1As used in this chapter, the term:8(1) 9“Agency assessment” means the amount each customer entity must pay annually for services from the Department of Management Services and includes administrative and data center services costs.
36(2) 37“Agency data center” means agency space containing 10 or more physical or logical servers.
51(3) 52“Breach” has the same meaning as provided in s. 61501.17162. 63(4) 64“Business continuity plan” means a collection of procedures and information designed to keep an agency’s critical operations running during a period of displacement or interruption of normal operations.
92(5) 93“Cloud computing” has the same meaning as provided in Special Publication 800-145 issued by the National Institute of Standards and Technology.
114(6) 115“Computing facility” or “agency computing facility” means agency space containing fewer than a total of 10 physical or logical servers, but excluding single, logical-server installations that exclusively perform a utility function such as file and print servers.
152(7) 153“Customer entity” means an entity that obtains services from the Department of Management Services.
167(8) 168“Data” means a subset of structured information in a format that allows such information to be electronically retrieved and transmitted.
188(9) 189“Data governance” means the practice of organizing, classifying, securing, and implementing policies, procedures, and standards for the effective use of an organization’s data.
212(10) 213“Department” means the Department of Management Services.
220(11) 221“Disaster recovery” means the process, policies, procedures, and infrastructure related to preparing for and implementing recovery or continuation of an agency’s vital technology infrastructure after a natural or human-induced disaster.
251(12) 252“Electronic” means technology having electrical, digital, magnetic, wireless, optical, electromagnetic, or similar capabilities.
265(13) 266“Electronic credential” means an electronic representation of the identity of a person, an organization, an application, or a device.
285(14) 286“Enterprise” means state agencies and the Department of Legal Affairs, the Department of Financial Services, and the Department of Agriculture and Consumer Services.
309(15) 310“Enterprise architecture” means a comprehensive operational framework that contemplates the needs and assets of the enterprise to support interoperability.
329(16) 330“Enterprise information technology service” means an information technology service that is used in all agencies or a subset of agencies and is established in law to be designed, delivered, and managed at the enterprise level.
365(17) 366“Event” means an observable occurrence in a system or network.
376(18) 377“Incident” means a violation or imminent threat of violation, whether such violation is accidental or deliberate, of information technology resources, security, policies, or practices. An imminent threat of violation refers to a situation in which the state agency has a factual basis for believing that a specific incident is about to occur.
429(19) 430“Information technology” means equipment, hardware, software, firmware, programs, systems, networks, infrastructure, media, and related material used to automatically, electronically, and wirelessly collect, receive, access, transmit, display, store, record, retrieve, analyze, evaluate, process, classify, manipulate, manage, assimilate, control, communicate, exchange, convert, converge, interface, switch, or disseminate information of any kind or form.
481(20) 482“Information technology policy” means a definite course or method of action selected from among one or more alternatives that guide and determine present and future decisions.
508(21) 509“Information technology resources” has the same meaning as provided in s. 520119.011521. 522(22) 523“Information technology security” means the protection afforded to an automated information system in order to attain the applicable objectives of preserving the integrity, availability, and confidentiality of data, information, and information technology resources.
556(23) 557“Interoperability” means the technical ability to share and use data across and throughout the enterprise.
572(24) 573“Open data” means data collected or created by a state agency, the Department of Legal Affairs, the Department of Financial Services, and the Department of Agriculture and Consumer Services, and structured in a way that enables the data to be fully discoverable and usable by the public. The term does not include data that are restricted from public disclosure based on federal or state laws and regulations, including, but not limited to, those related to privacy, confidentiality, security, personal health, business or trade secret information, and exemptions from state public records laws; or data for which a state agency, the Department of Legal Affairs, the Department of Financial Services, or the Department of Agriculture and Consumer Services is statutorily authorized to assess a fee for its distribution.
700(25) 701“Performance metrics” means the measures of an organization’s activities and performance.
712(26) 713“Project” means an endeavor that has a defined start and end point; is undertaken to create or modify a unique product, service, or result; and has specific objectives that, when attained, signify completion.
746(27) 747“Project oversight” means an independent review and analysis of an information technology project that provides information on the project’s scope, completion timeframes, and budget and that identifies and quantifies issues or risks affecting the successful and timely completion of the project.
788(28) 789“Risk assessment” means the process of identifying security risks, determining their magnitude, and identifying areas needing safeguards.
806(29) 807“Service level” means the key performance indicators (KPI) of an organization or service which must be regularly performed, monitored, and achieved.
828(30) 829“Service-level agreement” means a written contract between the Department of Management Services and a customer entity which specifies the scope of services provided, service level, the duration of the agreement, the responsible parties, and service costs. A service-level agreement is not a rule pursuant to chapter 120.
876(31) 877“Stakeholder” means a person, group, organization, or state agency involved in or affected by a course of action.
895(32) 896“Standards” means required practices, controls, components, or configurations established by an authority.
908(33) 909“State agency” means any official, officer, commission, board, authority, council, committee, or department of the executive branch of state government; the Justice Administrative Commission; and the Public Service Commission. The term does not include university boards of trustees or state universities. As used in part I of this chapter, except as otherwise specifically provided, the term does not include the Department of Legal Affairs, the Department of Agriculture and Consumer Services, or the Department of Financial Services.
986(34) 987“SUNCOM Network” means the state enterprise telecommunications system that provides all methods of electronic or optical telecommunications beyond a single building or contiguous building complex and used by entities authorized as network users under this part.
1023(35) 1024“Telecommunications” means the science and technology of communication at a distance, including electronic systems used in the transmission or reception of information.
1046(36) 1047“Threat” means any circumstance or event that has the potential to adversely impact a state agency’s operations or assets through an information system via unauthorized access, destruction, disclosure, or modification of information or denial of service.
1083(37) 1084“Variance” means a calculated value that illustrates how far positive or negative a projection has deviated when measured against documented estimates within a project plan.
