Virginia Law

Article 35. Information Technology Advisory Council.

A. The Information Technology Advisory Council (ITAC) is established as an advisory council, within the meaning of § 2.2-2100, in the executive branch of state government. The ITAC shall be responsible for advising, and making recommendations to, the Chief Information Officer of the Commonwealth (CIO) and the Secretary of Administration regarding information technology in the Commonwealth, as detailed in § 2.2-2699.6.

B. The ITAC shall consist of not more than 20 members as follows: (i) the Secretary of Administration, or his designee, the CIO, and another of the Governor's Secretaries as defined in subsection E of § 2.2-200, or his designee, all of whom shall serve ex officio with voting privileges; (ii) four members of the House of Delegates, to be appointed by the Speaker of the House of Delegates; (iii) three members of the Senate, to be appointed by the Senate Committee on Rules; and (iv) an even number, not to exceed 10, of nonlegislative citizen members to be appointed by the Governor and serve with voting privileges.

Legislative members and ex officio members of the ITAC shall serve terms coincident with their terms of office. Nonlegislative citizen members shall represent a diversity of appropriate experience and expertise and, after an initial staggering of terms, shall be appointed for terms of four years. Appointments to fill vacancies, other than by expiration of a term, shall be for the unexpired terms. All members may be reappointed. However, no nonlegislative citizen member shall serve more than two consecutive four-year terms. Initial appointment terms of one year or two years and the remainder of any term to which a member is appointed to fill a vacancy shall not constitute a term in determining the member's eligibility for reappointment. Vacancies shall be filled in the same manner as the original appointments.

C. The ITAC shall elect a chairman and vice-chairman annually from among the members, except that neither the Secretary of Administration nor the CIO may serve as chairman. A majority of the members shall constitute a quorum. The meetings of the ITAC shall be held at the call of the chairman, the Secretary of Administration, or the CIO, or whenever the majority of the members so request.

D. Legislative members of the ITAC shall receive such compensation as provided in § 30-19.12, and nonlegislative citizen members shall receive such compensation for the performance of their duties as provided in § 2.2-2813. All members shall be reimbursed for all reasonable and necessary expenses incurred in the performance of their duties as provided in §§ 2.2-2813 and 2.2-2825. Funding for the costs of compensation and expenses of the members shall be provided by the Virginia Information Technologies Agency.

E. The disclosure requirements of subsection B of § 2.2-3114 of the State and Local Government Conflict of Interests Act shall apply to nonlegislative citizen members of the ITAC.

F. The Virginia Information Technologies Agency shall serve as staff to the ITAC.

2010, cc. 136, 145; 2011, cc. 691, 714; 2013, cc. 161, 227; 2014, cc. 115, 490; 2020, c. 738; 2022, cc. 260, 261.

A. The ITAC shall have the power and duty to:

1. Adopt rules and procedures for the conduct of its business;

2. Advise the CIO regarding cybersecurity policies, standards, and guidelines, for (i) assessing security risks, (ii) determining appropriate security measures, (iii) performing security audits of government electronic information, (iv) strengthening the Commonwealth's cybersecurity, and (v) protecting against and responding to breaches of information technology security;

3. Advise the CIO on strategies and priorities for information technology for executive branch agencies;

4. Advise the CIO on information technology planning and projects;

5. Advise the CIO on policies, standards, and guidelines for information technology and data of the Commonwealth; and

6. Advise the CIO on information technology budgeting, investments, and expenditures.

B. The ITAC may appoint advisory subcommittees consisting of individuals with expertise in particular subject areas and information technology to advise the ITAC on the utilization of nationally recognized technical and data standards in such subject areas. If such a subcommittee is appointed by the ITAC, the CIO, or his designee, shall be an ex officio member and the Secretary of Administration may appoint representatives from other relevant Secretariats or state agencies as may be appropriate. Any such subcommittee may be appointed for a period of two years and may be reappointed by the ITAC at the end of any two-year period.

C. The CIO shall report annually to the Governor and the General Assembly regarding the work of the ITAC and any advisory subcommittees.

D. As used in this section, "information technology" has the same meaning as set forth in § 2.2-2006.

2010, cc. 136, 145; 2011, cc. 266, 313; 2016, c. 296; 2022, cc. 260, 261.

Repealed by Acts 2022, cc. 260, 261.