TO ALL TO WHOM THESE PRESENTS COME – GREETINGS:
EO 25-10: EXECUTIVE ORDER CONCERNING MODERNIZING AND ENHANCING EFFICIENCY, SECURITY, AND OVERSIGHT OF STATEWIDE INFORMATION TECHNOLOGY (IT) SERVICES
WHEREAS: Citizens deserve a government that serves them in an efficient and effective manner, while limiting its reach into their wallets and effect on their daily lives;
WHEREAS: I initiated the Arkansas Forward project in January of 2024 to find efficiencies and savings across state government—a process that has been replicated in large part by President Trump’s Department of Government Efficiency;
WHEREAS: The Department of Transformation and Shared Services, Division of Information Systems shall be known as the Department of Shared Administrative Services, Office of State Technology, on August 6, 2025;
WHEREAS: Modernizing and enhancing the efficiency, security, and oversight of Information Technology (IT) services is critical to the effective functioning of state government and the delivery of services to Arkansans;
WHEREAS: A phased approach aligned with the Arkansas Forward IT strategy is essential to strengthen governance, delivery, and operational efficiency;
WHEREAS: A centralized governance structure, improved IT procurement, and shared service delivery models will optimize resources and ensure adherence to statewide IT policies and standards; and
WHEREAS: Implementing a shared service delivery model and central governance structure will increase efficiency, improve oversight of IT operations, provide higher-quality IT services, and protect IT resources across the state.
NOW, THEREFORE, I, SARAH HUCKABEE SANDERS, acting under the authority vested in me as Governor of the State of Arkansas, do hereby order:
The Department of Transformation and Shared Services, Division of Information Systems (DIS), shall lead the implementation of this Executive Order and is hereby directed to take the following actions:
1. Centralize IT Administration. DIS shall be vested with all powers and duties necessary to administer the state’s information technology functions effectively.
2. Statewide Project Management. DIS shall be tasked with the management of technology projects statewide, assessing viability and operational efficiencies, conducting cost-benefit analyses, and implementing measures to reduce duplication in IT procurement and services.
3. Centralize IT Governance. DIS shall develop a centralized IT governance model to provide uniform oversight of IT procurement across all state entities. DIS shall create an IT Governance Team to prioritize initiatives, allocate resources, and oversee statewide IT strategy and execution. The IT Governance Team shall include, without limitation to, representatives of the following entities:
a. the Department of Finance & Administration;
b. the Department of Inspector General;
c. the Office of State Procurement; and
d. the Division of Information Systems.
4. Comprehensive IT Assessments. In coordination with other state entities, DIS shall perform detailed assessments of IT and telecommunication assets and services, including:
a. An inventory of hardware, software, and telecommunications systems;
b. Review of contracts, licenses, and vendor agreements; and
c. Evaluation of system performance and utilization to identify redundancies, outdated technologies, and underutilized resources.
5. Comprehensive IT Consolidation Plan. DIS shall create a strategic IT consolidation plan that includes:
a. Plans for eliminating duplicative IT services and streamlining operations;
b. Recommendations for centralizing procurement and resource management;
c. Detailed transition planning to a unified IT framework, including key milestones and timelines;
d. Measures to enhance transparency in IT spending and resource allocation;
e. Guidelines to maintain service quality and minimize disruptions during the transition; and
f. The development, implementation, and maintenance of a unified statewide information technology plan.
6. Create a Central Cybersecurity Office. DIS shall establish a dedicated, centralized cybersecurity office that shall be responsible for:
a. Managing and coordinating all cyber risk management activities across the state;
b. Maximizing state cybersecurity resources; and
c. Developing and enforcing statewide cybersecurity governance standards, policies, and practices, ensuring compliance with state and federal regulations.
This Executive Order shall become effective upon its signing and shall remain in full force and effect until the completion of the actions ordered herein.
IN TESTIMONY WHEREOF, I have hereunto set my hand and cause the Great Seal of the State of Arkansas to be affixed this 11th day of June, in the year of our Lord 2025.
###
