; and</text>
        </level>
        <level label="E">
          <text>the scope and complexity of the project; and</text>
        </level>
        <level label="3">
          <text>an estimate of:</text>
        </level>
        <level label="A">
          <text>the total costs required to complete through planning; and</text>
        </level>
        <level label="B">
          <text>the fund sources available to support planning costs; and</text>
        </level>
      </level>
      <level label="ii">
        <text>a project implementation request to begin full design, development, and implementation of the project after the completion of planning, including:</text>
        <level label="1">
          <text>the project title, appropriation code, and summary;</text>
        </level>
        <level label="2">
          <text>a description of:</text>
        </level>
        <level label="A">
          <text>the business and technology outcomes to be achieved by the project and the metrics by which the success of those outcomes will be measured;</text>
        </level>
        <level label="B">
          <text>the features available to the end user on completion, including user acceptance testing and accessibility plans;</text>
        </level>
        <level label="C">
          <text>the potential risks associated with the project;</text>
        </level>
        <level label="D">
          <text>possible alternatives;</text>
        </level>
        <level label="E">
          <text>the scope and complexity of the project; and</text>
        </level>
        <level label="F">
          <text>how the project meets the goals of the statewide master plan; and</text>
        </level>
        <level label="3">
          <text>an estimate of:</text>
        </level>
        <level label="A">
          <text>the total project cost, by phase; and</text>
        </level>
        <level label="B">
          <text>the fund sources to be utilized.</text>
        </level>
      </level>
    </level>
    <level label="3">
      <text>The Secretary may approve funding incrementally, consistent with the systems development life cycle plan.</text>
    </level>
  </level>
  <level label="h">
    <text>On or before July 1, 2026, the Department shall:</text>
    <level label="1">
      <text>develop standards for units of State government to assist in identifying legacy systems that require modernization projects appropriate to be financed as an expedited project through the Fund;</text>
    </level>
    <level label="2">
      <text>adopt an Information Technology Investment Maturity Model that includes:</text>
      <level label="i">
        <text>criteria to inform and prioritize investment decisions;</text>
      </level>
      <level label="ii">
        <text>processes to develop the information required to evaluate investment proposals against the criteria under item (i) of this item; and</text>
      </level>
      <level label="iii">
        <text>management processes to monitor the implementation of approved modernization projects; and</text>
      </level>
    </level>
    <level label="3">
      <text>develop a State Modernization Plan.</text>
    </level>
  </level>
</section>
