On or before December 31, 2024, the office shall promulgate rules in accordance with article 4 of this title to establish a technology life-cycle plan. The rules may consider information security risk, infrastructure risk, operating cost misalignment, productivity cost misalignment, or talent depreciation in connection with an information technology system or asset.
C.R.S. § 24-37.5-126