New Mexico Administrative Code

Permanent.

December 29, 2000, unless a later date is cited at the end of a section.

The purpose of this rule is to facilitate the creation of a shared, centrally managed statewide network infrastructure by aggregating broadband circuit service to state agencies when it is to the economic and operational advantage of the state.

As used in this rule: A. BMAC means the Broadband management advisory committee, a subcommittee of the commission. B. ISD-OC means the information systems division, office of communications.

MAGnet network aggregation will be accomplished according to the MAGnet network aggregation implementation and business plan.

A. Agencies shall participate in broadband circuit aggregation efforts, unless exempted pursuant to the provisions of this rule. B. Agencies will transfer administrative management of existing contracts for broadband circuit service to ISD-OC as the BMAC determines the most effec…

Information Technology Commission.

The office shall: A. provide oversight of all IT projects; B. review agency IT plans; C. make recommendations to the ITC regarding prudent allocation of IT resources, reduction of redundant data, hardware, and software, and improve interoperability and data accessibility between …

A. Project status reports. For all projects that require office oversight, the lead agency project manager shall submit an agency approved project status report on a monthly basis to the office. B. Independent verification and validation assessment reporting. The office requires …

This rule applies to the oversight of all information technology projects undertaken by executive agencies.

Sections 15-1C-5 and 15-1C-8 NMSA 1978.

Permanent.

September 30, 2005, unless a later date is cited at the end of a section.

The purpose of this rule is to set forth agency and office IT project management oversight responsibilities.

A. "Agency" means a state organizational entity of the executive branch, used interchangeably with department. B. "Independent" is used to describe the autonomous and impartial verification and validation assessment of compliance to a project and the project's products requiremen…

A. All IT projects shall be managed: (1) using a qualified project manager; (2) using a formal project management methodology, processes, and techniques approved by the office; and (3) by analyzing and monitoring risk at periodic intervals during the project management lifecycle,…

A. A lead agency shall perform the following functions. (1) Manage its own information technology (IT) projects and project resources and use the state project management methodology for planning, executing, and controlling the project. (2) Appoint a qualified state employee as t…

Information Technology Commission.

The office shall post notice of a proposed ACR on the internet at its internet address at least twenty (20) calendar days prior to adoption of the proposed ACR.

The office shall: A. post comment drafts on the internet at its internet address; B. send comment drafts to all members of the information oversight committee; C. notify all persons on the electronic distribution list that a comment draft is available for comment; D. mail or fax …

A. The office shall make a comment draft available for comment for at least twenty (20) calendar days prior to its adoption. B. Any person may submit written comments on the proposed ACR to the office in hard copy or by electronic means. C. All comments received before the deadli…

The office shall review all comments for compliance with the state information architecture and the state strategic plan, prepare a summary of all comments received before the deadline, and report its findings and recommendations to the commission.

A. The commission shall consider the comment draft, the summary of comments, and the findings and recommendations of the office at a meeting held after the comment period. B. The commission may adopt the proposed ACR without revision, revise and adopt the proposed ACR, revise the…

The commission may amend, replace or repeal an ACR in accordance with the procedures set forth in this rule.

The office shall post all ACRs adopted by the commission on the internet at the office's internet address.

A. An agency may request exemption from an ACR. Exemptions shall be granted only if complying with an ACR would: (1) result in a significant increase in agency costs; (2) decrease the security of agency operations; (3) compromise essential service attributes critical to agency su…

This rule applies to all executive agencies.

NMSA 1978 Section 15-1C-5.

Permanent.

July 14, 2000, unless a later date is cited at the end of a section.

The purpose of this rule is to set forth procedures for establishing architectural configuration requirements.

As used in this rule: A. architectural configuration requirement (ACR) means the technical specifications for information architecture and computer system purchases for executive agencies; B. IAS means any information architecture subcommittee of the commission.

ACRs will be based on an evaluation of an item's: A. life cycle; B. system interoperability and data accessibility; C. technical quality; D. training compatibility; E. wide use; F. company financial stability; and G. ability to advance government efficiency.

A. An IAS may submit a proposal for an ACR to the office. B. The office shall evaluate the proposal for compliance with the state information architecture and the state strategic plan and shall report its findings and recommendations to the commission. C. The commission may rejec…

State Commission of Public Records and State Records Administrator

A. An electronic signature is used to indicate a person's intent to associate themselves in some way to information or to a reason for signing (e.g., agreeing to the terms of a contract, acknowledging receipt of information, etc.) with legal effect. Any sound, symbol, or process …

A transaction is governed by a law or regulation that requires the presence of a signature before it will be considered legally effective. A state agency must review the law applicable to each proposed transaction to determine if it requires that the transaction be "signed." If t…

If there is no legal requirement for a signature on a particular type of transaction a state agency may undertake a further analysis to evaluate the desirability of incorporating a signature requirement into the transaction. An electronic signature may be desirable, even when not…

Where an electronic signature is required by law or otherwise deemed desirable, it is critical that the electronic signature and the associated signing process satisfy all of the applicable legal requirements. Generally, creating a valid and enforceable electronic signature requi…

A. The selection of an electronic signature process is a business decision involving more than technical consideration. State agencies are strongly encouraged to complete and document a business analysis and risk assessment. The extent, level of detail, and format of the business…

A.Low risk transactions.(1) For low risk transactions, any form of signature is acceptable. This includes clicking an on screen button, checking an on-screen box, typing ones name, using a PIN number, or any other reasonable method, so long as it is clear to the signer that such …

To implement the electronic signature authority pursuant to the Public Records Act, Section 14-3-15.2 NMSA 1978 and the New Mexico Uniform Electronic Transactions Act, Section 14-16-1 et seq NMSA 1978.

Public Records Act, Section 14-3-15.2 NMSA 1978; Uniform Electronic Transactions Act, Section 14-16-1 et seq NMSA 1978.

Permanent

July 1, 2015, unless a later date is cited at the end of a section.

To establish standards for state agencies regarding the use of electronic signatures for legal signing purposes as authorized under the provisions of the Uniform Electronic Transactions Act. These rules are an adaption of the Use of Electronic Signatures in federal Organization T…

For purposes of this part, all terms defined in the Uniform Electronic Transactions Act, Section 14-16-1 et seq NMSA 1978 have the meanings set forth in statute. Additionally, the following terms shall have the following meanings: A. Terms beginning with the letter "A": (1) "Agre…