PRIA Logo™
ColoradoSB26-1852026 Regular SessionSenate

Enhance Security of Office of Information Technology

Sponsored By: Brianna Titone (Democratic), Janice Marchman (Democratic), Mark Baisley (Republican), Rebecca Keltie (Republican)

Signed by Governor

Telecommunications & Information Technology

Your PRIA Score

Score Hidden

Personalized for You

How does this bill affect your finances?

Sign up for a PRIA Policy Scan to see your personalized alignment score for this bill and every other piece of legislation we track. We analyze your financial profile against policy provisions to show you exactly what matters to your wallet.

Free to start

Bill Overview

Analyzed Economic Effects

3 provisions identified: 0 benefits, 0 costs, 3 mixed.

Central list of state IT contracts

The Office of Information Technology keeps a quarterly-updated list of active IT vendor contracts for state agencies. Each entry shows the vendor, contract value, end date, and a data-criticality tier. State agency IT leaders and Joint Technology Committee members can access the list. When an agency begins an IT buy with prior approval from the OIT procurement official, it must give OIT this contract data. Ongoing service contracts must keep system architecture diagrams updated at least once a year. OIT makes a one-time budget request to build the system and may seek added money from the Technology Risk Prevention and Response Fund.

CISO approval and emergency standards

The Office cannot publish or use a technical IT standard unless it is posted. If it covers security, access, or data handling, the CISO must approve it. In a security emergency, the CISO can allow immediate action, but the Office must post the standard within 72 hours. Emergency standards end after 90 days unless the normal posting and approval happen. The CIO cannot delegate any duty or power that the law gives to the CISO.

Stronger oversight of state IT security

Lawmakers can call the state CISO to testify about the IT security compliance report. Within 90 days after the CISO files that report, the committee can seek a special audit if fixes are two or more years late or the report conflicts with a past audit. If both committees approve, the State Auditor must run the audit, may hire a qualified firm, and must finish within 12 months. The report goes to the Audit Committee, Technology Committee, Budget Committee, and the Governor. The Office of Information Technology must reimburse audit costs and may use the Technology Risk Prevention and Response Fund.

Sponsors & Cosponsors

Sponsors

  • Brianna Titone

    Democratic • House

  • Janice Marchman

    Democratic • Senate

  • Mark Baisley

    Republican • Senate

  • Rebecca Keltie

    Republican • House

Cosponsors

  • Bob Marshall

    Democratic • House

  • Chad Clifford

    Democratic • House

  • Jennifer Bacon

    Democratic • House

  • Jamie Jackson

    Democratic • House

  • Michael Carter

    Democratic • House

  • Manny Rutinel

    Democratic • House

  • James Coleman

    Democratic • Senate

Roll Call Votes

No roll call votes available for this bill.

Actions Timeline

  1. Governor Signed

    6/2/2026House

  2. Signed by the President of the Senate

    5/22/2026Senate

  3. Signed by the Speaker of the House

    5/22/2026House

  4. Sent to the Governor

    5/22/2026House

  5. House Third Reading Passed - No Amendments

    5/13/2026House

  6. House Committee on Appropriations Refer Unamended to House Committee of the Whole

    5/12/2026House

  7. House Second Reading Special Order - Passed - No Amendments

    5/12/2026House

  8. House Committee on State, Civic, Military, & Veterans Affairs Refer Unamended to Appropriations

    5/9/2026House

  9. Senate Third Reading Passed - No Amendments

    5/8/2026Senate

  10. Introduced In House - Assigned to State, Civic, Military, & Veterans Affairs

    5/8/2026House

  11. Senate Committee on Appropriations Refer Unamended - Consent Calendar to Senate Committee of the Whole

    5/7/2026Senate

  12. Senate Second Reading Special Order - Passed with Amendments - Committee

    5/7/2026Senate

  13. Senate Committee on Business, Labor, & Technology Refer Amended to Appropriations

    5/5/2026Senate

  14. Introduced In Senate - Assigned to Business, Labor, & Technology

    5/1/2026Senate

Bill Text

  • Engrossed

    PDF

  • Final Act

    PDF

  • Introduced

    PDF

  • Reengrossed

    PDF

  • Rerevised

    PDF

  • Revised

    PDF

  • Senate Business, Labor, & Technology Preamend

    PDF

  • Signed Act

    PDF

Related Bills

Back to State Legislation