Oregon Law
Law as of Jan 1, 2026
Chapter contents
276A.200Legislative findings on information resources 276A.203State Chief Information Officer; qualifications; duties; Enterprise Information Resources Management Strategy; rules 276A.206Oversight of state information and telecommunications technology by State Chief Information Officer; policy; rules; application for designation as community of interest 276A.209State Information Technology Operating Fund 276A.223Requirement that state agency or public corporation obtain quality management services when implementing information technology initiative; reports; exceptions 276A.226State agency funding requests for information technology; review by State Chief Information Officer and Enterprise Information Services; priority rankings; biennial report 276A.230Definitions 276A.233Information technology portfolio-based management; inventory; standards; rules; exception 276A.236Enterprise information resources management; adoption and implementation of strategy; state agency information technology initiatives costing more than $1 million 276A.239Portfolio-based management of information technology resources for Secretary of State 276A.242Portfolio-based management of information technology resources for State Treasurer 276A.250Definitions 276A.253Oregon transparency website 276A.256Reports of tax expenditures connected to economic development 276A.259Transparency Oregon Advisory Commission; members; duties; terms; reports 276A.262Transparency Oregon Advisory Commission Fund 276A.270Definitions 276A.273Electronic Government Portal Advisory Board 276A.276Ability to offer government services through portal; portal provider fee; rules 276A.300Information systems security in executive department; rules 276A.303Information systems security for Secretary of State, State Treasurer and Attorney General 276A.306Information security incidents and assessments; reports 276A.323State agency coordination 276A.326[2017 c.513 §3; 2021 c.17 §4; 2021 c.539 §29; repealed by 2023 c.489 §2 (276A.560 enacted in lieu of 276A.326)] 276A.329[2017 c.513 §4; repealed by 2023 c.489 §6 (276A.555 enacted in lieu of 276A.329)] 276A.332Authority of State Chief Information Officer to enter into agreements 276A.335Moneys from federal government and other sources 276A.340Definitions 276A.342State agencies prohibited from using covered products; risk mitigation; exceptions 276A.344Policies and standards; national security threat; rules 276A.346Secretary of State prohibited from using covered products; risk mitigation; exceptions 276A.348State Treasurer prohibited from using covered products; risk mitigation; exceptions 276A.350Definitions 276A.353Chief Data Officer; duties; rules 276A.356Open data standard 276A.359Technical standards manual 276A.362Release of publishable data on web portal; exemptions; rules 276A.365Information management by state agencies 276A.368Purpose of data; limitation of liability; publishable data in public domain 276A.371Obligations of state agency under public records law 276A.374Application to Secretary of State and State Treasurer; rules 276A.400Policy 276A.403Coordination of telecommunications systems 276A.406Acquisition of broadband and communications services 276A.409Use of agency travel and transportation funds for telecommunications services 276A.412Contracts for telecommunications equipment and services not to exceed 10 years; exception for broadband infrastructure; contract benefits for designated communities of interest 276A.415Agreements to fund or acquire telecommunications equipment and services 276A.418Public contracts for broadband Internet access service; prohibitions; exceptions; rules 276A.421Provision of broadband services that compete with services of private telecommunications provider; circumstances of competition; broadband services advisory committee; rules 276A.424Connecting Oregon Schools Fund; rules 276A.500Definitions 276A.503Oregon Geographic Information Council; establishment; purposes; membership; terms of office 276A.506Powers of council; advisory committees 276A.509Public body duty to share geospatial framework data with council; conditions and exceptions; methods for sharing; limitations of liability 276A.512Oregon Geographic Information Council Fund; records and reports 276A.515State geographic information officer; qualifications; duties 276A.550Definitions 276A.555Oregon Cybersecurity Center of Excellence; purpose; operating agreement; strategic plan; biennial report 276A.560Oregon Cybersecurity Advisory Council 276A.565Oregon Cybersecurity Center of Excellence Operating Fund; biennial report 276A.570Oregon Cybersecurity Workforce Development Fund; biennial report 276A.575Oregon Cybersecurity Grant Program Fund; standards and requirements; biennial report

Chapter 276A — Information Technology

ORS 276A.332 Authority of State Chief Information Officer to enter into agreements

Notwithstanding any other provision of law, the State Chief Information Officer may:

(1)

Enter into any agreement, or any configuration of agreements, relating to state cybersecurity with any private entity or unit of government, or with any configuration of private entities and units of government. The subject of agreements entered into under this section may include, but need not be limited to, cybersecurity training and awareness, information technology security assessments and vulnerability testing, cyber disruption and incident response, risk-based remediation measures and application life cycle maintenance.

(2)

Include in any agreement entered into under this section any financing mechanisms, including but not limited to the imposition and collection of franchise fees or user fees and the development or use of other revenue sources.

Official sources · 1Tap to view provenance details

Online copy of the published ORS edition

This independent, nongovernmental service preserves the official source behind every rendered section.

Provenance

Version history

2026-01-01

2025 Oregon Revised Statutes — official online source