(1) The office is empowered to receive and expend grants, gifts, and bequests, specifically including state and federal funds and other funds available, and to contract with the United States and any other legal entities with respect thereto.

(2) Contributions of advanced technology equipment, grants, gifts, or bequests from private sources, including but not limited to advanced technology companies, individuals, and foundations, may be designated by the office to a specific state entity or may be nondesignated.

(3) The office shall:

(a) (Deleted by amendment, L. 2006, p. 1727, § 5, effective June 6, 2006.)

(b) Develop and encourage a world wide web-based state government and facilitate the dissemination of information onto the web;

(c) Evaluate and streamline systemwide business practices for the purpose of finding methods for the enhanced utilization of technology;

(d) to (f) (Deleted by amendment, L. 2006, p. 1727, § 5, effective June 6, 2006.)

(g) Coordinate with and provide assistance, advice, and expertise in connection with business relationships between state agencies and private sector providers of information technology resources. Such assistance shall include efforts that strengthen and create efficiencies in those business relationships.

(h) Oversee and supervise the maintenance of information, information technology, and the initiation of any information technology updates or projects for state agencies;

(i) Initiate or approve all procurements of information technology resources, enterprise facilities, and any goods or services related to such procurements for state agencies and enter into any agreement, contract, or enterprise agreement in connection with such procurements on behalf of a state agency or agencies;

(j) Provide information and expertise, to the extent possible, regarding interoperable and emergency communications planning, technology, training, and funding opportunities to state, regional, tribal, and local agencies and emergency personnel and all other stakeholders, including but not limited to public, private, and nongovernmental organizations;

(k) Develop a comprehensive risk assessment that will be applied to every new information technology project to assess risk levels related to the project and determine whether the project should be classified as a major information technology project;

(l) Assist the joint technology committee as necessary to facilitate the committee's oversight of the office; and

(m) Establish, maintain, and keep a separate inventory of information technology equipment valued in excess of one hundred thousand dollars owned by or held in trust for every state agency.

(3.5) Repealed.

(4) (a) The office shall establish policies and procedures for acceptable project plans, project budgets, and feasibility studies for projects of all sizes, including major information technology projects.

(b) (Deleted by amendment, L. 2008, p. 1115, § 4, effective May 22, 2008.)

(c) As part of any major information technology project by a state agency, classified as such according to a comprehensive risk assessment performed by the office, the project plan at a minimum shall include:

(I) The identification of a project manager;

(II) A business case for the project that is in alignment with the strategic goals of the state agency;

(III) Business requirements for the project developed in collaboration with the state agency and end users;

(IV) Information security requirements and best practices;

(V) A disaster recovery plan;

(VI) Consideration of and inclusion in the business continuity plan of the state agency;

(VII) Independent verification and validation of the project;

(VIII) A funding strategy for the ongoing maintenance and eventual disposal of the information technology system; and

(IX) A planning and analysis function to be performed by the office to ensure that the state agency's desired major information technology project solution is in accordance with the office's technology standards and to ensure that the scope and budget of the major information technology project are vetted by the office.

(d) In connection with any major information technology project that it plans to undertake, a state agency shall:

(I) Consult with the office on the development of the project plan for any major information technology project;

(II) Submit and obtain approval from the office of the project plan for any major information technology project before commencing work on the project;

(III) (A) Consult with and obtain approval from the office of significant changes to the plan or budget of any major information technology project.

(B) As used in this subparagraph (III), "significant changes" means the removal of, or any additions or substantial changes to, any of the project plan's components listed in paragraph (c) of this subsection (4).

(IV) Consult with and obtain approval from the office for changes to the funding strategy for the ongoing maintenance and eventual disposal of a major information technology system.

(4.5) On or before December 1, 2018, the office shall establish policies and procedures regarding a vendor selection standard to be used in selecting a vendor for any major information technology project classified as such by the office. The vendor selection standard shall include a process for resolving differences of opinion between the office and the state agency in the vendor selection for any major information technology project.

(5) to (7) (Deleted by amendment, L. 2008, p. 1115, § 4, effective May 22, 2008.)

(8) On or before September 1, 2009, and on or before September 1 each year thereafter, the chief information officer shall report to the state, veterans, and military affairs committees of the senate and house of representatives, or any successor committees, to the joint technology committee, and to the joint budget committee the following information for each emergency acquisition or purchase of information technology resources made in the preceding fiscal year:

(a) The information technology resources purchased or acquired;

(b) The amount of such purchase or acquisition; and

(c) The emergency serving as the basis for such purchase or acquisition.

(9) State agencies shall cooperate with the chief information officer and office in developing and implementing processes for the sharing of data and information with the office and between state agencies. The office shall determine and implement statewide efforts to standardize information technology resources to the extent possible and shall determine the ownership of information technology resources among state agencies.

(10) Repealed.

(11) (a) By November 1, 2010, the office shall conduct a feasibility and requirements study to determine the cost to build an electronic budgeting system for the state.

(b) The electronic budgeting system should, at minimum:

(I) Allow access by the principal departments of the executive branch of state government, as specified in section 24-1-110, the legislative branch agencies, the judicial department, the office of state public defender created in section 21-1-101, C.R.S., the office of alternate defense counsel created in section 21-2-101, C.R.S., the independent ethics commission established in section 24-18.5-101 (2)(a), the office of the child's representative created in section 13-91-104, C.R.S., the office of the child protection ombudsman created in section 19-3.3-102, C.R.S., the office of state planning and budgeting, and the joint budget committee staff;

(II) Allow for the confidential development of the governor's annual budget request and the annual budget requests of the legislative branch agencies, the judicial department, the office of state public defender created in section 21-1-101, C.R.S., the office of alternate defense counsel created in section 21-2-101, C.R.S., the independent ethics commission established in section 24-18.5-101 (2)(a), the office of the child's representative created in section 13-91-104, C.R.S., and the office of the child protection ombudsman created in section 19-3.3-102, C.R.S.;

(III) Allow for the confidential electronic communication of budget requests from each principal department of the executive branch of state government to the office of state planning and budgeting;

(IV) Allow for the electronic communication of the governor's annual budget request and the annual budget requests of the legislative branch agencies, the judicial department, the office of state public defender created in section 21-1-101, C.R.S., the office of alternate defense counsel created in section 21-2-101, C.R.S., the independent ethics commission established in section 24-18.5-101 (2)(a), the office of the child's representative created in section 13-91-104, C.R.S., and the office of the child protection ombudsman created in section 19-3.3-102, C.R.S., to the joint budget committee staff;

(V) Allow the office of state planning and budgeting to confidentially edit and finalize the budget requests of the principal departments of the executive branch of state government;

(VI) Allow the joint budget committee staff to view the final version of the governor's annual budget requests and the budget requests of the legislative branch agencies, the judicial department, the office of state public defender created in section 21-1-101, C.R.S., the office of alternate defense counsel created in section 21-2-101, C.R.S., the independent ethics commission established in section 24-18.5-101 (2)(a), the office of the child's representative created in section 13-91-104, C.R.S., and the office of the child protection ombudsman created in section 19-3.3-102, C.R.S.;

(VII) Include security features that lock certain users from accessing the system at certain points during the budget preparation cycle;

(VIII) Allow the joint budget committee staff to use the system to track supplemental appropriation bills, the annual general appropriation act, and any substantive budget legislation being considered by the general assembly; and

(IX) Allow the office of state planning and budgeting to use the system to track supplemental appropriation bills, the annual general appropriation act, and any substantive budget legislation being considered for signature by the governor.

(c) The feasibility and requirements study should also assess the cost and feasibility to implement the following potential system components:

(I) A web-based interface that will allow the principal departments of the executive branch of state government to upload and submit budget documents and requests to the office of state planning and budgeting;

(II) A web-based interface that will allow the legislative branch agencies, the judicial department, the office of state public defender created in section 21-1-101, C.R.S., the office of alternate defense counsel created in section 21-2-101, C.R.S., the independent ethics commission established in section 24-18.5-101 (2)(a), the office of the child's representative created in section 13-91-104, C.R.S., and the office of the child protection ombudsman created in section 19-3.3-102, C.R.S., to upload and submit budget documents and requests to the joint budget committee staff;

(III) The ability to produce a draft and final annual general appropriation act by the joint budget committee staff;

(IV) Compatibility with the joint budget committee's current budget preparation system; and

(V) Potential incorporation of or interaction with other state human resources and financial systems for data collection and tracking, including but not limited to the Colorado financial reporting system.

(d) The office shall provide a copy of its feasibility and requirements study to the joint budget committee no later than November 15, 2010. The office shall make a request for funding to the joint budget committee, if necessary, by November 1, 2010.

(12) In conjunction with the efforts of the office of the chief information security officer regarding cyber coding cryptology for state records pursuant to section 24-37.5-407, the office shall consider the annual metrices created pursuant to section 24-37.5-407 (3) to recommend programs, contracts, and upgrades of data systems that have good cost-benefit potential or return on investment.

(13) Beginning on the effective date of this subsection (13), in the administration of any new major information technology project, the office, in conjunction with the state agency with which it is working, shall evaluate the potential use of blockchain and distributed ledger technologies as part of the project.

(14) The office shall conduct an assessment and bring recommendations for distributed ledger or blockchain implementations to the joint technology committee of the general assembly. The study must produce recommendations of potential use cases where blockchain or distributed ledger technologies can be implemented inside of state technology solutions.