Texas Statutes
Subchapter A. General Provisions
Section 2157.007. Cloud Computing Service

Sec. 2157.007. CLOUD COMPUTING SERVICE. (a) In this section:
(1) "Cloud computing service" has the meaning assigned by Special Publication 800-145 issued by the United States Department of Commerce National Institute of Standards and Technology, as the definition existed on January 1, 2015.
(2) "Major information resources project" has the meaning assigned by Section 2054.003.
Text of subsection as amended by Acts 2019, 86th Leg., R.S., Ch. 604 (S.B. 819), Sec. 4
(b) A state agency shall consider:
(1) cloud computing service options, including any security benefits and cost savings associated with purchasing those service options from a cloud computing service provider and from a statewide technology center established by the department, when making purchases for a major information resources project under Section 2054.118; and
(2) cloud computing service options and compatibility with cloud computing services in the development of new information technology software applications.
Text of subsection as amended by Acts 2019, 86th Leg., R.S., Ch. 1314 (H.B. 3875), Sec. 2
(b) Except as provided by Subsection (b-1), a state agency shall ensure, when making purchases for an automated information system or a major information resources project, that the system or project is capable of being deployed and run on cloud computing services.
(b-1) When making a purchase for an automated information system or a major information resources project, a state agency may determine that, due to integration limitations with legacy systems, security risks, or costs, the agency is unable to purchase a system or project capable of being deployed and run on cloud computing services.
(b-2) At least 14 days before the date a state agency solicits bids, proposals, offers, or other applicable expressions of interest for a purchase described by Subsection (b-1), the agency shall submit to the Legislative Budget Board for the purchase of an automated information system or to the quality assurance team as defined by Section 2054.003 for the purchase of a major information resources project a report that describes the purchase and the agency's reasoning for making the purchase.
(c) A state agency shall ensure that information resources projects that use cloud computing service options meet or exceed required state standards for cybersecurity.
(d) Using existing resources, the department may review the process for the coordinated development, hosting, and management of computer software for state agencies that use cloud computing services.
(e) Not later than November 15 of each even-numbered year, the department, using existing resources, shall submit a report to the governor, lieutenant governor, and speaker of the house of representatives on the use of cloud computing service options by state agencies. The report must include use cases that provided cost savings and other benefits, including security enhancements. A state agency shall cooperate with the department in the creation of the report by providing timely and accurate information and any assistance required by the department.
Added by Acts 2013, 83rd Leg., R.S., Ch. 1002 (H.B. 2422), Sec. 1, eff. June 14, 2013.
Amended by:
Acts 2015, 84th Leg., R.S., Ch. 820 (H.B. 3707), Sec. 1, eff. September 1, 2015.
Acts 2017, 85th Leg., R.S., Ch. 555 (S.B. 532), Sec. 4, eff. September 1, 2017.
Acts 2019, 86th Leg., R.S., Ch. 604 (S.B. 819), Sec. 4, eff. September 1, 2019.
Acts 2019, 86th Leg., R.S., Ch. 1314 (H.B. 3875), Sec. 1, eff. September 1, 2019.
Acts 2019, 86th Leg., R.S., Ch. 1314 (H.B. 3875), Sec. 2, eff. September 1, 2019.