R895.  Technology Services, Administration.
R895-5.  Acquisition of Information Technology.
R895-5-1.  Purpose.
	The purpose of this rule is to identify the standards under which an agency of the executive branch must obtain approval from the Chief Information Officer before acquiring information technology and technology related services.

R895-5-2.  Authority.
	The rule is issued by the Chief Information Officer under the authority of Sections 63F-1-205 and 63F-1-206 of the Utah Technology Governance Act, and Section 63G-3-201 of the Utah Rulemaking Act, Utah Code.

R895-5-3.  Scope of Application.
	All agencies of the Executive Branch of State government, including its administrative sub-units, except the State Board of Education, the Board of Regents and institutions of higher education, and elective constitutional offices, are to be included within the scope of this rule.

R895-5-4.  Definitions.
	(1)  "Hardware" means physical technology (i.e., equipment) used to process, manage, store, transmit, receive, or deliver information. This term also includes telephony products.
	(2)  "Small technology purchases" means a purchase, lease, or rental of hardware, software, and/or technology services that is estimated to be less than $50,000.
	(3)  "Software" means non-physical technology used to process, manage, store, transmit, receive, or deliver information.  The term also includes all supporting documentation, media on which the software may be contained or stored, related materials, modifications, versions, upgrades, enhancements, updates, or replacements.
	(4)  "Technology services" means all the services, functions, and activities that facilitate the design, implementation, creation, or use of software, hardware, or telephony products.  The term includes data acquisition, seat management, staffing augmentation, maintenance, and subscription services.

R895-5-5.  Purchase of Hardware, Software, and Technology Services.
	(1)  The Chief Information Officer (CIO) shall exercise general supervision and control over the purchase of all hardware, software, and technology services.
	(2)  The CIO may not require a business case for small technology purchases.
	(3)  Purchase requirements for hardware, software, and technology services shall not be artificially divided so as to constitute a small technology purchase under this rule.

R895-5-6.  Rule Compliance Management.
	The CIO may monitor compliance of this rule within the State Executive Branch, and report any findings or violations of this rule to an agency's Executive Director or designee.  A State Executive Branch agency's Executive Director, or designee, upon becoming aware of a violation of this rule shall provide the CIO a report of action(s) taken in response to violation of this rule.

KEY:  IT standards, IT bid committee, technology best practices, technology purchases
Date of Enactment or Last Substantive Amendment:  February 23, 2016
Notice of Continuation:  December 29, 2015
Authorizing, and Implemented or Interpreted Law:  63F-1-205; 63G-3-201