{"formats":[{"name":"JSON","format":"json","url":"\/downloads\/2025\/code-json\/2.2-2699.6.json"},{"name":"Plain Text","format":"text","url":"\/downloads\/2025\/code-text\/2.2-2699.6.txt"},{"name":"XML","format":"xml","url":"\/downloads\/2025\/code-xml\/2.2-2699.6.xml"},{"name":"HTML","format":"html","url":"\/downloads\/2025\/code-html\/2.2-2699.6.html"}],"law_id":74748,"edition_id":1,"section_id":74748,"structure_id":16600,"section_number":"2.2-2699.6","catch_line":"Powers and duties of the ITAC; report","history":"2010, cc. 136, 145; 2011, cc. 266, 313; 2016, c. 296; 2022, cc. 260, 261.","full_text":"A\n\nThe ITAC shall have the power and duty to:1\n\nAdopt rules and procedures for the conduct of its business;2\n\nAdvise the CIO regarding cybersecurity policies, standards, and guidelines, for (i) assessing security risks, (ii) determining appropriate security measures, (iii) performing security audits of government electronic information, (iv) strengthening the Commonwealth&#8217;s cybersecurity, and (v) protecting against and responding to breaches of information technology security;3\n\nAdvise the CIO on strategies and priorities for information technology for executive branch agencies;4\n\nAdvise the CIO on information technology planning and projects;5\n\nAdvise the CIO on policies, standards, and guidelines for information technology and data of the Commonwealth; and6\n\nAdvise the CIO on information technology budgeting, investments, and expenditures.B\n\nThe ITAC may appoint advisory subcommittees consisting of individuals with expertise in particular subject areas and information technology to advise the ITAC on the utilization of nationally recognized technical and data standards in such subject areas. If such a subcommittee is appointed by the ITAC, the CIO, or his designee, shall be an ex officio member and the Secretary of Administration may appoint representatives from other relevant Secretariats or state agencies as may be appropriate. Any such subcommittee may be appointed for a period of two years and may be reappointed by the ITAC at the end of any two-year period.C\n\nThe CIO shall report annually to the Governor and the General Assembly regarding the work of the ITAC and any advisory subcommittees.D\n\nAs used in this section, &#8220;information technology&#8221; has the same meaning as set forth in &#xA7; 2.2-2006.","order_by":null,"text":{"0":{"id":268621,"text":"The ITAC shall have the power and duty to:","type":"section","prefixes":["A"],"prefix":"A","entire_prefix":"A","prefix_anchor":"A","level":1,"next_prefix":"A1"},"1":{"id":268622,"text":"Adopt rules and procedures for the conduct of its business;","type":"section","prefixes":["A","1"],"prefix":"1","entire_prefix":"A1","prefix_anchor":"A1","level":2,"prior_prefix":"A","next_prefix":"A2"},"2":{"id":268623,"text":"Advise the CIO regarding cybersecurity policies, standards, and guidelines, for (i) assessing security risks, (ii) determining appropriate security measures, (iii) performing security audits of government electronic information, (iv) strengthening the Commonwealth&#8217;s cybersecurity, and (v) protecting against and responding to breaches of information technology security;","type":"section","prefixes":["A","2"],"prefix":"2","entire_prefix":"A2","prefix_anchor":"A2","level":2,"prior_prefix":"A1","next_prefix":"A3"},"3":{"id":268624,"text":"Advise the CIO on strategies and priorities for information technology for executive branch agencies;","type":"section","prefixes":["A","3"],"prefix":"3","entire_prefix":"A3","prefix_anchor":"A3","level":2,"prior_prefix":"A2","next_prefix":"A4"},"4":{"id":268625,"text":"Advise the CIO on information technology planning and projects;","type":"section","prefixes":["A","4"],"prefix":"4","entire_prefix":"A4","prefix_anchor":"A4","level":2,"prior_prefix":"A3","next_prefix":"A5"},"5":{"id":268626,"text":"Advise the CIO on policies, standards, and guidelines for information technology and data of the Commonwealth; and","type":"section","prefixes":["A","5"],"prefix":"5","entire_prefix":"A5","prefix_anchor":"A5","level":2,"prior_prefix":"A4","next_prefix":"A6"},"6":{"id":268627,"text":"Advise the CIO on information technology budgeting, investments, and expenditures.","type":"section","prefixes":["A","6"],"prefix":"6","entire_prefix":"A6","prefix_anchor":"A6","level":2,"prior_prefix":"A5","next_prefix":"B"},"7":{"id":268628,"text":"The ITAC may appoint advisory subcommittees consisting of individuals with expertise in particular subject areas and information technology to advise the ITAC on the utilization of nationally recognized technical and data standards in such subject areas. If such a subcommittee is appointed by the ITAC, the CIO, or his designee, shall be an ex officio member and the Secretary of Administration may appoint representatives from other relevant Secretariats or state agencies as may be appropriate. Any such subcommittee may be appointed for a period of two years and may be reappointed by the ITAC at the end of any two-year period.","type":"section","prefixes":["B"],"prefix":"B","entire_prefix":"B","prefix_anchor":"B","level":1,"prior_prefix":"A6","next_prefix":"C"},"8":{"id":268629,"text":"The CIO shall report annually to the Governor and the General Assembly regarding the work of the ITAC and any advisory subcommittees.","type":"section","prefixes":["C"],"prefix":"C","entire_prefix":"C","prefix_anchor":"C","level":1,"prior_prefix":"B","next_prefix":"D"},"9":{"id":268630,"text":"As used in this section, &#8220;information technology&#8221; has the same meaning as set forth in &#xA7; 2.2-2006.","type":"section","prefixes":["D"],"prefix":"D","entire_prefix":"D","prefix_anchor":"D","level":1,"prior_prefix":"C"}},"ancestry":[{"id":16600,"edition_id":1,"name":"Information Technology Advisory Council","identifier":"35","label":"article","depth":5,"order_by":1,"parent_id":12930,"metadata":{},"date_created":"2026-06-26 04:26:27","date_modified":"2026-06-26 04:26:27","permalink":{"id":175399,"object_type":"structure","relational_id":16600,"identifier":"35","token":"2.2\/I\/D\/26\/35","url":"\/2.2\/I\/D\/26\/35\/","edition_id":1,"permalink":0,"preferred":1}},{"id":12930,"edition_id":1,"name":"Councils","identifier":"26","label":"chapter","depth":4,"order_by":1,"parent_id":12785,"metadata":{},"date_created":"2026-06-26 03:44:02","date_modified":"2026-06-26 03:44:02","permalink":{"id":175183,"object_type":"structure","relational_id":12930,"identifier":"26","token":"2.2\/I\/D\/26","url":"\/2.2\/I\/D\/26\/","edition_id":1,"permalink":0,"preferred":1}},{"id":12785,"edition_id":1,"name":"State Authorities, Boards, Commissions, Councils, Foundations and Other Collegial Bodies","identifier":"D","label":"part","depth":3,"order_by":1,"parent_id":12784,"metadata":{},"date_created":"2026-06-26 03:43:53","date_modified":"2026-06-26 03:43:53","permalink":{"id":173913,"object_type":"structure","relational_id":12785,"identifier":"D","token":"2.2\/I\/D","url":"\/2.2\/I\/D\/","edition_id":1,"permalink":0,"preferred":1}},{"id":12784,"edition_id":1,"name":"Organization of State Government","identifier":"I","label":"subtitle","depth":2,"order_by":1,"parent_id":12749,"metadata":{},"date_created":"2026-06-26 03:43:53","date_modified":"2026-06-26 03:43:53","permalink":{"id":171455,"object_type":"structure","relational_id":12784,"identifier":"I","token":"2.2\/I","url":"\/2.2\/I\/","edition_id":1,"permalink":0,"preferred":1}},{"id":12749,"edition_id":1,"name":"Administration of Government","identifier":"2.2","label":"title","depth":1,"order_by":1,"parent_id":null,"metadata":{},"date_created":"2026-06-26 03:43:51","date_modified":"2026-06-26 03:43:51","permalink":{"id":171453,"object_type":"structure","relational_id":12749,"identifier":"2.2","token":"2.2","url":"\/2.2\/","edition_id":1,"permalink":0,"preferred":1}}],"structure_contents":[{"id":72200,"structure_id":16600,"section_number":"2.2-2699.5","catch_line":"Information Technology Advisory Council; membership; terms; quorum; compensation; staff","url":"\/2.2-2699.5\/","token":"2.2\/I\/D\/26\/35\/2.2-2699.5","metadata":false},{"id":74748,"structure_id":16600,"section_number":"2.2-2699.6","catch_line":"Powers and duties of the ITAC; report","url":"\/2.2-2699.6\/","token":"2.2\/I\/D\/26\/35\/2.2-2699.6","metadata":false},{"id":77416,"structure_id":16600,"section_number":"2.2-2699.7","catch_line":"Repealed","url":"\/2.2-2699.7\/","token":"2.2\/I\/D\/26\/35\/2.2-2699.7","metadata":false}],"previous_section":{"id":72200,"structure_id":16600,"section_number":"2.2-2699.5","catch_line":"Information Technology Advisory Council; membership; terms; quorum; compensation; staff","url":"\/2.2-2699.5\/","token":"2.2\/I\/D\/26\/35\/2.2-2699.5","metadata":false},"next_section":{"id":77416,"structure_id":16600,"section_number":"2.2-2699.7","catch_line":"Repealed","url":"\/2.2-2699.7\/","token":"2.2\/I\/D\/26\/35\/2.2-2699.7","metadata":false},"metadata":false,"official_url":"https:\/\/law.lis.virginia.gov\/vacode\/2.2-2699.6\/","history_text":"<p>This law was first created in 2010. The record of its establishment is cataloged in chapters <a href=\"https:\/\/legacylis.virginia.gov\/cgi-bin\/legp604.exe?101+ful+CHAP0136\">136<\/a> and <a href=\"https:\/\/legacylis.virginia.gov\/cgi-bin\/legp604.exe?101+ful+CHAP0145\">145<\/a> of that year\u2019s edition of \u201cActs of Assembly,\u201d the annual state publication listing all changes made to the Code of Virginia in that year. It has been modified 3 times. Those modifications are cataloged by \u201cThe Acts of Assembly,\u201d a state publication, by year and chapter. Those modifications that can be read on the General Assembly\u2019s website will be linked accordingly. Those modifications are as follows: in 2011, chapters <a href=\"https:\/\/legacylis.virginia.gov\/cgi-bin\/legp604.exe?111+ful+CHAP0266\">266<\/a> and <a href=\"https:\/\/legacylis.virginia.gov\/cgi-bin\/legp604.exe?111+ful+CHAP0313\">313<\/a>; in 2016, chapter <a href=\"https:\/\/legacylis.virginia.gov\/cgi-bin\/legp604.exe?161+ful+CHAP0296\">296<\/a>; in 2022, chapters <a href=\"https:\/\/legacylis.virginia.gov\/cgi-bin\/legp604.exe?221+ful+CHAP0260\">260<\/a> and <a href=\"https:\/\/legacylis.virginia.gov\/cgi-bin\/legp604.exe?221+ful+CHAP0261\">261<\/a>.<\/p>","references":[{"id":84139,"section_number":"2.2-1115.1","catch_line":"Standard vendor accounting information","order_by":null,"url":"\/2.2-1115.1\/"}],"refers_to":[{"id":67174,"section_number":"2.2-2006","catch_line":"Definitions","order_by":null,"url":"\/2.2-2006\/"}],"permalink":{"id":175405,"object_type":"law","relational_id":74748,"identifier":"2.2-2699.6","token":"2.2\/I\/D\/26\/35\/2.2-2699.6","url":"\/2.2-2699.6\/","edition_id":1,"permalink":0,"preferred":1},"url":"\/2.2-2699.6\/","token":"2.2\/I\/D\/26\/35\/2.2-2699.6","dublin_core":{"Title":"Powers and duties of the ITAC; report","Type":"Text","Format":"text\/html","Identifier":"\u00a7 2.2-2699.6","Relation":"Code of Virginia"},"html":"\n\t\t\t\t\t\t<section id=\"A\"><p><span class=\"prefix-number\">A.<\/span> The ITAC shall have the power and duty to: <a id=\"paragraph-268621\" class=\"section-permalink\" href=\"https:\/\/vacode.org\/2.2-2699.6\/#A\"><i class=\"fa fa-link\"><\/i><\/a><\/p><\/section>\n\t\t\t\t\t\t<section id=\"A1\" class=\"indent-1\"><p><span class=\"prefix-number\">1.<\/span> Adopt rules and procedures for the conduct of its business; <a id=\"paragraph-268622\" class=\"section-permalink\" href=\"https:\/\/vacode.org\/2.2-2699.6\/#A1\"><i class=\"fa fa-link\"><\/i><\/a><\/p><\/section>\n\t\t\t\t\t\t<section id=\"A2\" class=\"indent-1\"><p><span class=\"prefix-number\">2.<\/span> Advise the CIO regarding cybersecurity policies, standards, and guidelines, for (i) assessing security risks, (ii) determining appropriate security measures, (iii) performing security audits of government electronic information, (iv) strengthening the Commonwealth&#8217;s cybersecurity, and (v) protecting against and responding to breaches of <span class=\"dictionary\">information technology<\/span> security; <a id=\"paragraph-268623\" class=\"section-permalink\" href=\"https:\/\/vacode.org\/2.2-2699.6\/#A2\"><i class=\"fa fa-link\"><\/i><\/a><\/p><\/section>\n\t\t\t\t\t\t<section id=\"A3\" class=\"indent-1\"><p><span class=\"prefix-number\">3.<\/span> Advise the CIO on strategies and priorities for <span class=\"dictionary\">information technology<\/span> for executive branch agencies; <a id=\"paragraph-268624\" class=\"section-permalink\" href=\"https:\/\/vacode.org\/2.2-2699.6\/#A3\"><i class=\"fa fa-link\"><\/i><\/a><\/p><\/section>\n\t\t\t\t\t\t<section id=\"A4\" class=\"indent-1\"><p><span class=\"prefix-number\">4.<\/span> Advise the CIO on <span class=\"dictionary\">information technology<\/span> planning and projects; <a id=\"paragraph-268625\" class=\"section-permalink\" href=\"https:\/\/vacode.org\/2.2-2699.6\/#A4\"><i class=\"fa fa-link\"><\/i><\/a><\/p><\/section>\n\t\t\t\t\t\t<section id=\"A5\" class=\"indent-1\"><p><span class=\"prefix-number\">5.<\/span> Advise the CIO on policies, standards, and guidelines for <span class=\"dictionary\">information technology<\/span> and data of the Commonwealth; and <a id=\"paragraph-268626\" class=\"section-permalink\" href=\"https:\/\/vacode.org\/2.2-2699.6\/#A5\"><i class=\"fa fa-link\"><\/i><\/a><\/p><\/section>\n\t\t\t\t\t\t<section id=\"A6\" class=\"indent-1\"><p><span class=\"prefix-number\">6.<\/span> Advise the CIO on <span class=\"dictionary\">information technology<\/span> budgeting, investments, and expenditures. <a id=\"paragraph-268627\" class=\"section-permalink\" href=\"https:\/\/vacode.org\/2.2-2699.6\/#A6\"><i class=\"fa fa-link\"><\/i><\/a><\/p><\/section>\n\t\t\t\t\t\t<section id=\"B\"><p><span class=\"prefix-number\">B.<\/span> The ITAC may appoint advisory subcommittees consisting of individuals with expertise in particular subject areas and <span class=\"dictionary\">information technology<\/span> to advise the ITAC on the utilization of nationally recognized technical and data standards in such subject areas. If such a subcommittee is appointed by the ITAC, the CIO, or his designee, shall be an ex officio member and the Secretary of Administration may appoint representatives from other relevant Secretariats or state agencies as may be appropriate. Any such subcommittee may be appointed for a period of two years and may be reappointed by the ITAC at the end of any two-year period. <a id=\"paragraph-268628\" class=\"section-permalink\" href=\"https:\/\/vacode.org\/2.2-2699.6\/#B\"><i class=\"fa fa-link\"><\/i><\/a><\/p><\/section>\n\t\t\t\t\t\t<section id=\"C\"><p><span class=\"prefix-number\">C.<\/span> The CIO shall report annually to the Governor and the General Assembly regarding the work of the ITAC and any advisory subcommittees. <a id=\"paragraph-268629\" class=\"section-permalink\" href=\"https:\/\/vacode.org\/2.2-2699.6\/#C\"><i class=\"fa fa-link\"><\/i><\/a><\/p><\/section>\n\t\t\t\t\t\t<section id=\"D\"><p><span class=\"prefix-number\">D.<\/span> As used in this section, &#8220;<span class=\"dictionary\">information technology<\/span>&#8221; has the same meaning as set forth in &#xA7; <a class=\"law\" title=\"Definitions\" href=\"\/2.2-2006\/\">2.2-2006<\/a>. <a id=\"paragraph-268630\" class=\"section-permalink\" href=\"https:\/\/vacode.org\/2.2-2699.6\/#D\"><i class=\"fa fa-link\"><\/i><\/a><\/p><\/section>","plain_text":"                                 CODE OF VIRGINIA\n\nPOWERS AND DUTIES OF THE ITAC; REPORT (\u00a7 2.2-2699.6)\n\nA. The ITAC shall have the power and duty to:\n\n   1. Adopt rules and procedures for the conduct of its business;\n\n   2. Advise the CIO regarding cybersecurity policies, standards, and guidelines,\n   for (i) assessing security risks, (ii) determining appropriate security\n   measures, (iii) performing security audits of government electronic\n   information, (iv) strengthening the Commonwealth&#8217;s cybersecurity, and\n   (v) protecting against and responding to breaches of information technology\n   security;\n\n   3. Advise the CIO on strategies and priorities for information technology for\n   executive branch agencies;\n\n   4. Advise the CIO on information technology planning and projects;\n\n   5. Advise the CIO on policies, standards, and guidelines for information\n   technology and data of the Commonwealth; and\n\n   6. Advise the CIO on information technology budgeting, investments, and\n   expenditures.\n\nB. The ITAC may appoint advisory subcommittees consisting of individuals with\nexpertise in particular subject areas and information technology to advise the\nITAC on the utilization of nationally recognized technical and data standards in\nsuch subject areas. If such a subcommittee is appointed by the ITAC, the CIO, or\nhis designee, shall be an ex officio member and the Secretary of Administration\nmay appoint representatives from other relevant Secretariats or state agencies\nas may be appropriate. Any such subcommittee may be appointed for a period of\ntwo years and may be reappointed by the ITAC at the end of any two-year period.\n\nC. The CIO shall report annually to the Governor and the General Assembly\nregarding the work of the ITAC and any advisory subcommittees.\n\nD. As used in this section, &#8220;information technology&#8221; has the same\nmeaning as set forth in &#xA7; 2.2-2006.\n\nHISTORY: 2010, cc. 136, 145; 2011, cc. 266, 313; 2016, c. 296; 2022, cc. 260,\n261.","edition":{"id":1,"name":"2025","slug":"2025","date_created":"2026-06-21 22:39:22","date_modified":"2026-06-21 22:39:22","current":1,"order_by":1,"last_import":null}}