Ordinance on IT in the Cantonal Administration (InfV) - Subject Matter (INFV)

1. This regulation establishes the principles for the use of information and communication technology (ICT). It governs the organization of information technology and digital transformation, as well as the planning, management, procurement, acquisition, and operation of ICT.

1. This regulation applies to all departments and offices of the cantonal administration as well as the State Chancellery.

2. The regulation does not apply to

a) radio communication and applications/systems in separate networks of the Cybercrime Services of the Cantonal Police;

b) the specific systems of the Civil Engineering Office for the operational and safety equipment (BSA) of cantonal and national road infrastructure;

c) the information technology for the operation of the Graubünden Cantonal School.

3. The cantonal courts, the autonomous public-law institutions of the canton, and other organizations that share the information technology of the cantonal administration are obligated through an agreement to comply with the relevant provisions.

4. Further exemptions from the scope are decided by the government.

1. The information technology of the cantonal administration enables customer-oriented, efficient, effective, economical, contemporary, sustainable, and secure administrative activities.

2. Within the administration, as well as in interactions with the population, the economy, and other authorities, paperless and digital handling of transactions is enabled and expanded through media disruption-free processes.

1. The government decides on the ICT strategy, the Digital Administration Strategy, as well as IT directives with strategic or fundamental significance.

1. The IT Coordination (IK) is the coordination and decision-making body regarding the use of ICT. It

a) advises on all IT matters, except the Digital Administration strategy, which are adopted by the government;

b) decides on subordinate theme-specific strategies in the field of information technology, taking into account the strategic objectives adopted by the government;

c) reviews department-specific ICT strategies, which are subordinate to the cantonal ICT strategy, and can impose conditions on them;

d) examines IT projects charged to the investment account or of strategic or cross-departmental importance. It issues implementation recommendations and can make the implementation dependent on conditions;

e) decides on cross-departmental measures and ICT standards, provided these have a certain impact on employee activities, the organization, or operational processes;

f) takes note of matters in the field of information technology, particularly the project portfolio Digital Transformation and ICT.

2. The IK is chaired by the Head of the Office of Information Technology as a representative of the Department of Finance and Municipalities. Additional members include one representative each from the other departments and the State Chancellery.

3. The other departments and the State Chancellery appoint their representative themselves.

4. Without voting rights, one representative each from the Financial Audit and the Cantonal Courts, as well as the Head of IT Management and the Head of the Digital Administration Staff Unit, may participate in the meetings. The IK can invite other persons in an advisory capacity.

1. The PLA is the steering committee for the implementation of the Digital Administration Strategy. In consultation with the affected departments, it can, in particular

a) identify cross-departmental projects and basic services and manage the use of the Digital Administration commitment credit by prioritizing overarching initiatives;

b) establish overarching guidelines and standards for the digital transformation of the cantonal administration for cross-departmental projects and basic services.

2. The PLA is chaired by the head of the Department of Finance and Municipalities. Other members include the digitization officers (DV) of the departments and the state chancellery, as specified in Article 9.

3. Representatives from the Office of Information Technology, the Personnel Office, and the State Chancellery may attend the meetings without voting rights. The PLA may invite additional persons in an advisory capacity.

1. Information Technology Management is a department of the Office for Information Technology. It

a) prepares the tasks of the IT management, assumes strategic IT planning, and manages overarching IT projects;

b) develops strategic, cross-cutting standards and guidelines concerning the use of ICT;

c) manages the overarching project portfolio of Digital Transformation and ICT.

1. The Digital Administration Unit is located within the Department of Finance and Municipalities. It coordinates the implementation of the Digital Administration Strategy.

1. The IT Officers shall promote digital transformation within their respective department and the associated offices or within the State Chancellery.

2. Each department and the State Chancellery shall designate one person as the IT Officer.

1. The Office of Information Technology is the central IT service provider and operator of fundamental IT services for the cantonal administration.

2. The Office of Information Technology issues operational IT directives, subject to Article 5, Paragraph 1, Letter e, and in consultation with the affected departments.

3. The cantonal administration also has a limited number of specific IT service providers who can deliver defined services. These are

a) the GIS Competence Center of the Office of Agriculture and Geoinformation in the field of the Geographical Information System of Graubünden;

b) the Cantonal Police in the area of "Authorities and Organizations for Rescue and Safety" (BORS);

c) the Civil Engineering Office in the field of specific IT services, particularly on behalf of the Federal Roads Office (ASTRA).

4. In the interest of safeguarding the overall interests of the canton, services may also be offered by IT service providers to third parties, particularly the cantonal courts, municipalities, and administration-related bodies.

1. Each administrative unit possesses a minimal level of its own IT competence. Particularly in the areas of management and maintenance of specialized applications, the administrative units may have additional IT competencies.

1. Basic IT services must generally be obtained from the Office for Information Technology. Exceptions must be submitted to the IK in consultation with the Office for Information Technology.

2. Other IT services can be obtained internally or externally within the administration. The key criteria for selection are overall cost-effectiveness, standardization, data security, and data protection.

1. The Office for Information Technology defines requirements for ICT services and product standards and serves as the central and sole procurement authority for IT resources and services. Exceptions are agreed in writing between the Office for Information Technology and the affected departments.

1. For all IT systems and applications, an adequate protection of confidentiality as well as availability, integrity, and traceability must be ensured.

2. The review of protective measures is an ongoing task for the responsible administrative units and IT service providers.

3. The cantonal IT security officer is located within the Office for Information Technology.

4. The Office for Information Technology establishes framework guidelines for IT security and for raising awareness among employees.