[{"_1":2,"_100":-5,"_101":-5},"loaderData",{"_3":4,"_26":27},"root",{"_5":6,"_17":10,"_18":19,"_20":21,"_22":10,"_23":-5,"_24":-5,"_25":10},"user",{"_7":8,"_9":10,"_11":10,"_12":-5,"_13":-5,"_14":15,"_16":-5},"roles",[],"isAuthenticated",false,"isPremium","planName","subscriptionStatus","featureFlags",{},"insightsBudget","isDevelopmentHost","userPreferences",{},"recaptchaSiteKey","6LcvOJcUAAAAAHsB-gPGfGktcRlKpH7OTIU_dMTD","isImpersonating","impersonation","affiliateStatus","isFreedomPortal","routes/v2/article/layout",{"_28":29,"_30":31},"notFound",true,"relatedArticles",[32,76,88],{"_33":34,"_35":36,"_37":38,"_39":40,"_41":42,"_43":44,"_45":46,"_47":48,"_49":50,"_51":52,"_53":54,"_55":56,"_57":58,"_59":60,"_61":62,"_63":64,"_65":66,"_67":68,"_69":70,"_71":72,"_73":74,"_75":74},"mediaId",6219723,"mediaKeyId","3621080-31864bc8757b3a2925068fae10448dd4","parentId",3621080,"title","Joint committee adopts amendment to Senate Bill 1090 to require prioritized reporting of executive‑branch IT requests","audioSeconds",1836,"startMs",4377000,"endMs",6213000,"viewUrl","/Search/View?dp=1&key=3621080-31864bc8757b3a2925068fae10448dd4&start=4377&end=6213","thumbnailUrl","https://assets.pipeline.soar.com/3621080-31864bc8757b3a2925068fae10448dd4/thumbnail_4377000.jpg","articleUrl","/articles/6219723/Oregon/Joint-committee-adopts-amendment-to-Senate-Bill-1090-to-require-prioritized-reporting-of-executivebranch-IT-requests","mediaUrl","https://secure.pipeline.soar.com/6219723-a3e66164efc81765ada315054901e4fa/orig.mp4?Expires=1770739832&Signature=oLdEBp~K7Str3DVbDGHBCvU1eIPsG6yAfhbio2H3EzrNqIJZvtuqqSa7mwr2QdEGaA0dwnvOkuESQDGr5BMwdfJC4uh6viFwFsPW7D9L1qxaX4E0Z0iEVZdilG73SdJxAXdMiXmYsn3aouee4-PiX9S5WggSYeJeZnKSqJlndjwC0tT0-DAOT2aph5gCJRYXjZ7Y0pafu8zdmTchGbbzeFLq9paK6Ld9H2TmSEOxKo-jFUHU84YVBXa8yQ14DIsry6q4JAhKjMQ-nKUsqdeTznBZTdZpqt2DjGxSIwZFyheRbQkNNqsJZ6UNUGjmtaN1KnOiXVGqy11LhkA6RkDtfg__&Key-Pair-Id=KUT5TJCACFTXG","author","Oregon Legislature","date","2025-05-30T00:00:00Z","article","The Joint Committee on Information Management and Technology adopted a dash‑3 amendment to Senate Bill 1090 on May 30 that changes the measure from a proposed Technology Modernization Fund into a statutory process for inventorying and prioritizing executive‑branch information‑technology project requests.

The change matters because committee staff and legislators said it will create an earlier, standardized intake and prioritization process for IT project requests so the legislature and governor have clearer information about competing IT needs before budget decisions are finalized.

Sean, committee staff, told members that a revenue forecast made a new $10 million fund unlikely, prompting a rewrite of the bill to preserve the idea's benefits without the immediate appropriation. Under the dash‑3 amendment, the measure applies to state agencies in the executive department, requires the state chief information officer to adopt a policy and procedure for submitting IT budget and project requests, and directs the CIO, working with the Legislative Fiscal Office, to develop criteria to prioritize requests. The amendment lists factors that must be considered — including whether proposals would enhance security posture, reduce duplication, or promote shared enterprise services — and sets a reporting deadline of Nov. 30 of even‑numbered years for a prioritized list to the governor and the joint legislative committee on information technology.

Co‑chair Representative Nathanson said the goal was to \"bring more order and organization to all of these many IT requests\". The committee also asked for a follow‑up report after the session that itemizes the IT projects the legislative assembly approved, providing transparency on funded projects and timelines.

Senator Manning moved adoption of the dash‑3 amendment and later moved that Senate Bill 1090 be reported out with a \"do pass\" recommendation and that the committee request the Senate president rescind the measure's referral to Ways and Means. Both motions were adopted without recorded objections during the work session. The committee then identified likely floor carriers for the Senate and House.","mediaType","Video","parentTitle","Joint Committee On Information Management and Technology 05/30/2025 1:00 PM","oneSentenceSummary","On May 30 the Joint Committee on Information Management and Technology adopted a dash‑3 amendment to Senate Bill 1090 that replaces the bill’s original fund proposal with a process requiring the state CIO to adopt intake policies, prioritize executive‑branch IT requests in collaboration with the Legislative Fiscal Office, and submit prioritized reports by Nov. 30 of even‑numbered years.","taxTitle","Information Management and Technology, Joint, Committees, Legislative, Oregon","taxId",18221,"location","Oregon","headline","","shortSummary",{"_33":77,"_35":36,"_37":38,"_39":78,"_41":79,"_43":80,"_45":81,"_47":82,"_49":83,"_51":84,"_53":85,"_55":56,"_57":58,"_59":86,"_61":62,"_63":64,"_65":87,"_67":68,"_69":70,"_71":72,"_73":74,"_75":74},6219728,"Oregon universities detail 'teaching SOC' programs that train students and protect local governments",2702,1578000,4280000,"/Search/View?dp=1&key=3621080-31864bc8757b3a2925068fae10448dd4&start=1578&end=4280","https://assets.pipeline.soar.com/3621080-31864bc8757b3a2925068fae10448dd4/thumbnail_1578000.jpg","/articles/6219728/Oregon/Oregon-universities-detail-teaching-SOC-programs-that-train-students-and-protect-local-governments","https://secure.pipeline.soar.com/6219728-b2f475e38f0c6dfd53312bb129696f2f/orig.mp4?Expires=1770739832&Signature=aroqZSxBmPV0HbW6VSwyWa9CamWeAJotqJvslAgXglZjAIpsVBkQFm3rs1odCbiv~QzuZfjHBNVR4LLK7opZJBwkGK8c9tHC34LV0TkCGFCel1tPLS2XhP3Y2JjS05AsiACq~bAI7iAw7xg-sAPgxqWH1IrkQJs5bLvzTtDqve0YegImy9xHo~LEOIEnCvba7cxdhv1jN3ECBgb3hTgYKt~Mi78nmm-oZip8f6~IlZQUOBNj8gQR0KjngWTWdbXazuLS~Ywj80QhdqWka3-c3r~wTq-oiGliUY2rJaI-4hC9q~4Zqxm7exIQFoypMW3B3-m8TIq6lnMo3V8WueNlBw__&Key-Pair-Id=KUT5TJCACFTXG","Representatives from the Oregon Cybersecurity Center of Excellence told the Joint Committee on Information Management and Technology on May 30 that university‑run \"teaching\" security operations centers (SOC) are providing hands‑on cybersecurity training to students while delivering monitoring and incident response services to small and mid‑sized public clients across the state.

The update matters because committee members said the programs address a statewide workforce shortage and provide free or low‑cost cybersecurity services to local governments and schools that otherwise lack skilled staff.

Rakesh Baba, faculty in the cybersecurity group at Oregon State University and associate director for the Center of Excellence, described Artsakh (the OSU teaching SOC) as a clinical‑style program that integrates classroom credit with on‑the‑job rotations. He said OSU has invested about $3,000,000 since 2020 and is seeking a two‑year scale‑up request of $2,500,000. \"Workforce development is the key focus for this effort,\" Baba said, describing rotations in network monitoring, incident response, security engineering and threat hunting.

Baba said Artsakh currently serves about 13 organizations — including small cities, a county government and education service districts — and that the system's sensors have collected roughly 2,000,000,000,000 events to date. He reported roughly 480 security events were flagged for investigation, and that 204 of those were assessed as serious incidents; some were early‑detected ransomware attempts. Baba said about 90 students have completed the practicum over the program's first 2½ years and that enrollment and demand are growing.

Reza Rejai, head of the computer science department at the University of Oregon and a TSOC lead, described the UO plan to operate a teaching SOC that pairs student operators with vendor‑provided SOC machinery. He said UO selected a hybrid model that relies on commercial vendor platforms for core tooling while students operate services under professional supervision. Rejai said the university will test vendor offerings this summer, select initial clients to pilot services and offer the first TSOC course this fall in coordination with degree programs.

Both presenters emphasized experiential learning as central to sustaining a cybersecurity pipeline. Committee members praised the programs as workforce development and community protection tools. Several members and presenters noted the programs currently rely on university seed funding, federal scholarships and industry donations and that long‑term scaling will require continued support from university leadership and state funding mechanisms.

Committee members asked about gender diversity, client fees and sustainability. Baba said OSU's summer outreach has improved gender balance in camps but that overall enrollment reflects historical gender ratios in computer science. Rejai said UO intends to scale quickly and to coordinate vendor training with K‑12 outreach and community training when feasible.

No formal committee action or appropriations were made during the informational update.","Presenters from Oregon State University and University of Oregon described operational 'teaching security operations centers' that train students, provide free services to small public entities and aim to scale with additional funding and vendor partnerships.",{"_33":89,"_35":36,"_37":38,"_39":90,"_41":91,"_43":92,"_45":93,"_47":94,"_49":95,"_51":96,"_53":97,"_55":56,"_57":58,"_59":98,"_61":62,"_63":64,"_65":99,"_67":68,"_69":70,"_71":72,"_73":74,"_75":74},6219733,"Western Oregon University describes ransomware mutual aid for local schools, seeks regional data center and emergency operations space",1482,93000,1575000,"/Search/View?dp=1&key=3621080-31864bc8757b3a2925068fae10448dd4&start=93&end=1575","https://assets.pipeline.soar.com/3621080-31864bc8757b3a2925068fae10448dd4/thumbnail_93000.jpg","/articles/6219733/Oregon/Western-Oregon-University-describes-ransomware-mutual-aid-for-local-schools-seeks-regional-data-center-and-emergency-operations-space","https://secure.pipeline.soar.com/6219733-69872f940176a4700e24f435b17bd8c1/orig.mp4?Expires=1770739832&Signature=C28oH9TnNavQVQpPUoQcWYm2Fz-g3Ob9W-ZuU~A86EDRhRGY5PAbCjGNtOZ3UqXd~H94BZE6hIVtvTc7IcH3A~SUj6Fm5b49osiaKUzXblzhdy0q-eQrunufJxXzdYK39klU6mOp-4hiYk2x-M0mzYxeqMqcghzkm9hiW9d97xOVdbnGvFiVrGRQbb7IWG6TNAJK1kqgSk8Jkm60YE0T5FLYg5k-6WI1wYYpv9bkZveQD0I-dIjKPyUiXx4NjOak2fuZ~xmXDM-crkwhCIBftsTkJRrlpPtStsdPy-WHkMlwQv2vfpmY0~HzowDpuCBDGjNJMGiwv5xTjtauc3LZng__&Key-Pair-Id=KUT5TJCACFTXG","Western Oregon University officials told the Joint Committee on Information Management and Technology on May 30 that the university provided rapid mutual aid to Central School District after a February 2024 ransomware attack and is proposing a new data center with colocation and an emergency operations center for the Polk County region.

The request matters because the university said the incident exposed how fragile local computer infrastructure can be and illustrated the potential regional benefit of a purpose-built facility that could shelter public agency operations during cyber or physical emergencies.

Evan Source, secretary to the Western Oregon University board of trustees and special assistant to the president, said the district reported it had been locked out of critical systems and network resources. \"They were able to go old fashioned analog teaching, after just 2 days,\" Source said, summarizing the immediate benefit from university assistance. Michael Ellis, Western Oregon University's chief information security officer, told the committee the district was left with \"basically 0 infrastructure — 0 servers, 0 internet access\" and that university staff and volunteers helped restart teaching functions.

University staff said they deployed mobile internet hotspots to classrooms, repurposed a campus classroom with a detached network to avoid cross-contamination to the university network, and provided printing and internet access so teachers could continue lessons. A group of roughly 20 volunteers from the university ran forensic tools on hundreds of district machines to recover logs and other data needed for recovery work, and outside contractors then began redeploying machines and rebuilding services. Source said the district's buildings were closed to in-person instruction for two days but otherwise were able to continue teaching in alternate, low‑tech formats while systems were rebuilt.

Tom Litterer, Western Oregon University's chief information officer, described the university's current data center as housed in an old elementary school building with recurring temperature and water problems. \"We've spent some time mopping water off the floor just in the past few months,\" Litterer said. He said the university has a proposal on the Higher Education Coordinating (HEC) priority list maintained by the Joint Capital Construction Committee to build a purpose‑built replacement data center. The proposed facility would increase campus capacity, protect institutional data and include colocation space and a flexible emergency operations center that could support public health, weather incidents or cybersecurity events for Monmouth, Independence, Dallas and Polk County.

Committee members voiced support for the idea. Co-chair Representative Nathanson said the mutual‑aid response demonstrated a model other communities might replicate, and Senator Manning called the current campus data center \"embarrassing\" given its condition and expressed support for funding a replacement. Committee staff later said Western Oregon University had been connected with the Oregon State Data Center and the Oregon Cybersecurity Center of Excellence to explore colocation and partnership options.

The university did not present a final funding request to the committee during the informational presentation. Litterer identified the HEC priority listing (proposal number 4) as the vehicle to seek capital funding. No committee vote or formal committee action to commit state funding occurred during the meeting.","Western Oregon University told the Joint Committee on Information Management and Technology that it provided rapid mutual aid after a February 2024 ransomware attack on Central School District and is pursuing a replacement data center with colocation and an emergency operations center to serve Polk County and nearby communities.","actionData","errors"]

Article not found

Joint committee adopts amendment to Senate Bill 1090 to require prioritized reporting of executive‑branch IT requests

Oregon universities detail 'teaching SOC' programs that train students and protect local governments

Western Oregon University describes ransomware mutual aid for local schools, seeks regional data center and emergency operations space