Authority: Title 2.2, Chapter 20.1, Code of Virginia.

A.1. Out of this appropriation, $27,121,075 $26,753,056 the first year and $27,318,830 $27,233,818 the second year for Administrative and Support Services is sum sufficient and amounts shown are estimates from an internal service fund which shall be paid solely from charges to other programs within this agency.

2. In accordance with § 2.2-2013 D, Code of Virginia, the surcharge rate used to fund expenses for operations and staff of services administered by the Virginia Information Technologies Agency shall be no more than 9.34% the first year and 9.09% 10.17% the second year.

3. Included in the amounts for Administrative and Support Services are funds from the Acquisition Services Special Fund which is paid solely from receipts from vendor information technology contracts. These funds will be used to finance procurement and contracting activities and costs unallowable for federal fund reimbursement.

B. The provisions of Title 2.2, Chapter 20.1 of the Code of Virginia shall not apply to the Virginia Port Authority.

C. The requirement that the Department of Behavioral Health and Developmental Services purchase information technology equipment or services from the Virginia Information Technologies Agency according to the provisions of Chapters 981 and 1021 of the Acts of Assembly of 2003 shall not adversely impact the provision of services to mentally disabled clients.

D. The Chief Information Officer and the Secretary of Technology shall provide the Governor and the Chairmen of the Senate Finance and House Appropriations Committees with a report detailing any amendments or modifications to the comprehensive infrastructure agreement. The report shall include statements describing the fiscal impact of such amendments or modifications and shall be submitted within 30 days following the signing of any amended agreement.

E.1. Out of this appropriation, $343,706 the first year from the general fund is provided for the Virginia Information Technologies Agency to initiate a program to support the use of cloud service providers by state agencies served by the Virginia Information Technologies Agency.

2. As part of the program, the Virginia Information Technologies Agency shall develop policies, standards, and procedures for the use of cloud services providers by state agencies served by the Virginia Information Technologies Agency. These policies, standards, and procedures shall address the security and privacy of Commonwealth and citizen data; ensure compliance with federal and state laws and regulations; and provide for ongoing oversight and management of cloud services to verify performance through service level agreements or other means. VITA shall also establish a statewide contract of approved vendors authorized to offer cloud based services to state agencies.

3. Requests to use cloud providers shall be submitted by participating agencies to the Virginia Information Technologies Agency, which shall review such requests in accordance with the Commonwealth's policies, standards, and procedures. For approved requests, and consistent with Chapter 20.1 of Title 2.2, the Virginia Information Technologies Agency will procure cloud services on behalf of other agencies or may, upon request, authorize other state agencies to undertake such procurements on their own. The Virginia Information Technologies Agency shall also administer and oversee all contracts for cloud services used by agencies participating in the cloud services center, including verification of security and performance.

4. The Virginia Information Technologies Agency shall work with state agencies to assess opportunities for additional use of cloud services, including infrastructure, platform, and software as a service. This assessment shall include a review of options for use of service brokers and integrators, and options for providing storage and server services through cloud or on-premises means.

5. By October 1, 2016, the Virginia Information Technologies Agency shall develop and submit to the Department of Planning and Budget a proposed method for recovering costs associated with providing oversight and management of cloud based services.

F.1. Pursuant to Item 422.J. of this act, the Virginia Information Technologies Agency shall bill the Department of State Police for the estimated costs necessary to offset a rate increase to Executive Branch agencies created as a result of the department's separation from information technology services currently provided by Northrop Grumman.

2. The costs described in this paragraph shall include, but not exceed, the department's share of enterprise-wide fixed contractual fees and related costs billed to the Commonwealth as part of the information technology services currently provided by Northrop Grumman; the department's share of enterprise costs borne by the Virginia Information Technologies Agency for oversight, governance, and operations of the enterprise; and any contractual fees incurred by the Department of State Police as a result of their separation from information technology services currently provided by Northrop Grumman.

3. The Virginia Information Technologies Agency shall be responsible for determining the total of all such fees and costs and communicating this total to the Department of Planning and Budget and the Department of State Police.

4. The Virginia Information Technologies Agency shall bill the Department of State Police for such costs and reserve any revenue collected until the agency is in receipt of an undisputed billable amount from Northrop Grumman.

5. The Virginia Information Technologies Agency shall cease billing the Department of State Police for the charges described in this paragraph for a given enterprise service tower on a rolling basis as each respective enterprise service tower or portion thereof is disentangled by the Commonwealth from Northrop Grumman and related separation activities are complete.