Florida Administrative Code

Rulemaking Authority 282.0051(6) FS. Law Implemented 282.0041, 282.0051 FS. History-New 7-16-15, Amended 8-1-16, Formerly 74-1.009, Repealed 6-17-26.

(1) Purpose and Applicability. (a) Rules 60GG-2.001 through 60GG-2.006, F.A.C., will be known as the State of Florida Cybersecurity Standards (SFCS). (b) These rules establish cybersecurity standards for information technology (IT) resources. Agencies must comply with these stand…

The identify function of the FCS is visually represented as such: Function Category Subcategory Identify (ID) Asset Management (AM) ID.AM-1: Inventory Agency physical devices and systems ID.AM-2: Inventory Agency software platforms and applications ID.AM-3: Map Agency communicati…

The protect function of the SFCS is visually represented as such: Function Category Subcategory Protect (PR) Identity Management, Authentication, and Access Control (AC) PR.AC-1: Issue, manage, verify, revoke, and audit identities and credentials for authorized devices, processes…

The detect function of the SFCS is visually represented as such: Function Category Subcategory Detect (DE) Anomalies and Events (AE) DE.AE-1: Establish and manage a baseline of network operations and expected data flows for Users and systems DE.AE-2: Analyze detected Cybersecurit…

The respond function of the SFCS is visually represented as such: Function Category Subcategory Respond (RS) Response Planning (RP) RS.RP-1: Execute response plan during or after an Incident Communications (CO) RS.CO-1: Ensure that personnel know their roles and order of operatio…

The recover function of the SFCS is visually represented as such: Function Category Subcategory Recover (RC) Recovery Planning (RP) RC.RP-1: Execute recovery plan during or after a Cybersecurity Incident Improvements (IM) RC.IM-1: Incorporate lessons learned in recovery plans RC.…

(1) Definitions. (a) "Critical Component" means a Drone component related to: flight controllers, radio, data transmission devices, cameras, gimbals, ground control systems, operating software (including cell phone or tablet applications, but not cell phone or tablet operating sy…

(1) Definitions. Capitalized terms used herein will have the meanings ascribed in section 112.22, F.S. "Form" will mean the Form FL[DS]-02, Prohibited Application Waiver Request Form, eff. 12/23, and available at http://www.flrules.org/Gateway/reference.asp?No=Ref-16158, which is…

The following terms are defined: (1) Mechanical Room/High-Power Room - those areas at the State Data Center ("SDC") dedicated to the mechanical equipment (e.g., switchgear, uninterruptible power supply, batteries, generators, and transformers) that serves this facility. (2) Raise…

(1) General - In order to gain access to the SDC facility, all Visitors must: (a) Provide a government issued photo identification to verify their identity. Visitor identification will be verified before SDC access is approved; (b) Be visiting the SDC on business relating to the …

Rulemaking Authority 282.0051(6) FS. Law Implemented 282.0051 FS. History-New 6-16-16, Formerly 74-3.004, Repealed 6-30-26.

The Department of Management Services (DMS) is responsible for developing and implementing cost-recovery mechanisms that recover the full direct and indirect cost of services through charges to applicable customer entities. To fulfill this responsibility the DMS will employ the f…

(1) These rules apply to state agencies as defined in Section 282.0041, F.S. (2) These rules are designed to further state agency implementation of the cloud-first policy as provided in Section 282.206, F.S., that requires state agencies to show a preference for cloud computing s…

(1) As part of their cloud-first policy, the state agency will develop formal procedures to be used when procuring information technology that establish a preference for cloud computing. (2) Where products or services are required for cloud migration and integration with products…

(1) The state agency will document the controls and processes that are in place to proactively control cloud spend and maintain acceptable budgeted versus actual variances. (2) The state agency will establish and document, in advance of contract execution, an acceptable threshold…

(1) The state agency will document a risk mitigation strategy including but not limited to an exit strategy specific to application criticality and business continuity needs. (2) The state agency will ensure that the documented risk mitigation strategy is supported by the contrac…

A state agency may request a variance or waiver from these rules by filing a petition with the Department of Management Services (DMS) agency clerk, with a copy to the Joint Administrative Procedures Committee in accordance with Section 120.542, F.S., and Chapter 28-104, F.A.C., …

Rulemaking Authority 282.0051(6) FS. Law Implemented 282.0051 FS. History-New 8-3-17, Formerly 74-5.001, Repealed 4-5-23.

(1) Purpose and intent. The purpose of this Enterprise Architecture rule is for the Florida Digital Service ("FL[DS]") to establish a statewide Enterprise Architecture. The intent of this Enterprise Architecture rule is to provide a comprehensive operational framework, including …

Rulemaking Authority 282.0051(6) FS. Law Implemented 282.0051 FS. History-New 8-3-17, Formerly 74-5.003, Repealed 4-5-23.

The words and phrases in this chapter shall be construed according to their plain meaning, in light of the context and subject matter, unless expressly defined otherwise in this rule, this chapter or in Section 255.248, F.S. (1) "Agency" means an official, officer, commission, au…

(1) No Agency may proceed with the procurement, negotiation or execution of a Lease unless an Approval of Space Need has been granted by the Department. (2) The requesting Agency shall: (a) Submit Department Form 4105 "Request for Space Need" effective May 2010 incorporated by re…

(1) The Department shall publish approved forms for use by Agencies for actions under Sections 255.248, 255.249 and 255.25, F.S. (2) Other lease terms or conditions which supplement, remove, or modify any lease term or condition of an approved form may be used only with approval …

Rulemaking Authority 255.25 FS. Law Implemented 255.25(2) FS. History-New 8-11-75, Amended 4-25-79, Formerly 13D-7.04, 13M-1.004, Repealed 4-29-10.

No Agency's Lease shall contain an open rate, including Consumer Price Index or open rental escalation clause. Rulemaking Authority 255.25 FS. Law Implemented 255.25(2) FS. History-New 8-11-75, Amended 4-25-79, Formerly 13D-7.06, 13M-1.006, Amended 4-27-04, 4-29-10.

Rulemaking Authority 255.25 FS. Law Implemented 255.25(2) FS. History-New 8-11-75, Amended 4-25-79, Formerly 13D-7.07, 13M-1.007, Amended 5-13-03, 8-5-03, 4-27-04, Repealed 4-29-10.

Rulemaking Authority 255.249(2), 255.25 FS. Law Implemented 255.25(2) FS. History-New 8-11-75, Amended 4-25-79, Formerly 13D-7.09, Amended 3-18-86, Formerly 13M-1.009, Amended 2-21-96, 5-13-03, Repealed 4-29-10.

Rulemaking Authority 255.249, 255.25 FS. Law Implemented 255.25(5), 281.02 FS. History-New 4-25-79, Formerly 13D-7.091, Amended 3-18-86, Formerly 13M-1.013, Amended 4-29-10, Repealed 12-22-15.

(1) Procurement specifications for competitive solicitation shall promote competition and not favor any particular potential respondent. (2) At a minimum, Agency specifications in a competitive solicitations shall include: (a) Approximate Net Usable Square Footage per Rule 60H-2.…

(1) For all leases under 5,000 square feet at least three documented quotes are required which must have the following information: (a) Prospective leased premises building name, if applicable; and (b) Property physical and mailing address; and (c) Prospective landlord full name …

(1) The Department shall have the authority to approve a lease under this rule when the following conditions have been met: (a) An appropriate procurement has been attempted and no suitable space has been identified; and (b) Approval of Space Need has been obtained, in accordance…

Any Lease Action that is not reported under any other reporting requirement under Chapter 255, F.S., or resulting rule and is not exempt by law from such reporting requirement, must be reported to and approved by the Department in accordance with Rule 60H-1.002, F.A.C., at least …

(1) No Agency may proceed with the execution of a Lease Action unless the Department has granted Prior Approval for the Lease Action. (2) For Leases of less than 5,000 feet, the requesting Agency shall submit: (a) An unexecuted Lease Agreement pursuant to Rule 60H-1.003, F.A.C.; …

(1) No Lease shall become executed until the Department has granted Final Approval for the Lease Action. (2) The requesting Agency shall submit: (a) All lease documents fully-executed by both the Agency and the lessor, consistent with Chapter 60H-1, F.A.C.; and (b) Approval from …

(1) An Agency wishing to execute a Lease modification shall obtain the Department's Approval of Space Need, Prior Approval and Final Approval. (2) Any lease not procured through a competitive solicitation may not be modified to exceed a total square footage of 4,999 within the fi…

(1) An Agency wishing to execute a Lease extension shall obtain the Department's Approval of Space Need, Prior Approval and Final Approval. (2) The leasing rules applicable to each Lease are determined at the time of initial execution of the original Lease Agreement. (3) The Depa…

(1) An Agency wishing to execute a Lease renewal shall obtain the Department's Approval of Space Need, Prior Approval and Final Approval. (2) A copy of the notice of renewal, with proof of the date the notice was received by the lessor clearly marked thereon, shall be furnished t…

(1) Pursuant to Sections 255.249(4)(h) and 255.249(4)(j), F.S., no Lease Action shall be approved unless the Agency has submitted Form Number 4114 "Disclosure Statement" effective May 2010 incorporated by reference in this rule, completed in full compliance with the law. (2) Each…

Rulemaking Authority 255.249(2) FS. Law Implemented 255.249(2)(i) FS. History-New 4-5-76, Amended 4-25-79, Formerly 13D-7.16, 13M-1.026, Repealed 4-29-10.

(1) If ownership of a leased facility changes during the term of the Lease, the Department must be furnished a copy of the deed or other legal document effecting transfer of facility and the Department's Form 4114 "Disclosure Statement" effective May 2010 incorporated by referenc…

(1) Lease Actions using approved forms, as defined in Rule 60H-1.003, F.A.C., shall not require approval of the Department's Office of General Counsel. (2) Lease Actions using non-approved forms, as defined in Rule 60H-1.003, F.A.C., shall require signature by the Offices of Gene…

Information and copies of all forms named in this chapter may be obtained from: Department of Management Services Division of Real Estate Development and Management 4050 Esplanade Way, Suite 315 Tallahassee, Florida 32399-0950 Rulemaking Authority 120.53(1)(a), 255.249(4) FS. Law…

Rulemaking Authority 255.249(4)(b) FS. Law Implemented 255.25 FS. History-New 12-18-84, Formerly 13D-7.19, 13M-1.029, Amended 4-27-04, Repealed 4-29-10.

A copy of each agency lease shall be filed with the Department at the following address: Department of Management Service 4050 Esplanade Way Building 4050, Suite 315 Tallahassee, FL 32399-0950 Rulemaking Authority 255.25 FS. Law Implemented 255.25(2) FS. History-New 4-29-10.

The Department shall supply Agencies with regional market information and rental rates upon request. Rulemaking Authority 255.249(9)(a) FS. Law Implemented 255.249(9)(a), 255.25(2) FS. History-New 4-1-85, Formerly 13D-7.20, Amended 3-18-86, Formerly 13M-1.030, Amended 2-21-96, Am…

For the purpose of this chapter, each of these words shall have the following meaning: (1) Agency - means the governmental agencies of the the State of Florida, including the judicial branch, and the water management districts. (2) Division - means the Real Estate Development and…