This strategic plan, known as Secure Colorado, is a three-year initiative focused on making strategic decisions and investments to protect the data Coloradans have entrusted to state government. Secure Colorado outlines the strategic goals and initiatives of the Colorado Information Security Program to safeguard the State’s information assets and assure the confidentiality, integrity, and availability of the information vital to achieve the State of Colorado’s mission.

The Colorado Information Marketplaces addresses the need to shift focus from siloed data exchanges, which can be prone to misinterpretation, inaccuracy, and risk. Instead, the Colorado Information Marketplace relies on existing data standards, such as the National Information Exchange Model and a governance model to create a reusable source of information for both state, local, county, city, tribal and other external entities that qualify for access and use of the data. The CIM framework applies both consistency of data standards and governance for privacy and security, while improving data transparency and reuse. Mission critical information empowers people to make better decisions in a real time (or near real time) environment, rather than waiting months or, in some cases, years to get access to the right data. Information exchanges will benefit every agency with the State, which will in turn benefit every citizen.

In accordance with §24-37.5-105(9), the office of the Chief Technology Officer (CTO) has adopted a Web Services standard to guide the creation and utilization of Web Services for use in all applicable State Applications. This Standard shall be titled “Web Services-2012v1”.

In accordance with §24-­‐37.5-­‐105(9), the State of Colorado Chief Technology Officer (CTO) adopts the following standard to guide the procurement and use of Mobile Devices for use in all applicable State of Colorado Applications. This Standard shall be titled “MobileDevices-­‐2012v1”.

The plan is a document that details how OIT will measure performance for its customers during the fiscal year.

The State of Colorado Office of Information Technology (OIT) has adopted version 15 of the National Institute of Standards and Technology (NIST) definitions related to cloud technology as an operating standard to enhance commonality in communications around cloud-based computing issues.

In accordance with §24-37.5-105(9), the office of the State of Colorado Chief Technology Officer adopts the following standard to guide browser usage within the State’s Enterprise Applications. This standard shall be defined as "Web Browsers 2012v1".

The Compass: Enterprise Architecture 2011-2014 Technology Roadmap is a living document that will be reviewed on a quarterly basis and updated as necessary. The goal of a living document is to obtain feedback from OIT agency partners and other functional area teams within the organization in an ongoing and collaborative way.

The Chief Technology Officer (CTO) is the author primary author of The Compass: Enterprise Architecture 2011-2014 Technology Roadmap. The CTO Enterprise Architecture (EA) Team will support the CTO in making quarterly updates,

This document lays out the principles and decision criteria for employing “cloud first” services in specific instances and differentiates the different service and delivery models that may be appropriate for different application scenarios. Given the state of the industry, Colorado’s IT infrastructure and footprint, and the opportunities that are available, Colorado is proceeding with a “cloud first” policy, mirroring the Federal government’s cloud policy. To that end, Colorado is making a deliberate and explicit policy to “cloud first” services. The State will proceed with the presumption that new services, applications and major revisions to existing applications will be supported in a cloud based environment first, unless there are substantive reasons why they should be hosted on the State’s private infrastructure.

The State of Colorado office of the Chief Technology Officer (CTO) adopts the this standard to guide the creation and utilization of Web Services for use in all applicable State Applications. This standard defines acceptable mobile application platforms for application development