(1) "Committee" means the joint technology committee created in section 2-3-1702.

(1.3) "Cybersecurity" means a broad range of technologies, processes, and practices designed to protect networks, computers, programs, and data from attack, damage, or unauthorized access.

(1.7) "Data privacy" means the collection and dissemination of data, technology, and the public expectation of privacy. "Data privacy" also includes the way personally identifiable information or other sensitive information is collected, stored, used, and finally destroyed or deleted, in digital form or otherwise.

(2) (a) "Information technology" means information technology and computer-based equipment and related services designed for the storage, manipulation, and retrieval of data by electronic or mechanical means, or both. The term includes but is not limited to:

(I) Central processing units, servers for all functions, and equipment and systems supporting communications networks;

(II) All related services, including feasibility studies, systems design, software development, system testing, external off-site storage, and network services, whether provided by state employees or by others;

(III) The systems, programs, routines, and processes used to employ and control the capabilities of data processing hardware, including operating systems, compilers, assemblers, utilities, library routines, maintenance routines, applications, application testing capabilities, storage system software, hand-held device operating systems, and computer networking programs;

(IV) The application of electronic information processing hardware, software, or telecommunications to support state government business processes.

(b) "Information technology" does not mean post-implementation support, hardware life-cycle replacement, or routine maintenance.

(2.5) (a) "Information technology budget request" means a budget request from a state agency or state institution of higher education for the installation, development, or upgrade of information technology, including the purchase of services from the office of information technology on the condition that the use of such services is the most cost beneficial option or falls within the duties and responsibilities of the office of information technology or the office's chief information officer as described in sections 24-37.5-105 and 24-37.5-106, C.R.S. "Information technology budget request" does not include budget requests that are primarily operational in nature or a budget request where the majority of funding will be used to support or modify state staffing levels.

(b) For purposes of this subsection (2.5), "information technology" means information technology as defined in section 24-37.5-102 (2), C.R.S., the majority of the components of which have a useful life of at least five years; except that "information technology" does not include personal computer replacement or maintenance, unless such personal computer replacement or maintenance is a component of a larger computer system upgrade.

(3) "Office of information technology" means the office of information technology created in section 24-37.5-103, C.R.S.

(4) "Oversee" means reviews of major information technology projects as defined in section 24-37.5-102 (2.6), reviews of the office's budget requests for information technology projects, and ensuring that information technology projects follow best practice standards as established by the office of information technology. "Oversee" does not include interference with the office's general responsibilities set forth in this article 3.

(5) "State agency" means all of the departments, divisions, commissions, boards, bureaus, and institutions in the executive branch of the state government. "State agency" does not include the legislative or judicial department, the department of law, the department of state, the department of the treasury, or state-supported institutions of higher education, including the Auraria higher education center established in article 70 of title 23, C.R.S.