Virginia Information Technologies Agency

This document provides detailed instructions for conducting an organizational assessment, particularly for cybersecurity capabilities. It outlines the methodology for rating current state capabilities, conducting technical analysis, identifying gaps, and recommending future state capability levels. The instructions also cover assessing funding availability, implementation models (e.g., Contract Only, Implementation Services, Full Service), and the likelihood of successful implementation and maintenance for various program goals and objectives, such as Threat Monitoring and Security Assessment.

This document outlines the Enterprise Information Architecture Standard for the Commonwealth of Virginia. Its vision is to establish a robust information foundation by integrating Data Governance, Data Stewardship, and Metadata Management to enhance data insights and decision-making across all COV agencies. The strategic objectives include establishing data governance and stewardship, improving data management practices and quality, facilitating data sharing frameworks, and driving innovation and security through unified data management. The plan aims to achieve improved decision-making, foster innovation, ensure compliance, build public trust, enhance service delivery, and optimize operational efficiency.

The Information Technology Advisory Council meeting covered several key areas. Discussions included technology-related legislation, the current state of AI in the Commonwealth, and managing and funding the modernization of Commonwealth systems and applications. The council also reviewed project management governance, enterprise architecture governance, and cybersecurity governance, identifying areas for improvement and discussing potential recommendations.

The strategic plan of VITA's Supply Chain Management Division (SCM) focuses on developing and implementing technology procurement policies, standards, and guidelines for the Commonwealth of Virginia. Key areas include managing IT spending through proactive sourcing, delivering IT services via category management, and developing flexible, performance-based contracts. The plan aims to procure solutions to business problems, promote enterprise-wide strategic objectives, and ensure efficient contract management and supplier diversity. It also emphasizes training IT sourcing specialists, supporting cloud-based solutions, and providing guidance to Commonwealth procurement officers.

The meeting included discussions on cybersecurity governance, IT planning and modernization in the executive branch, and a proposed six-year IT modernization plan. Updates were provided on legislative matters, including the integration of the Office of Data Governance and Analytics (ODGA) into VITA, the establishment of a Project Management Center of Excellence (PMCoE), and AI-related policies. The council also reviewed the application modernization progress, focusing on the assessment and categorization of applications based on their modernization needs, and discussed strategies for improving project delivery through the PMCoE.