§3.5–309.

    (a)    There is an Information Technology Investment Fund.

    (b)    The purpose of the Fund is to support major information technology development projects and expedited projects.

    (c)    The Secretary:

        (1)    shall administer the Fund in accordance with this section; and

        (2)    subject to the provisions of § 2–201 of this article and § 3.5–307 of this subtitle, may receive and accept contributions, grants, or gifts of money or property.

    (d)    (1)    The Fund is a special, nonlapsing fund that is not subject to § 7–302 of this article.

        (2)    The State Treasurer shall hold the Fund separately and the Comptroller shall account for the Fund.

        (3)    The State Treasurer shall invest and reinvest the money of the Fund in the same manner as other State money may be invested.

        (4)    Any investment earnings of the Fund shall be paid into the Fund.

    (e)    Except as provided in subsection (f) of this section, the Fund consists of:

        (1)    money appropriated in the State budget to the Fund;

        (2)    as approved by the Secretary, money received from:

            (i)    the sale, lease, or exchange of communication sites, communication facilities, or communication frequencies for information technology purposes; or

            (ii)    an information technology agreement involving resource sharing;

        (3)    that portion of money earned from pay phone commissions to the extent that the commission rates exceed those in effect in December 1993;

        (4)    money received and accepted as contributions, grants, or gifts as authorized under subsection (c) of this section;

        (5)    general funds appropriated for major information technology development projects of any unit of State government other than a public institution of higher education that:

            (i)    are unencumbered and unexpended at the end of a fiscal year;

            (ii)    have been abandoned; or

            (iii)    have been withheld by the General Assembly or the Secretary;

        (6)    any investment earnings; and

        (7)    any other money from any source accepted for the benefit of the Fund.

    (f)    The Fund does not include any money:

        (1)    received by the Department of Transportation, the Maryland Transportation Authority, Baltimore City Community College, or the Maryland Public Broadcasting Commission;

        (2)    received by the Judicial or Legislative branches of State government; or

        (3)    generated from pay phone commissions that are credited to other accounts or funds in accordance with other provisions of law or are authorized for other purposes in the State budget or through an approved budget amendment.

    (g)    The Governor shall submit with the State budget:

        (1)    a summary showing the unencumbered balance in the Fund as of the close of the prior fiscal year and a listing of any encumbrances;

        (2)    an estimate of projected revenue from each of the sources specified in subsection (e) of this section for the fiscal year for which the State budget is submitted;

        (3)    a descriptive listing of major information technology development projects reflecting projected costs for the fiscal year for which the State budget is submitted and any estimated future year costs; and

        (4)    the amount proposed to be set aside for expedited projects.

    (h)    Expenditures from the Fund shall be made only:

        (1)    in accordance with an appropriation approved by the General Assembly in the annual State budget;

        (2)    through an approved State budget amendment under Title 7, Subtitle 2, Part II of this article, provided that a State budget amendment for any project not requested as part of the State budget submission or for any project for which the scope or cost has increased by more than 5% or $250,000 shall be submitted to the budget committees allowing a 30–day period for their review and comment; or

        (3)    for expedited project contracts approved for funding by the Secretary and approved by the Board of Public Works as provided in § 12–101 of this article.

    (i)    The Fund may be used:

        (1)    for major information technology development projects;

        (2)    as provided in subsections (j) and (l) of this section;

        (3)    notwithstanding § 3.5–301(e)(2) of this subtitle, for the costs of the first 12 months of operation and maintenance of a major information technology development project;

        (4)    for expedited projects; or

        (5)    for major information technology development projects and expedited projects through a revolving loan process through which an agency may reimburse the Fund in future fiscal years as established by the Secretary in regulation.

    (j)    Notwithstanding subsection (b) of this section and except for the cost incurred in administering the Fund, each fiscal year up to $1,000,000 of this Fund may be used for:

        (1)    educationally related information technology projects;

        (2)    application service provider initiatives as provided for in Title 9, Subtitle 22 of the State Government Article; or

        (3)    information technology projects, including:

            (i)    pilots; and

            (ii)    prototypes.

    (k)    A unit of State government or local government may submit a request to the Secretary to support the cost of an information technology project with money under subsection (j) of this section.

    (l)    (1)    Notwithstanding subsection (b) of this section and in accordance with paragraph (2) of this subsection, money paid into the Fund under subsection (e)(2) of this section shall be used to support:

            (i)    the State telecommunication and computer network established under § 3.5–404 of this title, including program development for these activities; and

            (ii)    the Statewide Public Safety Interoperability Radio System, also known as Maryland First (first responder interoperable radio system team), under Title 1, Subtitle 5 of the Public Safety Article.

        (2)    The Secretary may determine the portion of the money paid into the Fund that shall be allocated to each program described in paragraph (1) of this subsection.

    (m)    (1)    On or before January 15 of each year, for each major information technology development project or expedited project currently in development or for which operations and maintenance funding is being provided in accordance with subsection (i)(3) of this section, subject to § 2–1257 of the State Government Article, the Secretary shall provide a summary report to the Department of Legislative Services with the most up–to–date project information including:

            (i)    project funding decisions and project status, including:

                1.    estimated project or product costs;

                2.    funding sources; and

                3.    ongoing operating costs after the project is no longer a major development project or expedited project, including:

                A.    costs associated with procuring and maintaining licenses; and

                B.    support to continuously maintain and improve the project or product;

            (ii)    any schedule, cost, and scope changes since the last annual report;

            (iii)    a risk assessment provided by either the Department or the designated unit of State government that details the identified project or product risk, including:

                1.    a description of the type of risk, including:

                A.    governance;

                B.    resource availability or capability;

                C.    funding;

                D.    interdependencies with other systems;

                E.    technical issues;

                F.    organizational culture; or

                G.    ability to support in the long term;

                2.    the risk likelihood;

                3.    the risk priority;

                4.    the risk owner;

                5.    planned risk mitigation strategy; and

                6.    the risk status as of the report date;

            (iv)    project tracking metrics, including:

                1.    describing the functionality and features that have been delivered as of the report date; and

                2.    qualitative and quantitative data showing progress towards project goals; and

            (v)    any change in the monitoring or oversight status.

        (2)    The report submitted under this subsection:

            (i)    is confidential and not subject to disclosure under Title 4 of the General Provisions Article;

            (ii)    shall communicate the requisite information in a clear and concise manner that, to the greatest extent possible, avoids the use of technical language or reliance on existing industry knowledge; and

            (iii)    shall include an executive summary of key information, including:

                1.    the total value of the portfolio, including:

                A.    annual development costs;

                B.    funding sources; and

                C.    projected ongoing operating costs over the next 5 years; and

                2.    a summary of new projects including:

                A.    the advantages of the new projects; and

                B.    any new or innovative aspects of development processes.

    (n)    (1)    The Department shall publish and maintain a publicly available project and portfolio dashboard on the Department’s website.

        (2)    The dashboard shall include all major information technology development projects and expedited projects, organized by the accountable unit of State government.

        (3)    For each project, the dashboard shall:

            (i)    specify the schedule management for the project, including:

                1.    the project start date;

                2.    estimated length of the project, by phase;

                3.    planned milestones with estimated completion dates; and

                4.    completed milestones with completion dates;

            (ii)    list the estimated project cost;

            (iii)    list the total amount appropriated for the current fiscal year;

            (iv)    list the total amount spent during the prior fiscal year, categorized by:

                1.    vendor costs;

                2.    agency labor;

                3.    software licenses, subscriptions, and other costs;

                4.    other expenses; and

                5.    total expenditures;

            (v)    for projects in development:

                1.    the prior fiscal year forecast accompanied by actual data and the resulting variance; and

                2.    the current year forecast; and

            (vi)    subject to subsection (o) of this section, identify major project or product risks, including:

                1.    risk description;

                2.    risk impact;

                3.    risk likelihood;

                4.    mitigation strategy; and

                5.    risk status.

    (o)    (1)    The Department may redact specific risks identified under subsection (n)(3)(vi) of this section from the public dashboard if the Department determines that public sharing of the information could pose a risk to the project.

        (2)    If a risk is redacted from the dashboard, the information shall be shared with the Legislative Policy Committee.

        (3)    A risk redacted from the dashboard is confidential and not subject to disclosure under Title 4 of the General Provisions Article.

    (p)    (1)    The Secretary may adopt regulations necessary to carry out this section.

        (2)    The Secretary shall adopt regulations necessary to establish a process for units of State government to request and receive funding for an expedited project aligned with the State Modernization Plan that shall:

            (i)    allow units of State government to apply for project funding biannually;

            (ii)    be consistent with the goals and preferences established under Title 14 of this article and encourage small and minority business enterprise vendors; and

            (iii)    provide measures that ensure compliance with this subtitle and the Department’s regulations by both vendors and units of State government.

    (q)    The Chief Information Officer for a unit of State government with a planned or ongoing major information technology development project shall meet with the Secretary on a quarterly basis to report on and discuss the ongoing information technology development projects, including:

        (1)    project budget;

        (2)    project vendor performance or nonperformance;

        (3)    project scope;

        (4)    project schedule;

        (5)    the capacity of the unit to implement the project; and

        (6)    any other items the Secretary deems relevant to the successful implementation of the project.