As used in this chapter:

1. 1. 'Agency' or 'entity' does not include any agricultural commodity promotion group or any occupational or professional board.

2. 2. 'Cybersecurity' means processes or capabilities, wherein, systems, communications, and information are protected and defended against damage, unauthorized use or modification, and exploitation.

3. 3. 'Cybersecurity strategy' means a vision, plan of action, or guiding principles. Unless otherwise defined in this chapter, the term does not mean an associated operational plan.

4. 4. 'Department' means the information technology department.

5. 5. 'Information technology' means the use of hardware, software, services, and supporting infrastructure to manage and deliver information using voice, data, and video.

6. 6. 'Major information technology project' means a project that meets one or more of the following criteria, as determined by the chief information officer:

1. a. An estimated total cost, as defined by the department, of five million dollars or more;

2. b. Requires one year or longer to reach operational status; or

3. c. Requires oversight due to its potential benefits, risks, public impact, visibility, or other significant reason.

7. 7. 'Network services' means the equipment, software, and services necessary to transmit voice, data, or video.