Colorado SB185 enhances security procedures for the Office of Information Technology by establishing new reporting and auditing requirements.

Colorado SB185 mandates the Office of Information Technology (OIT) to submit two annual reports to the Joint Technology Committee (JTC). The first is a compliance report detailing OIT's adherence to security standards, unresolved audit recommendations, and remediation timelines. The second is a statewide information technology security risk report assessing the overall security posture of state agency IT systems. The bill also requires OIT to maintain an updated list of active IT vendor contracts and architecture diagrams for ongoing services.

Colorado SB185 enhances security procedures for the Office of Information Technology by establishing new reporting and auditing requirements.

Colorado SB185 mandates the Office of Information Technology (OIT) to submit two annual reports to the Joint Technology Committee (JTC). The first is a compliance report detailing OIT's adherence to security standards, unresolved audit recommendations, and remediation timelines. The second is a statewide information technology security risk report assessing the overall security posture of state agency IT systems. The bill also requires OIT to maintain an updated list of active IT vendor contracts and architecture diagrams for ongoing services.