<?xml version="1.0"?>
<law><site_title>Virginia Decoded</site_title><site_url>https://vacode.org</site_url><law_id>80478</law_id><section_number>2.2-2007</section_number><catch_line>Powers of the CIO</catch_line><edition url="https://vacode.org/2025/" slug="2025" current="TRUE" last_updated="">2025</edition><referred_to_by><reference>2.2-1509.3</reference><reference>2.2-2016.1</reference><reference>2.2-2023</reference></referred_to_by><structure><unit label="title" level="1" order_by="1" identifier="2.2">Administration of Government</unit><unit label="subtitle" level="2" order_by="1" identifier="I">Organization of State Government</unit><unit label="part" level="3" order_by="1" identifier="C">State Agencies Related to the General Operation of Government</unit><unit label="chapter" level="4" order_by="1" identifier="20.1">Virginia Information Technologies Agency</unit><unit label="article" level="5" order_by="1" identifier="1">General Provisions</unit></structure><text>
						<section id="A"><p><span class="prefix-number">A.</span> The CIO shall promulgate regulations necessary or incidental to the performance of duties or execution of powers conferred under this chapter. The CIO shall also develop policies, standards, and guidelines for the planning, budgeting, procurement, development, maintenance, security, and operations of <span class="dictionary">information technology</span> for executive branch agencies. Such policies, standards, and guidelines shall include those necessary to: <a id="paragraph-288274" class="section-permalink" href="https://vacode.org/2.2-2007/#A"><i class="fa fa-link"/></a></p></section>
						<section id="A1" class="indent-1"><p><span class="prefix-number">1.</span> Support state and local government exchange, acquisition, storage, use, sharing, and distribution of data and related technologies. <a id="paragraph-288275" class="section-permalink" href="https://vacode.org/2.2-2007/#A1"><i class="fa fa-link"/></a></p></section>
						<section id="A2" class="indent-1"><p><span class="prefix-number">2.</span> Support the development of electronic transactions including the use of electronic signatures as provided in &#xA7; <a class="law" title="Acceptance and distribution of electronic records by public bodies; electronic filing of information permitted" href="/59.1-496/">59.1-496</a>. <a id="paragraph-288276" class="section-permalink" href="https://vacode.org/2.2-2007/#A2"><i class="fa fa-link"/></a></p></section>
						<section id="A3" class="indent-1"><p><span class="prefix-number">3.</span> Support a unified approach to <span class="dictionary">information technology</span> across the totality of state government, thereby assuring that the citizens and businesses of the Commonwealth receive the greatest possible security, value, and convenience from investments made in technology. <a id="paragraph-288277" class="section-permalink" href="https://vacode.org/2.2-2007/#A3"><i class="fa fa-link"/></a></p></section>
						<section id="A4" class="indent-1"><p><span class="prefix-number">4.</span> Ensure that the costs of <span class="dictionary">information technology</span> systems, products, data, and services are contained through the shared use of existing or planned equipment, data, or services. <a id="paragraph-288278" class="section-permalink" href="https://vacode.org/2.2-2007/#A4"><i class="fa fa-link"/></a></p></section>
						<section id="A5" class="indent-1"><p><span class="prefix-number">5.</span> Provide for the effective management of information technology investments through their entire life cycles, including identification, business case development, selection, procurement, implementation, operation, performance evaluation, and enhancement or retirement. Such policies, standards, and guidelines shall include, at a minimum, the periodic review by the CIO of <span class="dictionary">agency</span> <span class="dictionary">Commonwealth information technology projects</span>. <a id="paragraph-288279" class="section-permalink" href="https://vacode.org/2.2-2007/#A5"><i class="fa fa-link"/></a></p></section>
						<section id="A6" class="indent-1"><p><span class="prefix-number">6.</span> Establish an Information Technology Investment Management Standard based on acceptable technology investment methods to ensure that all <span class="dictionary">executive branch agency</span> technology expenditures are an integral part of the Commonwealth&#x2019;s performance management system, produce value for the agency and the Commonwealth, and are aligned with (i) agency strategic plans, (ii) the Governor&#x2019;s policy objectives, and (iii) the long-term objectives of the Council on Virginia&#x2019;s Future. <a id="paragraph-288280" class="section-permalink" href="https://vacode.org/2.2-2007/#A6"><i class="fa fa-link"/></a></p></section>
						<section id="B"><p><span class="prefix-number">B.</span> In addition to other such duties as the <span class="dictionary">Secretary</span> may assign, the CIO shall: <a id="paragraph-288281" class="section-permalink" href="https://vacode.org/2.2-2007/#B"><i class="fa fa-link"/></a></p></section>
						<section id="B1" class="indent-1"><p><span class="prefix-number">1.</span> Oversee and administer the Virginia Technology Infrastructure Fund created pursuant to &#xA7; <a class="law" title="Virginia Technology Infrastructure Fund created; contributions" href="/2.2-2023/">2.2-2023</a>. <a id="paragraph-288282" class="section-permalink" href="https://vacode.org/2.2-2007/#B1"><i class="fa fa-link"/></a></p></section>
						<section id="B2" class="indent-1"><p><span class="prefix-number">2.</span> Report annually to the Governor, the <span class="dictionary">Secretary</span>, and the Joint Commission on Technology and Science created pursuant to &#xA7; <a class="law" title="Commission established; powers and duties" href="/30-85/">30-85</a> on the use and application of information technology by executive branch agencies to increase economic efficiency, citizen convenience, and public access to state government. <a id="paragraph-288283" class="section-permalink" href="https://vacode.org/2.2-2007/#B2"><i class="fa fa-link"/></a></p></section>
						<section id="B3" class="indent-1"><p><span class="prefix-number">3.</span> Prepare annually a report for submission to the <span class="dictionary">Secretary</span>, the Information Technology Advisory Council, and the Joint Commission on Technology and Science on a prioritized list of Recommended Technology Investment Projects (RTIP Report) based upon <span class="dictionary">major information technology projects</span> submitted for business case approval pursuant to this chapter. As part of the RTIP Report, the CIO shall develop and regularly update a methodology for prioritizing projects based upon the allocation of points to defined criteria. The criteria and their definitions shall be presented in the RTIP Report. For each project recommended for funding in the RTIP Report, the CIO shall indicate the number of points and how they were awarded. For each listed project, the CIO shall also report (i) all projected costs of ongoing operations and maintenance activities of the project for the next three biennia following project implementation; (ii) a justification and description for each project baseline change; and (iii) whether the project fails to incorporate existing standards for the maintenance, exchange, and security of data. This report shall also include trends in current projected information technology spending by executive branch agencies and secretariats, including spending on projects, operations and maintenance, and payments to VITA. Agencies shall provide all project and cost information required to complete the RTIP Report to the CIO prior to May 31 immediately preceding any budget biennium in which the project appears in the Governor&#x2019;s budget bill. <a id="paragraph-288284" class="section-permalink" href="https://vacode.org/2.2-2007/#B3"><i class="fa fa-link"/></a></p></section>
						<section id="B4" class="indent-1"><p><span class="prefix-number">4.</span> Provide oversight for <span class="dictionary">executive branch agency</span> efforts to modernize the planning, development, implementation, improvement, operations and maintenance, and retirement of Commonwealth information technology, including oversight for the selection, development and management of <span class="dictionary">enterprise</span> information technology. <a id="paragraph-288285" class="section-permalink" href="https://vacode.org/2.2-2007/#B4"><i class="fa fa-link"/></a></p></section>
						<section id="B5" class="indent-1"><p><span class="prefix-number">5.</span> Develop statewide technical and data standards and specifications for information technology and related systems, including (i) the efficient exchange of electronic information and technology, including infrastructure, between the public and private sectors in the Commonwealth and (ii) the utilization of nationally recognized technical and data standards for health information technology systems or software purchased by an <span class="dictionary">executive branch agency</span>. <a id="paragraph-288286" class="section-permalink" href="https://vacode.org/2.2-2007/#B5"><i class="fa fa-link"/></a></p></section>
						<section id="B6" class="indent-1"><p><span class="prefix-number">6.</span> Direct the compilation and maintenance of an inventory of information technology, including but not limited to personnel, facilities, equipment, goods, and <span class="dictionary">contracts</span> for services. <a id="paragraph-288287" class="section-permalink" href="https://vacode.org/2.2-2007/#B6"><i class="fa fa-link"/></a></p></section>
						<section id="B7" class="indent-1"><p><span class="prefix-number">7.</span> Provide for the centralized marketing, provision, leasing, and executing of licensing agreements for electronic access to public information and government services through the Internet, wireless devices, personal digital assistants, kiosks, or other such related media on terms and conditions as may be determined to be in the best interest of the Commonwealth. VITA may fix and collect fees and charges for (i) public information, media, and other incidental services furnished by it to any private individual or entity, notwithstanding the charges set forth in &#xA7; <a class="law" title="Public records to be open to inspection; procedure for requesting records and responding to request; charges; transfer of records for storage, etc" href="/2.2-3704/">2.2-3704</a>, and (ii) such use and services it provides to any <span class="dictionary">executive branch agency</span> or local government. Nothing in this subdivision authorizing VITA to fix and collect fees for providing information services shall be construed to prevent access to the public records of any public body pursuant to the provisions of the Virginia Freedom of Information Act (&#xA7; <a class="law" title="Short title; policy" href="/2.2-3700/">2.2-3700</a> et seq.). VITA is authorized, subject to the approval by the <span class="dictionary">Secretary</span> of Administration and any other affected Secretariat, to delegate the powers and responsibilities granted in this subdivision to any agency within the executive branch. <a id="paragraph-288288" class="section-permalink" href="https://vacode.org/2.2-2007/#B7"><i class="fa fa-link"/></a></p></section>
						<section id="B8" class="indent-1"><p><span class="prefix-number">8.</span> Periodically evaluate the feasibility of outsourcing information technology resources and services, and outsource those resources and services that are feasible and beneficial to the Commonwealth. <a id="paragraph-288289" class="section-permalink" href="https://vacode.org/2.2-2007/#B8"><i class="fa fa-link"/></a></p></section>
						<section id="B9" class="indent-1"><p><span class="prefix-number">9.</span> Have the authority to enter into and <span class="dictionary">amend</span> <span class="dictionary">contracts</span>, including <span class="dictionary">contracts</span> with one or more other public bodies, or public agencies or institutions or localities of the several states, of the United States or its territories, or the District of Columbia, for the provision of information technology services. <a id="paragraph-288290" class="section-permalink" href="https://vacode.org/2.2-2007/#B9"><i class="fa fa-link"/></a></p></section>
						<section id="C"><p><span class="prefix-number">C.</span> Consistent with &#xA7; <a class="law" title="Additional powers and duties related to the procurement of information technology" href="/2.2-2012/">2.2-2012</a>, the CIO may enter into public-private partnership <span class="dictionary">contracts</span> to finance or implement information technology programs and projects. The CIO may <span class="dictionary">issue</span> a request for information to seek out potential private partners interested in providing programs or projects pursuant to an agreement under this subsection. The compensation for such services shall be computed with reference to and paid from the increased revenue or cost savings attributable to the successful implementation of the program or project for the period specified in the <span class="dictionary">contract</span>. The CIO shall be responsible for reviewing and approving the programs and projects and the terms of <span class="dictionary">contracts</span> for same under this subsection. The CIO shall determine annually the total amount of increased revenue or cost savings attributable to the successful implementation of a program or project under this subsection and such amount shall be deposited in the Virginia Technology Infrastructure Fund created in &#xA7; <a class="law" title="Virginia Technology Infrastructure Fund created; contributions" href="/2.2-2023/">2.2-2023</a>. The CIO is authorized to use moneys deposited in the Fund to pay private partners pursuant to the terms of <span class="dictionary">contracts</span> under this subsection. All moneys in excess of that required to be paid to private partners, as determined by the CIO, shall be reported to the Comptroller and retained in the Fund. The CIO shall prepare an annual report to the Governor, the <span class="dictionary">Secretary</span>, and General Assembly on all <span class="dictionary">contracts</span> under this subsection, describing each information technology program or project, its progress, revenue impact, and such other information as may be relevant. <a id="paragraph-288291" class="section-permalink" href="https://vacode.org/2.2-2007/#C"><i class="fa fa-link"/></a></p></section>
						<section id="D"><p><span class="prefix-number">D.</span> Executive branch agencies shall cooperate with VITA in identifying the development and operational requirements of proposed information technology systems, products, data, and services, including the proposed use, functionality, and capacity, and the total cost of acquisition, operation, and maintenance. <a id="paragraph-288292" class="section-permalink" href="https://vacode.org/2.2-2007/#D"><i class="fa fa-link"/></a></p></section></text><history>1999, cc. 412, 421, 433, &#xA7; 2.1-51.47; 2000, c. 995; 2001, c. 844, &#xA7; 2.2-226; 2002, c. 424; 2003, cc. 981, 1021; 2005, cc. 933, 945; 2007, cc. 276, 701; 2009, c. 86; 2010, cc. 136, 145; 2011, c. 739; 2015, c. 768; 2016, c. 296; 2020, c. 738.</history><metadata></metadata></law>
