Advanced Communications and Information Technology - House

All right please identify yourself. All right Representative makes So colleagues first thing we need to do is I have an amendment to a House bill fifteen fourteen it should be in front of you my bill my amendments so I'm asking is it from the from we can to go ahead and adopt the amendment and then I'll just speak to the amendment as part of the whole bill so unless there's any questions Mister maestro make a motion if you pass on the amendment. Hey we have a motion of do pass on the minute. Thank. All those in favor say aye. All right you may proceed with your your bill bill as amended all right thank you Mr so calling what this bill does is it stems from a issue that all legislative audit brought to me there was a Shares office that a contract with a third party to provide data hosting services for them at the conclusion of that contract the data which belong to the sheriff's department was not returned and this company held that data essentially hostage ransom until the sheriff's department had paid for the get their own data back so what this bill does is it tries to address that issue what it says is that at the end of a contract that the data must be returned to the public entity in a readable format and that the data that they're copy that they have on their servers they have sixty days to destroy that data unless there is a contractual agreement between the public entity and the data company for them to keep the data and then it lays out how long they keep the data what they can use the data for and for what length of time so this that's essentially what the bill does And and I'll be open to any questions. Hey are there any questions by the committee. All right is there anyone in the audience who would like to speak for or against the bill. All right represented luncheon and the only reason I can see someone not returning it is if they had paid for it so this is not a contractual agreement that's been. There's a we're not entering in the middle the contractual agreement where someone hasn't paid for their services correct. You're talking about where the public entity is not paying right no they shouldn't cover that amount correct corporation. Your. What makes you the correct information here what Mr Coles. Okay thank general could you guys please identify yourself for the record. David Coles legislative audit no ma'am it. What this is really intended for was when a contract is terminated. So there's you know there's entities that use software as a service where data can be backed up and then there's entities that use a backup service when those contracts expire terminate the the data needs to be filtered back down to the entity whether it be of the political subdivision or state agency kept and still not cap and sold we've had you know there's other incidences where we've had a company hold data that you know if they were using as a back up service and that data lived on those servers once contract expired in order to get that data back down they had to pay in some cases on a reasonable sum of money to get that that data return and according to state law you know it's a strategic asset data as a strategic asset for the state so we're just trying to make sure it's affected us in audit issues before we couldn't get data on it so that's what we felt it was important to bring these to Representative Meeks I think it's a good bill I'm just wondering why that wasn't in the contracts as well as being turned so sometimes the you know. Various points of that can be in the contract in you know what we hope that you would spell it out of the contract but this this bill would be a gap filler for those issues that are not contractually agreed upon because sometimes you know like with the larger agencies they've got the knowledge man power to make sure that the stipulation for in the contract will ensure you know your local library or your local sheriff's department they may not have the resources to make sure those items are in there so that's what this is to try to. Make sure to create those guarantees that that these issues are covered it's a new future for all of us yes thank you. Are there any other questions by members and represented Lundstrum sorry about that. All right anybody again in the audience would like to speak for against the bill. Presenter makes would you like close your bill clothes and make a motion to pass okay B. two okay thanks very much we have a motion Is do pass as amended. All those in favor say aye. Any post. Congradulations represent makes you pastor bill. Okay all right thank you colleagues of the second on the agenda house bill sixteen hundreds what I'm trying to do with that it's a dig once policy the idea behind this is when a the department of transportation is doing major road construction in the process of doing that construction that they would develop a policy to lake caught empty conduit pipe that could then be used by telecommunications companies to deploy five across the state this whole lot cheaper if they've already got the ground they got dug up for them to lay the pipe and then it is for a public entity or the these companies come behind and dig up another pipe again so that that's what that one does our daughters kindest still looking and studying it to make sure that we've got all the I's cross the tease dot it so we're gonna we're gonna pass over that for the next also the last item on our agenda today is I've asked Mr Askins to come and to introduce himself to the committee is the new director of our department of information systems and the I. **** the state entity that we work with the most so I've asked him just to I said introduce himself and talk about his vision for the department and some of the things are working on over there so with that Mr Askins will watch introduce yourself and then you are. Ready to go thank you. I will be brief because I'm keenly aware that I'm standing between you and launch so I'm Jonathan Askins and I am the new director as Representative makes just introduced me I I come from the private sector I have a little bit of public sector experience during Huckabee administration it a ETC by the come from the private sector most recently axiom corporation so. I I want to make sure that I extend to you an invitation if any of you have any specific questions if any of you want to just visit about D. I. S. and and what we're doing Representative cars already taken me up on that invitation in fact we're working on getting your freshman class of the the freshman basically at the tour of the data center west so so mother was always open that's one of the first things I told my staff is my door is always open feel free to come in just you know I'm I'm very open as far as being Frank and letting folks know kind of where things stand and Transparency so I extend that invitation to yes ma'am. All members of this committee would be allowed to go on that tour because I've never seen it myself certainly certainly the one thing I think will have to work through is from social distance distancing standpoint we would need to work through that so let me visit with my staff about I just get with you represented makes and like to arrange that that would be just fine yes ma'am thank you. So. we just kind of quickly give you brief. synopsis of the things that I'm working on this year and and I will say this calendar year and in terms of what I would call the big rocks the DIS is focused on. Number one is cyber security I think everyone understands the importance of cybersecurity in keeping our data and our networks in our cities in our universities protected to that end a week ago I just was we were able to hire the deputy says so at axiom for the last twenty years so I was very pleased to be able to hire someone of that caliber to actually come in and help mentor our folks as we continue to grow in this world of cyber security and what keeps me up at night because I know that the bad guys get smarter and smarter every day and we've got to to work hard just to stay up with them are agency has the ability to create policy around our networks we have not done that recently but I will let you know that through working with secretary Fincher and chief purpose we have introduced seven new policies this week that we're rolling out to the CIO's we've visited with all the various CIO's to make sure that that didn't create heartburn and that they can actually begin to meet these requirements so Mr Cole's can have something to actually audit against so we are working on those policies we have ten additional that we are working internally right now that we expect to roll out so I would expect is north of twenty policies new policies around security to be rolled out here in the next that's a three of three to four months I've asked my sister Nolan weather would to create for us a three year plan in terms of cyber security let's say three years those those dates are going to be have to be hard loose instead of hard and fast because as we begin to look at faces and areas that we want to control that needs to be somewhat fluid because some of the areas that we may be focused on another area may capture our attention very quickly so I'm asking to focus in terms of faces and and instead of hard and fast date and because just of re prioritization so it is a three year plan because we're trying to look out from from that perspective thank out that far however those phases could be adjusted based on the need of of the day. So that's from a soup cyber security standpoint and again I'll be happy to visit with any of you to talk about some of those initiatives the secondary that we're working on is what we call the statewide longitudinal data system you guys may have heard about it from a ready for life perspective what we are focused on now is the ability to look at our citizens and be able to understand the various touch points that they have across the state are we doing what are we doing a good enough job from a standpoint of let's just take education is or or or we focused in the areas in education or these folks then taking jobs or they taken programs that we were hopefully working from from an education standpoint so what we're trying to do is make sure that we have all the touch points across our state you know integrated from a standpoint of when there is a need to share data we wanna make sure I'm very clear the agency still have their autonomous missions and we're not we're not in the business of getting into the agency's mission however there is a need often to share data across those various agencies what we want to do is to be able to facilitate that in a secure privacy ethical manner so therefore we can to get the benefit both agencies can get the benefit of that data sharing and then we're we're making sure that we're covered from you know protecting someone's privacy making sure that we're doing things and ethical matter and certainly making sure that we're doing and secure manner so we are focused heavily on our statewide longitudinal data system you will hear more about that is we do on but it is a program that I think will be of the major benefit to the state and certainly a major benefit to the agencies as as we begin to. Two on tap or under cover the benefits that data sharing between various agencies can bring to our to our citizens just from a delivery or program standpoint and then naturally everyone will gravitate toward there there could be some cost savings as we begin to a look at perhaps the duplicate types of payments are duplicate things and even fraudulent but you know from a focus standpoint just think about the ability to deliver goods and services and products and services and a much more efficient manner so that's of the I would say the second big rock that we are focused on and then the third area is our data center optimization we are actually going through an optimization project right now it's a matter of fact I I left meetings with my team we are diving through getting into the weeds I could if you're having problems sleeping I can send you these documents you can read those at night but we are diving into the weeds now in terms of understanding what is going to take to migrate and modernize and and begin to put a. should I say a plan and a timeline together for that actual migration many of our servers many of our equipment they're they're they're badly in need of modernization so we are going through that process now making sure that we have dotted our I's crossed our teas and begin to make that migration I think the it will be a it will be of a major benefit to the state from a standpoint of some of the things that we have discovered already from a code standpoint just the strain that all of the additional remote type of logging in that kind of thing just that kind of strain is put some strain on our systems and so it's uncovered that we we do need to modernize so we're in the process right now of being able to do that I think that's enough. For for twenty twenty one but the that's what we're focused on and again a Representative makes is often as you need me to come and give an update I will be happy to do that if any of you want to reach me just give my office a call or if you're here in this building you want to just come down to force and step in feel free to do that my office is wide open and we can answer any of your questions so with that. Hopefully I can let you guys get to launch says god we have any questions anyone. Okay saying none of Director we appreciate you being here and not in a very encouraged by what I've been here and there and they were looking forward to working with you in the future thank you. All right colleagues are having