MCA Chapter 53

MCA Chapter 53
in effect

Miss. Code Ann. § 25-53-1 Establishment of department; declaration of purposes [Last paragraph repealed effective July 1, 2020].

The Legislature recognizes that in order for the State of Mississippi to receive the maximum use and benefit from information technology and services now in operation or which will in the future be placed in operation, there should be full cooperation and cohesive planning and effort by and between the several state agencies and that it is the responsibility of the Legislature to provide statutory authority therefor. The Legislature, therefore, declares and determines that for these and other related purposes there is hereby established an agency of state government to be known as the Mississippi Department of Information Technology Services (MDITS). The Legislature further declares that the Mississippi Department of Information Technology Services (MDITS) shall provide statewide services that facilitate cost-effective information processing and telecommunication solutions. State agencies shall work in full cooperation with the board of MDITS to identify opportunities to minimize duplication, reduce costs and improve the efficiency of providing common technology services across agency boundaries. The provisions of this chapter shall not apply to the Department of Human Services for a period of three (3) years beginning July 1, 2017. The provisions of this chapter shall not apply to the Department of Child Protection Services for a period of three (3) years beginning July 1, 2017. Notwithstanding the exemption of the Department of Human Services and the Department of Child Protection Services from the provisions of this section, before the Department of Human Services or the Department of Child Protection Services may take an action that would otherwise be subject to the provisions of this section, the department(s) shall give notice of the proposed action to the MDITS for any recommendations by the MDITS. Upon receipt of the notice, the MDITS shall post the notice on its website and on the procurement portal website established by Sections 25-53-151 and 27-104-165. If the MDITS does not respond to the department(s) within seven (7) calendar days after receiving the notice, the department(s) may take the proposed action. If the MDITS responds to the department(s) within seven (7) calendar days, then the MDITS has seven (7) calendar days from the date of its initial response to provide any additional recommendations. After the end of the second seven-day period, the department(s) may take the proposed action. The MDITS is not authorized to disapprove any proposed actions that would otherwise be subject to the provisions of this section. This paragraph shall stand repealed on July 1, 2020.

Miss. Code Ann. § 25-53-3 Definitions.

Whenever the term “Central Data Processing Authority” or the term “authority,” when referring to the Central Data Processing Authority, is used in any law, rule, regulation, document or elsewhere, it shall be construed to mean the Mississippi Department of Information Technology Services. For the purposes of this chapter the following terms shall have the meanings ascribed in this section unless the context otherwise requires: “Central Data Processing Authority” and “CDPA” mean “Mississippi Department of Information Technology Services (MDITS)” and the term “authority” means “board of the MDITS.” “Bureau of Systems Policy and Planning,” “Bureau of Telecommunications,” “Bureau of Central Data Processing” and “bureau” mean “Mississippi Department of Information Technology Services.” “Computer equipment or services” means any information technology, computer or computer related telecommunications equipment, electronic word processing and office systems, or services utilized in connection therewith, including, but not limited to, all phases of computer software and consulting services, and insurance on all state-owned computer equipment. “Acquisition” of computer or telecommunications equipment or services means the purchase, lease, rental, or acquisition in any other manner of any such computer or telecommunications equipment or services. “Agency” means and includes all the various state agencies, officers, departments, boards, commissions, offices and institutions of the state. “Governing authority” means boards of supervisors, governing boards of all school districts, all boards of directors of public water supply districts, boards of directors of master public water supply districts, municipal public utility commissions, governing authorities of all municipalities, port authorities, commissioners and boards of trustees of any public hospitals and any political subdivision of the state supported wholly or in part by public funds of the state or political subdivisions thereof. “Bid” means any of the valid source selection techniques and competitive procurement methods appropriate to information technology procurement in the public sector, including, but not limited to, competitive sealed bidding, competitive sealed proposals, simplified small purchase procedures, sole source procurements, and emergency procurements. “Telecommunications transmission facility” means any transmission medium, switch, instrument, inside wiring system or other facility which is used, in whole or part, to provide any transmission. “Equipment support contract” means a contract which covers a single, specific class or classes of telecommunications equipment or service and all features associated with that class, through which state agencies may purchase or lease the item of equipment or service specified by issuing a purchase order under the terms of the contract without the necessity of further competitive bidding. “Inside wiring system” means any wiring which: Directly or indirectly, interconnects any terminal equipment with any other terminal equipment or with any regulated facility or common carrier services; and Is located at the premises of the customer and is not inside any terminal equipment. “Procurement” means the selling, buying, purchasing, renting, leasing or otherwise obtaining telecommunications equipment, system or related services, as well as activities engaged in, resulting in or expected to result in selling, buying, purchasing, renting, leasing or otherwise obtaining telecommunications equipment. “Telecommunications equipment, systems, related services” are limited to the equipment and means to provide: Telecommunications transmission facilities. Telephone systems, including voice processing systems. Facsimile systems. Radio paging services. Mobile telephone services, including cellular mobile telephone service. Intercom and paging systems. Video teleconferencing systems. Personal communications networks and services. Any and all systems based on emerging and future telecommunications technologies relative to (i) through (viii) above. “Telecommunications system lease contract” means a contract between a supplier of telecommunications systems, including equipment and related services, and the Mississippi Department of Information Technology Services through which telecommunications systems, including equipment and related services, may be leased for a term which shall not exceed sixty (60) months for a system lease valued less than One Million Dollars ($1,000,000.00) and shall not exceed one hundred twenty (120) months for a system lease valued One Million Dollars ($1,000,000.00) or more. “Tariffed or regulated service” means telecommunications service offered by common carriers and subject to control by the Mississippi Public Service Commission or the Federal Communications Commission. “State Data Center” means one or more facilities operated by the Mississippi Department of Information Technology Services to provide information technology resources requiring enterprise computing resources or any other centrally managed information resources.

Miss. Code Ann. § 25-53-5 Powers, duties and responsibilities; funding of agency expenses. [Subparagraph (a)(ii) repealed effective July 1, 2020].

The authority shall have the following powers, duties, and responsibilities: (i) The authority shall provide for the development of plans for the efficient acquisition and utilization of computer equipment and services by all agencies of state government, and provide for their implementation. In so doing, the authority may use the MDITS’ staff, at the discretion of the executive director of the authority, or the authority may contract for the services of qualified consulting firms in the field of information technology and utilize the service of such consultants as may be necessary for such purposes. Pursuant to Section 25-53-1, the provisions of this section shall not apply to the Department of Human Services for a period of three (3) years beginning on July 1, 2017. Pursuant to Section 25-53-1, the provisions of this section shall not apply to the Department of Child Protection Services for a period of three (3) years beginning July 1, 2017. Notwithstanding the exemption of the Department of Human Services and the Department of Child Protection Services from the provisions of this section, before the Department of Human Services or the Department of Child Protection Services may take an action that would otherwise be subject to the provisions of this section, the department(s) shall give notice of the proposed action to the MDITS for any recommendations by the MDITS. Upon receipt of the notice, the MDITS shall post the notice on its website and on the procurement portal website established by Sections 25-53-151 and 27-104-165. If the MDITS does not respond to the department(s) within seven (7) calendar days after receiving the notice, the department(s) may take the proposed action. If the MDITS responds to the department(s) within seven (7) calendar days, then the MDITS has seven (7) calendar days from the date of its initial response to provide any additional recommendations. After the end of the second seven-day period, the department(s) may take the proposed action. The MDITS is not authorized to disapprove any proposed actions that would otherwise be subject to the provisions of this section. This subparagraph (ii) shall stand repealed on July 1, 2020. The authority shall immediately institute procedures for carrying out the purposes of this chapter and supervise the efficient execution of the powers and duties of the office of executive director of the authority. In the execution of its functions under this chapter, the authority shall maintain as a paramount consideration the successful internal organization and operation of the several agencies so that efficiency existing therein shall not be adversely affected or impaired. In executing its functions in relation to the institutions of higher learning and junior colleges in the state, the authority shall take into consideration the special needs of such institutions in relation to the fields of teaching and scientific research. Title of whatever nature of all computer equipment now vested in any agency of the State of Mississippi is hereby vested in the authority, and no such equipment shall be disposed of in any manner except in accordance with the direction of the authority or under the provisions of such rules and regulations as may hereafter be adopted by the authority in relation thereto. The authority shall adopt rules, regulations, and procedures governing the acquisition of computer and telecommunications equipment and services which shall, to the fullest extent practicable, insure the maximum of competition between all manufacturers of supplies or equipment or services. In the writing of specifications, in the making of contracts relating to the acquisition of such equipment and services, and in the performance of its other duties the authority shall provide for the maximum compatibility of all information systems hereafter installed or utilized by all state agencies and may require the use of common computer languages where necessary to accomplish the purposes of this chapter. The authority may establish by regulation and charge reasonable fees on a nondiscriminatory basis for the furnishing to bidders of copies of bid specifications and other documents issued by the authority. The authority shall adopt rules and regulations governing the sharing with, or the sale or lease of information technology services to any nonstate agency or person. Such regulations shall provide that any such sharing, sale or lease shall be restricted in that same shall be accomplished only where such services are not readily available otherwise within the state, and then only at a charge to the user not less than the prevailing rate of charge for similar services by private enterprise within this state. The authority may, in its discretion, establish a special technical advisory committee or committees to study and make recommendations on technology matters within the competence of the authority as the authority may see fit. Persons serving on the Information Resource Council, its task forces, or any such technical advisory committees shall be entitled to receive their actual and necessary expenses actually incurred in the performance of such duties, together with mileage as provided by law for state employees, provided the same has been authorized by a resolution duly adopted by the authority and entered on its minutes prior to the performance of such duties. The authority may provide for the development and require the adoption of standardized computer programs and may provide for the dissemination of information to and the establishment of training programs for the personnel of the various information technology centers of state agencies and personnel of the agencies utilizing the services thereof. The authority shall adopt reasonable rules and regulations requiring the reporting to the authority through the office of executive director of such information as may be required for carrying out the purposes of this chapter and may also establish such reasonable procedures to be followed in the presentation of bills for payment under the terms of all contracts for the acquisition of computer equipment and services now or hereafter in force as may be required by the authority or by the executive director in the execution of their powers and duties. The authority shall require such adequate documentation of information technology procedures utilized by the various state agencies and may require the establishment of such organizational structures within state agencies relating to information technology operations as may be necessary to effectuate the purposes of this chapter. The authority may adopt such further reasonable rules and regulations as may be necessary to fully implement the purposes of this chapter. All rules and regulations adopted by the authority shall be published and disseminated in readily accessible form to all affected state agencies, and to all current suppliers of computer equipment and services to the state, and to all prospective suppliers requesting the same. Such rules and regulations shall be kept current, be periodically revised, and copies thereof shall be available at all times for inspection by the public at reasonable hours in the offices of the authority. Whenever possible no rule, regulation or any proposed amendment to such rules and regulations shall be finally adopted or enforced until copies of the proposed rules and regulations have been furnished to all interested parties for their comment and suggestions. The authority shall establish rules and regulations which shall provide for the submission of all contracts proposed to be executed by the executive director for computer equipment or services to the authority for approval before final execution, and the authority may provide that such contracts involving the expenditure of less than such specified amount as may be established by the authority may be finally executed by the executive director without first obtaining such approval by the authority. The authority is authorized to purchase, lease, or rent computer equipment or services and to operate that equipment and use those services in providing services to one or more state agencies when in its opinion such operation will provide maximum efficiency and economy in the functions of any such agency or agencies. Upon the request of the governing body of a political subdivision or instrumentality, the authority shall assist the political subdivision or instrumentality in its development of plans for the efficient acquisition and utilization of computer equipment and services. An appropriate fee shall be charged the political subdivision by the authority for such assistance. The authority shall adopt rules and regulations governing the protest procedures to be followed by any actual or prospective bidder, offerer or contractor who is aggrieved in connection with the solicitation or award of a contract for the acquisition of computer equipment or services. Such rules and regulations shall prescribe the manner, time and procedure for making protests and may provide that a protest not timely filed shall be summarily denied. The authority may require the protesting party, at the time of filing the protest, to post a bond, payable to the state, in an amount that the authority determines sufficient to cover any expense or loss incurred by the state, the authority or any state agency as a result of the protest if the protest subsequently is determined by a court of competent jurisdiction to have been filed without any substantial basis or reasonable expectation to believe that the protest was meritorious; however, in no event may the amount of the bond required exceed a reasonable estimate of the total project cost. The authority, in its discretion, also may prohibit any prospective bidder, offerer or contractor who is a party to any litigation involving any such contract with the state, the authority or any agency of the state to participate in any other such bid, offer or contract, or to be awarded any such contract, during the pendency of the litigation. The authority shall make a report in writing to the Legislature each year in the month of January. Such report shall contain a full and detailed account of the work of the authority for the preceding year as specified in Section 25-53-29(3). All acquisitions of computer equipment and services involving the expenditure of funds in excess of the dollar amount established in Section 31-7-13(c), or rentals or leases in excess of the dollar amount established in Section 31-7-13(c) for the term of the contract, shall be based upon competitive and open specifications, and contracts therefor shall be entered into only after advertisements for bids are published in one or more daily newspapers having a general circulation in the state not less than fourteen (14) days prior to receiving sealed bids therefor. The authority may reserve the right to reject any or all bids, and if all bids are rejected, the authority may negotiate a contract within the limitations of the specifications so long as the terms of any such negotiated contract are equal to or better than the comparable terms submitted by the lowest and best bidder, and so long as the total cost to the State of Mississippi does not exceed the lowest bid. If the authority accepts one (1) of such bids, it shall be that which is the lowest and best. When applicable, the authority may procure equipment, systems and related services in accordance with the law or regulations, or both, which govern the Bureau of Purchasing of the Office of General Services or which govern the Mississippi Department of Information Technology Services procurement of telecommunications equipment, software and services. The authority is authorized to purchase, lease, or rent information technology and services for the purpose of establishing pilot projects to investigate emerging technologies. These acquisitions shall be limited to new technologies and shall be limited to an amount set by annual appropriation of the Legislature. These acquisitions shall be exempt from the advertising and bidding requirement. All fees collected by the Mississippi Department of Information Technology Services shall be deposited into the Mississippi Department of Information Technology Services Revolving Fund unless otherwise specified by the Legislature. The authority shall work closely with the council to bring about effective coordination of policies, standards and procedures relating to procurement of remote sensing and geographic information systems (GIS) resources. In addition, the authority is responsible for development, operation and maintenance of a delivery system infrastructure for geographic information systems data. The authority shall provide a warehouse for Mississippi’s geographic information systems data. The authority shall manage one or more State Data Centers to provide information technology services on a cost-sharing basis. In determining the appropriate services to be provided through the State Data Center, the authority should consider those services that: Result in savings to the state as a whole; Improve and enhance the security and reliability of the state’s information and business systems; and Optimize the efficient use of the state’s information technology assets, including, but not limited to, promoting partnerships with the state institutions of higher learning and community colleges to capitalize on advanced information technology resources. The authority shall increase federal participation in the cost of the State Data Center to the extent provided by law and its shared technology infrastructure through providing such shared services to agencies that receive federal funds. With regard to state institutions of higher learning and community colleges, the authority may provide shared services when mutually agreeable, following a determination by both the authority and the Board of Trustees of State Institutions of Higher Learning or the Mississippi Community College Board, as the case may be, that the sharing of services is mutually beneficial. The authority, in its discretion, may require new or replacement agency business applications to be hosted at the State Data Center. With regard to state institutions of higher learning and community colleges, the authority and the Board of Trustees of State Institutions of Higher Learning or the Mississippi Community College Board, as the case may be, may agree that institutions of higher learning or community colleges may utilize business applications that are hosted at the State Data Center, following a determination by both the authority and the applicable board that the hosting of those applications is mutually beneficial. In addition, the authority may establish partnerships to capitalize on the advanced technology resources of the Board of Trustees of State Institutions of Higher Learning or the Mississippi Community College Board, following a determination by both the authority and the applicable board that such a partnership is mutually beneficial. The authority shall provide a periodic update regarding reform-based information technology initiatives to the Chairmen of the House and Senate Accountability, Efficiency and Transparency Committees. From and after July 1, 2018, the expenses of this agency shall be defrayed by appropriation from the State General Fund. In addition, in order to receive the maximum use and benefit from information technology and services, expenses for the provision of statewide shared services that facilitate cost-effective information processing and telecommunication solutions shall be defrayed by pass-through funding and shall be deposited into the Mississippi Department of Information Technology Services Revolving Fund unless otherwise specified by the Legislature. These funds shall only be utilized to pay the actual costs incurred by the Mississippi Department of Information Technology Services for providing these shared services to state agencies. Furthermore, state agencies shall work in full cooperation with the Board of the Mississippi Department of Information Technology Services to identify computer equipment or services to minimize duplication, reduce costs, and improve the efficiency of providing common technology services across agency boundaries.

Miss. Code Ann. § 25-53-7 Members of authority; terms; vacancies; surety bond; restriction on beneficial interest in business or body engaged in information business; legislative designees authorized to attend meetings.

The membership of the authority shall be composed of five (5) members to be appointed by the Governor with the advice and consent of the Senate. The initial terms of the members shall be for one (1), two (2), three (3), four (4) and five (5) years, respectively, and thereafter all terms shall be for five (5) years. Each member may continue to serve for a period not to exceed twelve (12) months after the expiration of his term if his successor is not duly appointed. The initial appointments to the reconstituted authority shall be made no later than June 30, 1984, for terms to begin on July 1, 1984. Vacancies shall be filled in the same manner as original appointments for the unexpired portion of the term vacated. Each member of the authority shall have a minimum of four (4) years’ experience in an information technology-related executive position or prior service as a member of the authority. Each member of the authority shall be required to furnish a surety bond in the minimum amount of Fifty Thousand Dollars ($50,000.00) to be approved by the Secretary of State, conditioned according to law and payable to the State of Mississippi, before entering upon his duties. The premiums on such bonds shall be paid from any funds available to the authority for such purpose. No member of the authority, nor its executive director, shall, during his term as such member or director, have any substantial beneficial interest in any corporation or other organization engaged in the information technology business either as manufacturer, supplier, lessor, or otherwise. All members and the executive director shall fully disclose in writing any such beneficial interest, and such disclosure shall be entered on the minutes of the authority. The Lieutenant Governor may designate one (1) Senator and the Speaker of the House of Representatives may designate one (1) Representative to attend any meeting of the authority. The appointing authorities may designate an alternate member from their respective houses to serve when the regular designee is unable to attend such meetings of the authority. Such legislative designees shall have no jurisdiction or vote on any matter within the jurisdiction of the authority. For attending meetings of the authority, such legislators shall receive per diem and expenses which shall be paid from the contingent expense funds of their respective houses in the same amounts as provided for committee meetings when the Legislature is not in session; however, no per diem and expenses for attending meetings of the authority will be paid while the Legislature is in session. No per diem and expenses will be paid except for attending meetings of the authority without prior approval of the proper committee in their respective houses.

Miss. Code Ann. § 25-53-9 Compensation and expense allowances.

The members of the authority shall be compensated by a per diem as is authorized by Section 25-3-69 for each day spent in actual discharge of their duties, and shall be reimbursed for mileage and actual expenses incurred in the performance of their duties as provided in Section 25-3-41. No authority member may incur per diem, travel, or other expenses unless previously authorized by vote at a meeting of the authority, which action shall be recorded in the official minutes of said meeting.

Miss. Code Ann. § 25-53-11 Meetings and organization.

The authority shall meet regularly at a place designated by it once each calendar month and shall meet at such other times as may be set upon call of the chairman or a majority of the members of the authority. At its first meeting, the authority shall organize and elect a chairman and vice-chairman and, as soon as practicable thereafter, the authority shall adopt such rules and regulations, not contrary to the provisions of this chapter and the other laws of the State of Mississippi, as shall be necessary and proper to govern its proceedings. The authority may either elect a secretary from among its membership or delegate the executive director or another employee of the authority as its secretary.

Miss. Code Ann. § 25-53-13 Quorum.

In order to have a quorum for a meeting of the authority, at least three (3) members of the authority must be present.

Miss. Code Ann. § 25-53-15 Votes.

Any member of the authority may have his vote on any question before the authority recorded on the minutes thereof at the time of the vote, and a member of the authority who votes against an illegal or unauthorized expenditure of funds may not be held liable therefor.

Miss. Code Ann. § 25-53-17 Minutes and records.

The authority shall keep full, complete, and permanent minutes and records of all its proceedings, including the rules and regulations adopted by it, and said minutes shall be signed by the chairman, or vice-chairman, and attested by the secretary.

Miss. Code Ann. § 25-53-19 Executive director; employees.

The authority shall select an executive director, with the advice and consent of the Senate, who shall be the administrative officer of the authority and shall perform such duties as are required of him by law and such other duties as may be assigned him by the authority, and who shall receive such compensation as may be fixed by the authority, subject to the approval of the state personnel board. In addition, he shall be entitled to remuneration for his necessary traveling expenses consistent with general law. The executive director shall be a graduate of an accredited university with a degree in engineering, business administration, electronic communications, information technology or a related field, with at least ten (10) years’ experience in information technology, electronic communications, or a related field, of which at least five (5) years shall be in a responsible high level management position with a demonstrated record of management expertise demonstrated through knowledge in the application of information technology and electronic communications. The qualifications for the executive director prescribed herein shall not apply to the executive director serving on June 30, 1984. The executive director shall have no vote in the decisions of said authority, but shall offer such professional or technical advice and assistance to the authority as may be required of him. Said executive director, in order to qualify for his position, shall be required to make a good and sufficient bond in some surety company qualified and doing business in the State of Mississippi, in the minimum penal sum of Fifty Thousand Dollars ($50,000.00) conditioned upon the faithful performance of his duties as required by law and the directives of the authority. The premium on said bond shall be paid from any funds available to the authority for such purpose. Said executive director may be removed at any time upon a majority vote of the membership of said authority. The executive director, with the approval of the authority, shall employ such technical, professional, and clerical help as may be authorized by the authority; and the authority, upon the recommendation of the executive director, shall define the duties and fix the compensation of such employees.

Miss. Code Ann. § 25-53-21 Executive director; duties, responsibilities and authority.

The executive director shall have the following duties, responsibilities and authority: He shall conduct continuing studies of all information technology activities carried out by all agencies of the state and shall develop a long-range plan for the efficient and economical performance of such activities in state government. Such plan shall be submitted to the authority for its approval and, having been approved by the authority, shall be implemented by the executive director and all state agencies. Such plan shall be continuously reviewed and modifications thereof shall be proposed to the authority by the executive director as developments in information technology techniques and changes in the structure, activities, and functions of state government may require. He shall review the purchasing practices of all state agencies in the area of the purchasing of supplies for information technology and make recommendations to the authority and to the Public Procurement Review Board for the institution of purchasing procedures which will insure the most economical procurement of such supplies commensurate with the efficient operation of all departments and agencies of state government. He shall see that all reports required of all agencies are promptly and accurately made in accordance with the rules and regulations adopted by the authority. Either in person or through his authorized agents, he shall make such inspections of information technology operations being conducted by any of the agencies of the state as may be necessary for the performance of his duties. He shall suggest and cause to be brought about cooperation between the several state agencies in order to provide efficiency in information technology operation. He shall, together with the heads of the agencies involved, reduce to writing and execute cooperative plans for the acquisition and operation of information technology equipment, and any such plan so adopted shall be carried out in accordance with the provisions of such plan unless the same shall be amended by the joint action of the executive director and the heads of agencies involved. The executive director shall report to the authority the details of any plan so adopted and all amendments or modifications thereof, and shall otherwise report to the authority and to the Public Procurement Review Board any failure on the part of any agency to carry out the provisions of such plan. In the event the head of any agency involved or the executive director shall propose amendments to a plan so adopted and such amendment is disapproved by the head of another agency involved or the executive director, an appeal may be taken to the authority which may, after full consideration thereof, order the adoption of the proposed amendment or any modification thereof. The executive director shall make decisions on all questions of the division of the cost of information technology operations among the several agencies, but his findings shall be subject to the approval or modification by the authority on appeal to it. He shall review all contracts for acquisition of computer equipment or services now or hereafter in force and may require the renegotiation, termination, amendment or execution of any such contracts in proper form and in accordance with the policies and rules and regulations and subject to the direction of the authority. In the negotiation and execution of such contracts, the executive director may negotiate a limitation on the liability to the state of prospective contractors provided such limitation affords the state reasonable protection. He shall act as the purchasing and contracting agent for the State of Mississippi in the negotiation and execution of all contracts for the acquisition of computer equipment or services. He shall receive, review, and promptly approve or disapprove all requests of agencies of the state for the acquisition of computer equipment or services, which are submitted in accordance with rules and regulations of the authority. In the event that any such request is disapproved, he shall immediately notify the requesting agency and the members of the authority in writing of such disapproval, stating his reasons therefor. The disapproval of any request by the executive director of the authority may be appealed to the authority or to the Public Procurement Review Board, respectively, in such manner as may be authorized by such reasonable rules and regulations hereby authorized to be adopted by the authority and by the Public Procurement Review Board to govern the same. The executive director shall report the approval of all such requests to the authority in such manner as may be directed by the authority, and shall execute any such contracts only after complying with rules and regulations which may be adopted by the authority in relation thereto. Any contracts for personal or professional services entered into by the executive director shall be exempted from the requirements of Section 25-9-120(3) relating to submission of such contract to the State Personal Service Contract Review Board. He shall suggest and cause to be brought about cooperation between the several state agencies, departments and institutions in order that work may be done by one agency for another agency, and equipment in one agency may be made available to another agency, and suggest and cause to be brought about such improvements as may be necessary in joint or cooperative information technology operations. He shall be designated as the “Chief Information Confidentiality Officer” after being duly sworn to the oath of this office by the chairman of the authority and shall be responsible for administering the oath to other qualified officers he may designate. He shall appoint employees of the Mississippi Department of Information Technology Services, or at his discretion, employees of other state agencies and institutions that are responsible for handling or processing data for any agency or institution other than that for which they are employed, to a position of information custodial care that shall be known as “Information Confidentiality Officer.” The selection and swearing of all officers shall be reported to the authority at the next regular meeting and names, affirmation dates and employment dates shall be recorded in the permanent minutes of the authority.

Miss. Code Ann. § 25-53-23 Appeals to authority from decisions of executive director.

The authority shall act upon all appeals of decisions made by the executive director thereof and shall, upon such appeals, approve or disapprove such administrative actions as may be taken by him. The form of an appeal to the full authority from an action or recommendation of the executive director thereof shall be a written communication from the executive head of the agency or agencies involved to the chairman of the authority, stating the objection and a request to appear before the full authority to present the case in point, on which appeal the authority shall take such action as is indicated by the facts presented to or made available to the authority.

Miss. Code Ann. § 25-53-25 Exemptions; delegation of bidding and contracting responsibilities to purchasing agency; relation to Public Purchases Law.

Nothing in this chapter shall be construed to imply exemption from the public purchases law, being Section 31-7-1 et seq. The authority may establish policies and procedures for the purpose of delegating the bidding and contracting responsibilities related to the procurement of computer equipment or services to the purchasing agency. Such policies and procedures must address the following issues: Establish categories of equipment or services affected; Establish maximum unit and/or ceiling prices of such procurements; Establish reporting, monitoring and control of such procurements; and Establish other such rules and regulations as necessary to fully implement the purposes of this section. Nothing in this subsection shall be construed to imply exemption from the public purchases law, being Section 31-7-1 et seq. Acquisitions of computer equipment and services by institutions of higher learning or junior colleges wholly with federal funds and not with state general funds shall be exempt from the provisions of this chapter; however, nothing in this subsection shall be construed to imply an exemption of such acquisitions from the public purchases law, being Section 31-7-1 et seq. [Repealed]

Miss. Code Ann. § 25-53-27 Repealed.

Repealed by Laws, 1981, ch. 443, § 2, eff from and after June 30, 1984. [En Laws, 1976, ch. 456, §§ 1, 2; 1977, ch. 400; 1979, ch. 478, § 1; 1981, ch. 443, § 1]

Miss. Code Ann. § 25-53-51 Qualifications for position.

To qualify for the position of information confidentiality officer a person must: Be an employee of a state agency or institution in a position such that his duties require him to handle or process or supervise the handling or processing of data in conjunction with the use of automated information technology equipment for an agency or institution other than that for whom he is regularly employed. Have been continuously employed for a period of at least one hundred eighty (180) days by such agency or institution or have successfully been cleared for employment through an investigation that shall consist of a determination as to good moral character and that the prospective employee has not been convicted of a felony. In order to determine the applicant’s suitability for employment at the Mississippi Department of Information Technology Services, the applicant shall be fingerprinted. If no disqualifying record is identified at the state level, the fingerprints shall be forwarded by the Mississippi Department of Public Safety to the Federal Bureau of Investigation for a national criminal history record check. A prospective employee may be provisionally employed based on a reference check by the employing agency pending final receipt of the results of a national criminal history record check for a period not to exceed one hundred eighty (180) days. Successfully complete a suitable instructional course on the subjects of information security, privacy and confidentiality and protection, to be developed and taught under the supervision of the executive director. An employee may work in a provisional capacity under the direct supervision of an information confidentiality officer as part of an on-the-job training program while completing instructional requirements, for a period not to exceed ninety (90) days. Be duly sworn to the following oath: “I,_______________ , do solemnly swear to protect and uphold the confidentiality of all information that may come to my knowledge that is designated as ‘confidential information’ by another state agency or institution for which I may handle or process in the normal course of my duties. I swear to exercise reasonable care in the handling and processing of all such designated data and further that I will not reveal or otherwise divulge information from such data obtained. I understand that proven violation of this oath will subject me to forfeiture of my bond and dismissal from employment.” In order to maintain appropriate liability insurance necessary to cover damages for any nonmalicious act, the Department of Information Technology Services will work in conjunction with the Tort Claims Board. In order to clear vendors, such as maintenance personnel, security personnel, cleaning personnel, contractors and other vendors with a valid need to gain access into the State Data Centers and campus, the department shall determine these individuals have not been convicted of a felony through a fingerprint-based criminal history background check. If no disqualifying record is identified at the state level, the fingerprints shall be forwarded by the Department of Public Safety to the Federal Bureau of Investigation for a national criminal history record check.

Miss. Code Ann. § 25-53-53 Handling and processing of information and data.

Information and data shall be considered public record information and data and receive normal handling and processing unless designated as “confidential information” by the agency and institution originating the data. Information and data designated as “confidential information” will receive special handling based on procedures agreed to by the executive director and the agency or institution head and shall be handled in accordance with the oath subscribed to by the confidentiality officer.

Miss. Code Ann. § 25-53-55 Investigation of and hearing on complaints of allegedly improper disclosure of confidential information.

Upon written complaint of any person claiming to be adversely affected by disclosure of confidential information by any information confidentiality officer, the director shall give notice to the information confidentiality officer of the fact that such complaint has been filed and shall give such notice to the Chairman of the Mississippi Department of Information Technology Services, who shall call a meeting of the members of the authority for the purpose of hearing such complaint. The authority shall then conduct an investigation into the matter and shall afford to the complaining party and the information confidentiality officer a hearing, of which reasonable notice shall be given. For purposes of such hearing, the authority, under signature of the secretary of the authority attested by the chairman, shall have the power to subpoena witnesses and documentary or other evidence. After such hearing, if the authority, based upon substantial evidence, shall find that the information confidentiality officer has disclosed confidential information in violation of his oath, the authority shall enter such finding of fact on its minutes and the information confidentiality officer shall be immediately discharged from employment. If the authority shall find that such oath has not been violated, it shall, likewise, enter such finding on its minutes and the complaint shall be dismissed. The finding of the authority shall be prima facie evidence of the truth thereof in any judicial procedure seeking forfeiture of the bond of such information confidentiality officer.

Miss. Code Ann. § 25-53-57 Officer as legal agent and employee of agency or institution for which he is processing data.

An information confidentiality officer shall be considered a legal agent of the agency or institution and for the purposes of Sections 25-53-51 through 25-53-59 shall be considered to be an employee of the agency or institution for which he may be processing data at that particular time.

Miss. Code Ann. § 25-53-59 Penalty for improper release or divulgence of confidential information.

Any information confidentiality officer who shall intentionally and wilfully violate his oath by releasing or divulging confidential information without proper authority shall be guilty of a misdemeanor and sentenced to not exceeding one (1) year in jail or a fine of not exceeding One Thousand Dollars ($1,000.00), or both.

Miss. Code Ann. § 25-53-101 Legislative findings and declarations.

The Legislature hereby declares it essential to the creation and maintenance of an efficient, modern, economically feasible, telecommunications system that there should be full cooperation and cohesive planning and effort by and between the several state agencies and that it is the responsibility of the said Legislature to provide statutory authority therefor. The Legislature, therefore, declares and determines that the responsibility for these and other related purposes shall be vested in the Mississippi Department of Information Technology Services.

Miss. Code Ann. § 25-53-103 Repealed.

Repealed by Laws, 1999, ch. 410, § 5, eff from and after March 17, 1999. [Laws, 1995, ch. 622, § 11, eff from and after July 1, 1995]

Miss. Code Ann. § 25-53-105 Administration and purposes of Sections 25-53-109 through 25-53-125.

The Mississippi Department of Information Technology Services shall administer the provisions of Sections 25-53-109 through 25-53-125. The purposes and aims of the Mississippi Department of Information Technology Services in carrying out said provisions shall be to coordinate and promote efficiency in the acquisition, operation and maintenance of all telecommunications systems and networks being used by agencies of the state and further to coordinate the compatibility of systems and networks to the state with those of governing authorities so as to promote a uniform, compatible telecommunications system for agencies and governing authorities.

Miss. Code Ann. § 25-53-107 Promulgation of rules and regulations; employment of personnel.

The Mississippi Department of Information Technology Services shall promulgate rules and regulations governing the manner in which the authority and duties prescribed by Sections 25-53-101 through 25-53-125 shall be carried out. It shall employ competent personnel necessary to carry out its purposes, under rules promulgated by the State Personnel Board. The bureau, during a fiscal year, may utilize time-limited escalated positions in order to implement telecommunications enterprise decisions that yield cost avoidance, cost reductions or revenue increases and so long as the Mississippi Department of Information Technology Services can provide the necessary funds without such action causing a telephone service rate increase to agency customers. Such employees of the bureau shall be considered nonstate service employees, shall be highly qualified telecommunications professionals and may be compensated at a rate comparable to the prevailing rate of telecommunications personnel in the private sector. Such compensation rates shall be determined by the State Personnel Director. The number of such positions shall be set by annual appropriation legislation. The compensation and classification of such positions and qualifications of employees shall be set by the State Personnel Board upon recommendation by the Executive Director of the Mississippi Department of Information Technology Services. Nonstate service positions can be recommended for conversion to permanent state service on a case by case basis if the supported function appears long-term in duration, if accomplished in accordance with State Personnel Board procedures, and if properly identified in the state budgetary process.

Miss. Code Ann. § 25-53-109 General duties and powers of bureau.

The bureau is hereby authorized and empowered to exercise such duties and powers necessary to effectuate the purposes of Sections 25-53-101 through 25-53-125 including the following: Form an advisory council made up of persons with expertise, and experience in the field of telecommunications for the purpose of setting goals, establishing long-range plans and policies and to oversee and assist in the procurement activities regarding telecommunications equipment and services; Provide more effective management of state telecommunications resources and implement long-range plans and procurement; Manage, plan and coordinate all telecommunications systems under the jurisdiction of the state. This centralized management function would be provided throughout the following activities: Administration of existing systems including coordination of activities, vendors, service orders and billing/record-keeping functions; Planning of new systems or services; Design of replacement systems; Project management during specification writing, bid letting, proposal evaluation and contract negotiations; Implementation supervision of new systems and ongoing support; Implementation of long-term state plans; and Management of intra-LATA and inter-LATA networks.

Miss. Code Ann. § 25-53-111 Additional duties of bureau; justification of requests for increases in expenditures for new telecommunication equipment systems or services; long-range plans for use of telecommunications equipment, systems and services.

The bureau shall have the following additional duties: To establish and coordinate through either state ownership or commercial leasing, all telecommunications systems and services affecting the management and operations of the state. To act as the sole centralized customer for the acquisition, billing and record keeping of all telecommunications systems or services provided to state agencies whether obtained through lease or purchase. To charge respective user agencies for their proportionate cost of the installation, maintenance and operation of the telecommunications systems and services, including the operation of the bureau. To offer or provide transmission, switch and network services on a reimbursable basis to agencies financed entirely by federal funds, to governing authorities and to other governmental agencies. To approve or provide state telephone services on a reimbursable basis to full-time students at state institutions of higher learning and junior colleges, including where such services are provided by the state or the institution. To develop coordinated telecommunications systems or services within and among all state agencies and require, where appropriate, cooperative utilization of telecommunications equipment and services by aggregating users. Where such cooperative utilization of telecommunications system or service would affect an agency authorized to receive information from the National Crime Information Center of the Federal Bureau of Investigation, such plans for cooperative utilization shall first be approved by the National Crime Information Center before implementation of such telecommunications systems or service can proceed. To review, coordinate, approve or disapprove all requests by state agencies for the procurement, through purchase or contract for lease of telecommunications systems or services including telecommunication proposals, studies and consultation contracts and intra-LATA and inter-LATA transmission channels. To establish and define telecommunications systems and services specifications and designs so as to assure compatibility of telecommunications systems and services within state government and governing authorities. To provide a continuous, comprehensive analysis and inventory of telecommunications costs, facilities and systems within state government. To promote, coordinate or assist in the design and engineering of emergency telecommunications systems, including but not limited to “911” service, emergency medical services and other emergency telecommunications services. To advise and provide consultation to agencies and governing authorities with respect to telecommunications management planning and related matters and to provide training to users within state government in telecommunications technology and system use. To develop policies, procedures and long-range plans, consistent with the protection of citizens’ rights to privacy and access to information, for the acquisition and use of telecommunications systems, and to base such policies on current information about state telecommunications activities in relation to the full range of emerging technologies. Any state agency requesting an increase in expenditure of funds for new telecommunications equipment systems or services shall submit to the Legislative Budget Office with its budget request preceding the fiscal year for which funding is requested detailed justification for such request. The justification shall be provided on forms developed by the bureau in accordance with the Administrative Procedure Act. In addition, all state agencies shall submit to the bureau, when requested, a long-range plan for use of telecommunications equipment, systems and services.

Miss. Code Ann. § 25-53-113 Cooperation with bureau by state agencies.

Each and every agency of the state shall give full cooperation to the bureau in furnishing all information of any kind as it pertains to telecommunications.

Miss. Code Ann. § 25-53-115 Approval by bureau of rentals, leases and purchases of telecommunications systems.

No agency shall rent, lease, lease/purchase, purchase or in any way own or pay for the operation of any telecommunications system out of any funds available for the use by that agency without the written approval of the bureau.

Miss. Code Ann. § 25-53-117 Creation of state obligations for telecommunications systems; conduct of transactions dealing with telecommunications systems.

No agency shall be permitted to obligate the state to any vendor source for a telecommunications system of any kind. All transactions dealing with a telecommunications system shall be conducted through the bureau, and any vendor found in violation of this policy may be prohibited from bidding on such systems for a period of time commensurate with the severity of the violation. Provided, however, that this period shall not exceed twenty-four (24) months.

Miss. Code Ann. § 25-53-119 Applicability of Sections 25-53-101 through 25-53-125.

The bureau shall, subject to the provisions of Sections 25-53-101 through 25-53-125, have sole authority and responsibility for defining the specific telecommunications equipment, systems and related services to which the provisions of Sections 25-53-101 through 25-53-125 shall be applicable. However, the provisions of Sections 25-53-101 through 25-53-125 shall not be applicable with respect to computer and telecommunications equipment, systems and related services that are only available from a sole source.

Miss. Code Ann. § 25-53-121 Equipment support contracts.

The types of contracts permitted in the procurement of telecommunications equipment, systems and related services are defined herein, and the provisions in Sections 25-53-101 through 25-53-125 supplement the provisions of Chapter 7, Title 31, Mississippi Code of 1972. The Mississippi Department of Information Technology Services may, on behalf of any state agency, enter into an equipment support contract with a vendor of telecommunications equipment or services for the purchase or lease of such equipment or services in accordance with the following provisions: Specifications for equipment support contracts shall be developed in advance and shall conform to the following requirements: Specifications for equipment support contracts shall cover a specific class or classes of equipment and service and may include all features associated with that class or classes. Specifications in the request for proposals for equipment support contracts shall be developed by the Mississippi Department of Information Technology Services. Specifications shall be based on the projected needs of user agencies. Specifications for equipment support contracts for purchase or lease of telecommunications equipment may include specifications for the maintenance of the equipment desired. The initial procurement of an equipment support contract, and procurement of equipment and services to be utilized by agencies under an equipment support contract, shall be as follows: Equipment support contracts shall be awarded by competitive sealed bidding. A using agency may procure required telecommunications equipment and service available under an equipment support contract through release of a purchase order for the required equipment and service to the vendor holding an equipment support contract. However, such procurement by purchase order shall be accomplished in accordance with the procedures and regulations prescribed by the Mississippi Department of Information Technology Services, and shall be subject to all other statutory requirements including approval by the bureau. The final authority for entering into equipment support contracts shall rest with the bureau, and such contracts shall be executed by the Mississippi Department of Information Technology Services in accordance with the procedures and regulations defined by said authority. Equipment support contracts shall include the following terms and conditions: Equipment support contracts shall be valid for not more than one (1) fiscal year with the Mississippi Department of Information Technology Services having an option to renew for two (2) additional fiscal years. The vendor may vary lease or purchase prices for the optional renewal period(s) by an amount equal to the lesser of the lease or purchase price permitted by that vendor’s contract with the General Services Administration of the United States Government for such equipment and services, or any variance in that vendor’s published list prices for such equipment and services during that fiscal year, provided that any increase may not exceed five percent (5%) and the variance must have been authorized by the initial equipment and service order contract. The prices stated in such contract shall not change for the period of the contract. Individual items of telecommunications equipment and service which may be included under an equipment support contract may not have a purchase price greater than Fifty Thousand Dollars ($50,000.00) or a monthly lease price greater than Three Thousand Dollars ($3,000.00). Such price shall not include costs of maintenance, taxes or transportation. Equipment support contracts shall include the following annual appropriation dependency clause: “The continuation of this contract is contingent upon the appropriation of funds to fulfill the requirements of the contract by the Legislature. If the Legislature fails to appropriate sufficient monies to provide for the continuance of the contract, the contract shall terminate on the date of the beginning of the first fiscal year for which funds are not appropriated.” The Mississippi Department of Information Technology Services may on behalf of any state agency enter into contracts for the lease or purchase of telecommunications equipment systems or services in accordance with the following provisions: The bureau may directly contract for or approve contracts for regulated or tariffed telecommunications services upon determination by the bureau that the application of such service is in the best interests of the State of Mississippi. All other contracts of this type shall be entered into through request for proposals as defined in Sections 25-53-101 through 25-53-125. The justification of such contracts must be presented to the bureau prior to issuance of a request for proposals. Such justification shall identify and consider all cost factors relevant to that contract. The term of a lease contract shall not exceed sixty (60) months for a system lease valued less than One Million Dollars ($1,000,000.00) and shall not exceed one hundred twenty (120) months for a system lease valued One Million Dollars ($1,000,000.00) or more. All lease contracts must contain the following annual appropriation dependency clause: “The continuation of this contract is contingent upon the appropriation of funds to fulfill the requirements of the contract by the Legislature. If the Legislature fails to appropriate sufficient monies to provide for the continuation of a contract, the contract shall terminate on the date of the beginning of the first fiscal year for which funds are not appropriated.” The Mississippi Department of Information Technology Services shall maintain a list of all such contracts. This list shall show as a minimum the name of the vendor, the annual cost of each contract and the term of the contract or the purchase cost. Upon the advance written approval of the bureau, state agencies may extend contracts for the lease of telecommunications equipment, systems and related services on a month-to-month basis for a period not to extend more than one (1) calendar year for the stated lease prices.

Miss. Code Ann. § 25-53-123 Method of procurement of nonregulated telecommunications systems.

The only method of procurement permitted for the acquisition of nonregulated telecommunications systems, including equipment and related services, shall be in conformity with the following requirements: All acquisitions of telecommunications equipment, systems and related services involving the expenditures of funds in excess of the dollar amount established in Section 31-7-13(c), or rentals or leases in excess of the dollar amount established in Section 31-7-13(c), for the term of the contract, shall be based upon competitive and open specifications, and contracts therefor shall be entered into only after advertisements for bids are published in one or more daily newspapers having a general circulation in the state not less than fourteen (14) days prior to receiving sealed bids therefor. The authority may reserve the right to reject any or all bids, and if all bids are rejected, the authority may negotiate a contract within the limitations of the specifications so long as the terms of any such negotiated contract are equal to or better than the comparable terms submitted by the lowest and best bidder, and so long as the total cost to the State of Mississippi does not exceed the lowest bid. If the authority accepts one (1) of such bids, it shall be that which is the lowest and best. When applicable, the bureau may procure equipment, systems and related services in accordance with the law or regulations, or both, which govern the Bureau of Purchasing of the Governor’s Office of General Services or which govern the Mississippi Department of Information Technology Services procurement of computer equipment, software and services.

Miss. Code Ann. § 25-53-125 General provisions applicable to all procurements under Sections 25-53-101 through 25-53-125.

The following general provisions shall apply to all procurements under Sections 25-53-101 through 25-53-125: No contracts entered into hereunder shall have an initial effective date earlier than the date on which such contract receives approval as required herein. All changes, modifications and amendments to any contract hereunder shall be approved in advance by the bureau, in addition to any other approvals required by law. The bureau shall promulgate rules and regulations in accordance with the Administrative Procedure Act, Section 25-43-1, et seq., Mississippi Code of 1972, for the establishment of contract format. Where written proposals or bids are submitted by vendors, the proposal or bid of the successful vendor shall be incorporated into the final contract consummated with that vendor. The provisions of Sections 25-53-101 through 25-53-125 shall, with respect to the procurement of telecommunications equipment, systems or related services, supersede specifications of any contradictory or conflicting provisions of Chapter 7, Title 31, Mississippi Code of 1972, and other laws with respect to awarding public contracts.

Miss. Code Ann. § 25-53-151 Electronic Government Services Fund established; Electronic Government Oversight Committee established to oversee implementation of E-Government and related technology initiatives; duties of committee; composition of committee; committee meetings; committee reports and recommendations; funding of agency expenses.

There is established in the State Treasury the “Electronic Government Services Fund,” into which shall be deposited specific funds appropriated by the Legislature for developing and providing electronic government services within the State of Mississippi. Any funds in the Electronic Government Services Fund at the end of a fiscal year shall not lapse into the State General Fund, but shall be available for expenditure in the subsequent fiscal year. The funds in the Electronic Government Fund shall be available for expenditure pursuant to specific appropriation by the Legislature beginning in fiscal year 2002, to the Mississippi Department of Information Technology Services. There is hereby established an Electronic Government Oversight Committee to oversee the implementation of E-Government and related technology initiatives. Duties of this committee would include: (a) prioritize and make recommendations for all electronic government services, in order to cut across state and local governmental organizational structures; (b) address policy issues such as privacy, security, transaction fees and accessibility; (c) review ongoing fiscal and operational management and support of portal; (d) provide a mechanism for gathering input from citizens, businesses and government entities; (e) encourage self-service models for citizens through state websites and other electronic services; and (f) promote economic development and efficient delivery of government services by encouraging governmental and private sector entities to conduct their business and transactions using electronic media. The Electronic Government Oversight Committee shall be composed of the following: (a) the Executive Director of the Mississippi Department of Information Technology Services, or his designee; (b) the State Auditor, or his designee; (c) the State Treasurer, or his designee; (d) the Secretary of State, or his designee; (e) the Executive Director of the Department of Finance and Administration, or his designee; (f) the Commissioner of Public Safety, or his designee; (g) the Commissioner of Revenue, or his designee. The committee shall annually elect one (1) member to serve as chairman and one (1) member to serve as vice chairman, who shall act as chairman in the absence of the chairman. The committee shall meet monthly or upon the call of the chairman, and shall make necessary reports and recommendations to the Legislature and the appropriate agencies of state government. All agencies of state government shall cooperate with the committee in providing requested information, shall work closely with and provide information to the committee and shall report to the committee at its request. The Mississippi Department of Information Technology Services shall provide administrative support for the committee. Nonlegislative members of the committee shall serve without compensation. The Electronic Government Oversight Committee shall advise and provide direction to the Department of Finance and Administration to develop a procurement portal that will enable potential vendors of goods and services to access relevant and necessary information related to the sale of the following types of goods and services to the State of Mississippi and its agencies: Commodities, as defined by Section 31-7-1; Contract personnel, as defined by Sections 25-9-107 and 25-9-120; and Computer equipment and services, as defined by Section 25-53-3. The procurement portal provided for in subsection (3) must provide potential vendors with the following: A searchable database of business procurement opportunities with the state which includes a breakdown by product or service and by the organization seeking the product or service; Listings of the published date and closing date for each business procurement opportunity; A “Frequently Asked Questions” section regarding doing business with the respective agencies; A breakdown of “Frequently Asked Questions” regarding the selection process with the respective agencies; An open-air forum for questions and answers relating to the procurement process, in general, as well as specifically relating to a single contract; and Links to individual agency websites and contacts to enable potential vendors to obtain more specific information, if necessary. The procurement portal must be linked to the Transparency Mississippi website established in accordance with Sections 27-104-151 through 27-104-163. The Mississippi Department of Information Technology Services shall develop and maintain a link to the procurement portal from the state website. From and after July 1, 2018, the expenses of this agency shall be defrayed by appropriation from the State General Fund. In addition, in order to receive the maximum use and benefit from information technology and services, expenses for the provision of statewide shared services that facilitate cost-effective information processing and telecommunication solutions shall be defrayed by pass-through funding and shall be deposited into the Mississippi Department of Information Technology Services Revolving Fund unless otherwise specified by the Legislature. These funds shall only be utilized to pay the actual costs incurred by the Mississippi Department of Information Technology Services for providing these shared services to state agencies. Furthermore, state agencies shall work in full cooperation with the Board of the Mississippi Department of Information Technology Services (MDITS) to identify computer equipment or services to minimize duplication, reduce costs, and improve the efficiency of providing common technology services across agency boundaries.

Miss. Code Ann. § 25-53-171 Commission created; responsibilities; membership; meetings; powers and duties; staffing and technical support; Integrated Public Safety Communications Fund; compensation; Wireless Communication Advisory Board; public properties and facilities to be made available to commission; section does not authorize regulation of commercial mobile radio services; section does not supercede authority of MDITS; funding of agency expenses; deposit of monies into State General Fund.

There is hereby created the Wireless Communication Commission, which shall be responsible for promoting the efficient use of public resources to ensure that law enforcement personnel and essential public health and safety personnel have effective communications services available in emergency situations, and to ensure the rapid restoration of such communications services in the event of disruption caused by natural disaster, terrorist attack or other public emergency. The Wireless Communication Commission, hereafter referred to as the “commission,” shall consist of the following: The Executive Director of the Department of Transportation or his designee; The Commissioner of Public Safety or his designee; The Executive Director of the Department of Public Health or his designee; The Executive Director of the Department of Information Technology Services or his designee; The Executive Director of the Mississippi Emergency Management Agency or his designee; The Executive Director of the Mississippi Office of Homeland Security or his designee; The President of the Mississippi Sheriffs’ Association or his designee; The President of the Mississippi Association of Supervisors or his designee; The President of the Mississippi Municipal Association or his designee; The President of the Mississippi Association of Fire Chiefs or his designee; The President of the Mississippi Association of Police Chiefs or his designee; The Chief of the Mississippi Highway Safety Patrol or his designee; The Commissioner of the Department of Corrections or his designee; The Adjutant General of the Mississippi National Guard or his designee; The Executive Director of the Mississippi Department of Environmental Quality or his designee; and The Executive Director of Wildlife, Fisheries and Parks or his designee. All members of the commission shall serve a term of not less than four (4) years. Within forty-five (45) days from April 21, 2005, the Executive Director of the Department of Information Technology Services shall call a meeting of the commission in the City of Jackson, Mississippi, and organize by electing a chairman and other officers from its membership. The commission shall adopt rules which govern the time and place for meetings and governing the manner of conducting its business. The commission shall meet at least monthly and maintain minutes of such meetings. A quorum shall consist of a majority of the membership of the commission. The commission, in conjunction with the Department of Information Technology Services, shall have the sole authority to promulgate rules and regulations governing the operations of the wireless communications system described in paragraph (a) and shall be vested with all legal authority necessary and proper to perform this function including, but not limited to: Purchasing, leasing, acquiring and otherwise implementing a statewide wireless communications system to serve wireless users in state and local governments and those private entities that enter into a partnership with the commission. All purchases shall be made in accordance with public purchasing laws and, if required, shall be approved by the Department of Information Technology Services. This system shall enable interoperability between various wireless communications technologies. Ensuring that federal/state communications requirements are followed with respect to such wireless communications systems. Providing system planning with all public safety communications systems. Assisting with establishment of state and local wireless communications. In consultation with the Department of Information Technology Services, having the authority to permit state and local agencies use of the communications system under the terms and conditions established by the commission. Providing technical support to users and bearing the overall responsibility for the design, engineering, acquisition and implementation of the statewide communications system and for ensuring the proper operation and maintenance of all equipment common to the system. Seeking proposals for services through competitive processes where required by law and selecting service providers under procedures provided for by law. Establishing, in conjunction with the Department of Information Technology Services, policies, procedures and standards which shall be incorporated into a comprehensive management plan for the operation of the statewide communications system. Having sign-off approval on all wireless communications systems within the state which are owned or operated by any state or local governmental entity, agency or department. Creating a standard user agreement. The commission, in conjunction with the Department of Information Technology Services, shall exercise its powers and duties pursuant to this section to plan, manage and administer the wireless communications system. The commission may: In consultation with the advisory board and the Department of Information Technology Services, establish policies, procedures and standards to incorporate into a comprehensive management plan for use and operation of the communications system. Enter into mutual aid agreements among federal, state and local agencies for the use of the communications system. Establish the cost of maintenance and operation of the system and charge subscribers for access and use of the system. Assess charges for use of the system. Obtain space through rent or lease of space on any tower under state control. The commission may also rent, lease or sublease ground space as necessary to locate equipment to support antennae on the towers. The costs for use of such space shall be established by the owner/agent for each site when it is determined to be practicable and feasible to make space available. Provide space through rent or lease of space on any tower under the commission’s control. The commission may also rent, lease or sublease ground space as necessary to locate equipment to support antennae on the towers. The costs for use of such space shall be established by the commission when it is determined to be practicable and feasible to make space available. Refuse to lease space on any tower at any site. All monies collected by the commission for such rents, leases or subleases shall be deposited directly into a special fund hereby created and known as the “Integrated Public Safety Communications Fund.” This fund shall be administered by the Department of Information Technology Services and may be used by the commission to construct, maintain and operate the system. Rent, lease or sublease ground space on lands acquired by the commission for the construction of privately owned or publicly owned towers. The commission, as part of such rental, lease or sublease agreement, may require space on such towers for antennae as may be necessary for the construction and operation of the wireless communications system. Enter into and perform use and occupancy agreements concerning the system. Exercise any power necessary to carry out the intent of this law. The Department of Transportation, the Department of Public Safety and other commission members may provide to the commission, on a full-time or part-time basis, personnel and technical support necessary and sufficient to effectively and efficiently carry out the requirements of this section. Expenditures from the Integrated Public Safety Communications Fund shall be administered by the Department of Information Technology Services with expenditures approved jointly by the commission and the Department of Information Technology Services. The Integrated Public Safety Communications Fund may consist of the following: Appropriations from the Legislature; Gifts; Federal grants; Fees and contributions from user agencies that the commission considers necessary to maintain and operate the system; and Monies from any other source permitted by law. Any monies remaining in the Integrated Public Safety Communications Fund at the end of the fiscal year shall not revert to the State General Fund, but shall remain in the Integrated Public Safety Communications Fund. Members of the commission shall not receive any compensation or per diem, but may receive travel reimbursement provided for under Section 25-3-41. There is hereby created the Wireless Communication Advisory Board for the purpose of advising the Mississippi Wireless Communication Commission in performance of its duties. The advisory board shall be composed of the following: The Chairman and Vice Chairman of the Senate Public Utilities Committee or their designees; The Chairman and Vice Chairman of the House of Representatives Public Utilities Committee or their designees; The Chairman of the Senate Appropriations Committee or his designee; The Chairman of the House of Representatives Appropriations Committee or his designee; The Chairman of the Senate Finance Committee or his designee; and The Chairman of the House of Representatives Ways and Means Committee or his designee. Members of the advisory board shall receive per diem and expenses which shall be paid from the contingent expense funds of their respective houses in the same amounts as provided for committee meetings when the Legislature is not in session; however, no per diem and expenses for attending meetings of the advisory board shall be paid to legislative members while the Legislature is in session. It is the intent of the Legislature that all state and local government entities make available for purposes of this section all publicly owned wireless communications infrastructure, including, but not limited to, communications towers, transmission equipment, transmission frequencies and other related properties and facilities. Nothing in this section shall be construed or interpreted to provide for the regulation or oversight of commercial mobile radio services. Nothing in this section shall be construed to supersede the authority of the Department of Information Technology Services provided in Section 25-53-1 et seq. From and after July 1, 2016, the expenses of this agency shall be defrayed by appropriation from the State General Fund and all user charges and fees authorized under this section shall be deposited into the State General Fund as authorized by law. From and after July 1, 2016, no state agency shall charge another state agency a fee, assessment, rent or other charge for services or resources received by authority of this section.

Miss. Code Ann. § 25-53-191 Statement of need for issuance of wireless communication device to agency officer or employee; prohibition against personal use of device owned by state agencies; prohibition against reimbursement for use of personal wireless communication device; wireless communication device vendors to be selected from state-approved list; model policy regulating personal use of state-owned wireless communication devices to be established; state agencies to adopt model policy or other equally stringent policy.

For the purposes of this section, the following terms shall have the meanings ascribed to them in this section unless the context otherwise clearly requires: “Department” means the Mississippi Department of Information Technology. “State agency” means any agency, department, commission, board, bureau, institution or other instrumentality of the state. “Wireless communication device” means a cellular telephone, pager or a personal digital assistant device having wireless communication capability. Before a wireless communication device may be assigned, issued or made available to an agency officer or employee, the agency head, or his designee, shall sign a statement certifying the need or reason for issuing the device. No officer or employee of any state agency, except for an officer or employee of the Mississippi Emergency Management Agency, shall be assigned or issued more than one (1) such wireless communication device. No officer or employee of any state agency to whom has been assigned, issued or made available the use of a wireless communication device, the cost of which is paid through the use of public funds, shall use such device for personal use. A state agency shall not reimburse any officer or employee for use of his or her personal wireless communication device. Every state agency that, at the expense of the state agency, assigns, issues or makes available to any of its officers or employees a wireless communication device shall obtain and maintain detailed billing for every wireless communication device account. A list of approved vendors for the procurement of wireless communication devices and the delivery of wireless communication device services shall be developed for all state agencies by the Mississippi Department of Information Technology Services in conjunction with the Wireless Communication Commission created in Section 25-53-171. The department, in conjunction with the Wireless Communication Commission, shall exercise the option of selecting one (1) vendor from which to procure wireless communication devices and to provide wireless communication device services, or if it deems such to be most advantageous to the state agencies, it may select multiple vendors. The department, in conjunction with the Wireless Communication Commission, shall select a vendor or vendors on the basis of lowest and best bid proposals. A state agency may not procure a wireless communication device from any vendor or contract for wireless communication device services with any vendor unless the vendor appears on the list approved by the department, in conjunction with the Wireless Communication Commission. A contract entered into in violation of this section shall be void and unenforceable. The department shall promulgate a model acceptable use policy defining the appropriate use of all wireless communication devices. The acceptable use policy should specify that these resources, including both devices and services, are provided at the state agency’s expense as tools for accomplishing the business missions of the state agency; that all those resources are for business use; and that more than incidental personal use of those resources is prohibited. The acceptable use policy should require that each official and employee issued one (1) of the above devices or authorized to access one (1) of the above services sign the policy and that the signed copy be placed in the personnel file of the official or employee. The acceptable use policy should also require that the use of these resources be tracked, verified and signed by the official or employee and the supervisor of the official or employee at each billing cycle or other appropriate interval. All state agencies shall adopt the model policy or adopt a policy that is, at minimum, as stringent as the model policy and shall provide a copy of the policy to the department. All state agencies shall purchase or acquire only the lowest cost cellular telephone, pager or personal digital assistance device which will carry out its intended use. The University of Mississippi Medical Center and its employees, the Mississippi State University Extension Service and its agents and faculty members, the Mississippi State University Agricultural and Forestry Experiment Station and its faculty members, the Mississippi State University Forestry and Wildlife Research Center and its faculty members, and the Mississippi State University College of Veterinary Medicine and its faculty members shall be exempt from the application of this section. The State Auditor shall conduct necessary audits to ensure compliance with the provisions of this section.

Miss. Code Ann. § 25-53-201 Enterprise Security Program established to provide for coordinated oversight of cybersecurity efforts across state agencies.

There is hereby established the Enterprise Security Program which shall provide for the coordinated oversight of the cybersecurity efforts across all state agencies, including cybersecurity systems, services and the development of policies, standards and guidelines. The Mississippi Department of Information Technology Services (MDITS), in conjunction with all state agencies, shall provide centralized management and coordination of state policies for the security of data and information technology resources, which such information shall be compiled by MDITS and distributed to each participating state agency. MDITS shall: Serve as sole authority, within the constraints of this statute, for defining the specific enterprise cybersecurity systems and services to which this statute is applicable; Acquire and operate enterprise technology solutions to provide services to state agencies when it is determined that such operation will improve the cybersecurity posture in the function of any agency, institution or function of state government as a whole; Provide oversight of enterprise security policies for state data and information technology (IT) resources including, the following: Establishing and maintaining the security standards and policies for all state data and IT resources state agencies shall implement to the extent that they apply; and Including the defined enterprise security requirements as minimum requirements in the specifications for solicitation of state contracts for procuring data and information technology systems and services; Adhere to all policies, standards and guidelines in the management of technology infrastructure supporting the state data centers, telecommunications networks and backup facilities; Coordinate and promote efficiency and security with all applicable laws and regulations in the acquisition, operation and maintenance of state data, cybersecurity systems and services used by agencies of the state; Manage, plan and coordinate all enterprise cybersecurity systems under the jurisdiction of the state; Develop, in conjunction with agencies of the state, coordinated enterprise cybersecurity systems and services for all state agencies; Provide ongoing analysis of enterprise cybersecurity systems and services costs, facilities and systems within state government; Develop policies, procedures and long-range plans for the use of enterprise cybersecurity systems and services; Form an advisory council of information security officers from each state agency to plan, develop and implement cybersecurity initiatives; Coordinate the activities of the advisory council to provide education and awareness, identify cybersecurity-related issues, set future direction for cybersecurity plans and policy, and provide a forum for interagency communications regarding cybersecurity; Charge respective user agencies on a reimbursement basis for their proportionate cost of the installation, maintenance and operation of the cybersecurity systems and services; and Require cooperative utilization of cybersecurity systems and services by aggregating users. Each state agency’s executive director or agency head shall: Be solely responsible for the security of all data and IT resources under its purview, irrespective of the location of the data or resources. Locations include data residing: At agency sites; On agency real property and tangible and intangible assets; On infrastructure in the State Data Centers; At a third party location; In transit between locations; Ensure that an agency-wide security program is in place; Designate an information security officer to administer the agency’s security program; Ensure the agency adheres to the requirements established by the Enterprise Security Program, to the extent that they apply; Participate in all Enterprise Security Program initiatives and services in lieu of deploying duplicate services specific to the agency; Develop, implement and maintain written agency policies and procedures to ensure the security of data and IT resources. The agency policies and procedures are confidential information and exempt from public inspection, except that the information must be available to the Office of the State Auditor in performing auditing duties; Implement policies and standards to ensure that all of the agency’s data and IT resources are maintained in compliance with state and federal laws and regulations, to the extent that they apply; Implement appropriate cost-effective safeguards to reduce, eliminate or recover from identified threats to data and IT resources; Ensure that internal assessments of the security program are conducted. The results of the internal assessments are confidential and exempt from public inspection, except that the information must be available to the Office of the State Auditor in performing auditing duties; Include all appropriate cybersecurity requirements in the specifications for the agency’s solicitation of state contracts for procuring data and information technology systems and services; Include a general description of the security program and future plans for ensuring security of data in the agency long-range information technology plan; Participate in annual information security training designed specifically for the executive director or agency head to ensure that such individual has an understanding of: The information and information systems that support the operations and assets of the agency; The potential impact of common types of cyber-attacks and data breaches on the agency’s operations and assets; How cyber-attacks and data breaches on the agency’s operations and assets could impact the operations and assets of other state agencies on the Enterprise State Network; How cyber-attacks and data breaches occur; Steps to be undertaken by the executive director or agency head and agency employees to protect their information and information systems; and The annual reporting requirements required of the executive director or agency head.