Overview
The Oregon Department of Administrative Services (DAS) is the state's central administrative agency — it provides shared business services (HR, finance, fleet, facilities, procurement) to other agencies and sets statewide operating policy. For a technology seller, the relevant engine inside DAS is Enterprise Information Services (EIS), the division led by State Chief Information Officer Terrence Woods that owns statewide IT strategy, the State Data Center, enterprise security, and emerging AI governance.
EIS sets the policies and standards that other Oregon agencies follow, runs shared infrastructure, and is the office shaping how the state approaches generative AI and cloud. DAS Procurement Services operates the statewide contracting vehicles — including Statewide Price Agreements and the OregonBuys eProcurement platform — that most state agencies, and many local governments through cooperative purchasing, buy technology through.
DAS is best understood as both a policy-and-standards authority (via EIS) and the central path to market (via Procurement Services) rather than the largest end spender of IT dollars.
How this account buys
- EIS is the technology buying center — State CIO Terrence Woods owns statewide IT strategy, the State Data Center, and AI/security governance
- Deputy CIO JoLene Swint oversees budget, the PMO, and contract administration — the operational counterpart who shapes what gets funded
- Major IT investments clear the state's IT governance / stage-gate review process before funding is released
- Fastest compliant path: a DAS-managed Statewide Price Agreement, transacted through the OregonBuys eProcurement platform
- GovRAMP cloud-security authorization is now a hard gate for any as-a-service offering touching state data — clear it early, not late
Where Dell Can Play
- Confirm Dell's Statewide Price Agreement coverage and OregonBuys registration — this is the access path to Oregon state agencies and, via ORCPP, many local entities.
- Lead with ISG infrastructure, storage, and managed services tied to EIS's State Data Center and hybrid-cloud modernization.
- Map the AI conversation to Oregon's State AI Action Plan — position trusted-AI infrastructure that fits the state's own governance, not around it.
- Clear Oregon's cloud-security expectations (GovRAMP) early for any cloud / as-a-service play that touches state data.
- Build the State CIO (Terrence Woods) and CISO relationships as the policy-and-standards owners, then extend into program agencies that follow EIS standards.
Budget & Fiscal
DAS is funded largely through assessments and charges to the agencies it serves rather than a single large general-fund IT line, so its leverage is in the standards it sets and the contracts that run through it. Oregon budgets on a two-year cycle; the 2025–27 biennial budget is the relevant planning window, and enterprise IT investments are reviewed through the state's IT governance and stage-gate process.
2025–27
Current biennium
Oregon's two-year budget cycle; the planning window for enterprise IT
EIS
Enterprise IT owner
DAS division under the State CIO; statewide IT, data center, security
Stage-gate
IT investment review
Major IT projects reviewed via state IT governance / oversight
- DAS recovers much of its cost through assessments and service charges to client agencies, not a large standalone general-revenue appropriation — confirm exact figures against the enacted 2025–27 budget before forecasting.
- The largest end IT spend sits with program agencies (e.g., human services, transportation, revenue); EIS sets the standards and shared infrastructure those agencies build on.
Initiatives & Priorities
State AI Action Plan & AI governance
Oregon has moved to govern state use of generative AI through an AI advisory body and action plan coordinated through DAS/EIS. Expect procurement guardrails, acceptable-use policy, and pilots — align AI-infrastructure and trusted-AI messaging to the state's own framework.
AI GovernanceCloud security gate (GovRAMP)
Oregon is among states adopting GovRAMP (formerly StateRAMP) as a cloud-security authorization standard. Cloud and as-a-service offerings should hold the appropriate authorization level to clear procurement — treat it as an early gate, not an afterthought.
Cloud ComplianceState Data Center & infrastructure modernization
EIS operates Oregon's enterprise data center and shared infrastructure. Ongoing refresh, hybrid-cloud, and resiliency work is a recurring track for ISG infrastructure, storage, and managed services.
Data Center ModernizationEnterprise cybersecurity & Cyber Oregon
EIS houses enterprise security and the state CISO function, with statewide standards and incident response. Security modernization and zero-trust alignment are durable themes across state and, via shared services, local entities.
CybersecurityProcurement
Selling to Oregon state agencies runs through DAS Procurement Services and its statewide vehicles rather than one-off agency RFPs. Confirm two things first: that Dell holds (or can ride) the right Statewide Price Agreement and is set up in OregonBuys, and that any cloud/as-a-service offering can meet Oregon's cloud-security authorization expectations.
| Vehicle / gate | What it means for Dell |
|---|---|
| Statewide Price Agreements (SPAs) | DAS-managed contracts that state agencies use to buy without running their own solicitation — the primary path for technology and equipment. |
| OregonBuys | Oregon's statewide eProcurement platform; vendors must be registered and contracts are surfaced/transacted here. |
| ORCPP (Oregon Cooperative Procurement Program) | Lets eligible local governments and other public entities buy off state contracts — extends reach beyond state agencies. |
Spend Signals
GovSpend · as of Aug 10, 2026$4.1M
Dell footprint — all channels (3-yr · FY2023-2025), est.
Direct $4.1M · via resellers ~$0
Expiring contracts (re-compete)
| Contract | Vendor | Expires |
|---|---|---|
| Interagency Agreement (DAS EAM, SOS, DAS DCS, ODE) for PSB UPS Upgrade Project | Oregon Secretary of State | Aug 30, 2026 |
| OSP Mapping Data Maintenance Service Project | Geo Comm Inc | Aug 31, 2026 |
| Oregon Virtual School District Learning Management System | Instructure Inc | Aug 31, 2026 |
| OneNeck IT Solutions, US Signal DAS Data Center Colocation Services | Oneneck It Solutions Llc | Sep 9, 2026 |
| RevQ Revenue Results On-Prem Software and Database (DCBS Contract PO 12-322 Amendment 14) | Avenu Insights Analytics Llc | Sep 30, 2026 |
| DAS EAM/DAS EIS DCS IAA State Data Center Static Transfer Switch Replacement Project 453.019 | Department Of Administrative Services | Dec 31, 2026 |
| Oregon State Police CRIMEvue Replacement Project | Diverse Computing Inc | Feb 9, 2027 |
Open bids / RFPs
| Solicitation | Due |
|---|---|
| Statewide SaaS/COTS Software for Application, Licensing, Regulatory and Compliance Oregon Department of Administrative Services, Oregon | Aug 14, 2026 |
| Oregon Department of Forestry Civil Penalties Case Management (RFP) Oregon Department of Administrative Services, Oregon | Sep 21, 2026 |
- vendorSpend and brandFootprint are omitted: Oregon DAS's GovSpend records for this window are systematically duplicated. The same underlying transaction is re-ingested under multiple PO-number formats (e.g. 'VEN:Dell Inc DT:07/26/2024', 'PO-10700-00018356:9', and 'PO:PO-10700-00018356 VEN:V00008035' can all represent one $772,027.30 line item), and the duplication is NOT uniform across vendors: excluding 'VEN:'-prefixed PO numbers cut SHI International Corp from $141.4M to $41.8M (a ~3.4x drop) but cut CDWG from $101.3M to just $233K (a ~434x drop) — meaning for CDWG almost every real record lacks a non-VEN duplicate and a blanket exclusion rule would wrongly zero out genuine spend rather than removing dupes. No reliable automated dedup rule was found that works consistently across vendors in the time available, so vendor-level totals besides Dell are not reported rather than risk materially wrong figures in either direction.
- Dell is the one figure hand-verified: all 49 raw 'Dell'-named vendor records (Vendor.Name 'Dell') were pulled individually and matched by (date, item description, amount) to identify true duplicate pairs/triples versus genuinely distinct transactions. This reduced the raw naive sum of $8,063,788 to a verified $4,095,246 — roughly half, consistent with a dominant 2x duplication pattern for this vendor, though a few FY25-Q3 records show inconsistent per-line amounts (apparent data-entry artifacts) that were reconciled by cross-checking against the cleanest available copy of each PO.
- categories is omitted: LineItem.Category is empty for these records.
- Dell line items sampled during reconciliation are genuine hardware/services (PowerEdge servers, KVM/rail kits, SolarWinds and OpenManage software, Latitude laptops, warranty) tied to named state facilities (Salem, Bend, SDC) — not a Microsoft-licensing-through-Dell pattern.
- DAS/EIS is a large central-IT and statewide-contract-owning agency; even the verified Dell figure may include enterprise-wide purchasing on behalf of other Oregon agencies, not DAS's own consumption alone.
- expiringContracts/openBids refreshed 2026-08-10 against agencyId 79712 (resolved via lookup_agency; not otherwise documented in this file), using window 2026-08-10–2027-02-28 for contracts and dueDate ≥ 2026-08-10 for bids. The previously listed 'Alert Immunization Information System (ALERT IIS)' bid closed (dueDate 2026-08-04) with no comparable IT-tagged replacement found in the current window, and the original 'Statewide SaaS/COTS Software' bid (dueDate 2026-08-07) closed but was re-listed under a new solicitation record with dueDate 2026-08-14, now shown in its place — so openBids holds 2 entries rather than the prior 3.
- expiringContracts additionally re-applied a two-week runway floor on 2026-08-10 (endDate >= 2026-08-24): 1 entry (Tyler Technologies, VetraSpec Agreement, endDate 2026-08-23) was removed and 3 IT-relevant replacements added to hold the panel at 7. While sourcing replacements, the known Oregon reingest-duplication issue documented above (see the vendorSpend note) showed up again in the contracts feed in a second, distinct form: a 'CLOUD SERVICES' price agreement and a 'Data Communications Products/Services - Infra. Network Equipment' price agreement each list the SAME title/end-date under 7-8 different approved vendors (e.g. CDWG, Carahsoft, SHI, A T Systems, Strategic Communications, CenturyLink, Smartronix for Cloud Services; Cradlepoint, Juniper, HPE, Palo Alto Networks, Cisco, Extreme Networks, NEC for network equipment) — this looks like a genuine multi-vendor statewide price agreement (each approved supplier gets its own contract record) rather than a single re-ingested transaction, but it was not fully verified and none of these vendor-slate entries were added to the panel to avoid padding it with what may be duplicative or non-committal vehicle listings.
Power Structure
| Decision-maker | Why they matter |
|---|---|
| Betsy Imholt Director, Dept of Administrative Services | Leads the central services agency and serves as the state's chief operating officer; sets enterprise operating direction. Appointed DAS director in mid-2025, succeeding Berri Leslie. |
| Terrence Woods State Chief Information Officer (DAS/EIS) | Owns statewide IT strategy, the State Data Center, security, and AI governance — the top technology relationship for the DAS/EIS motion. State CIO since 2018; confirmed still in seat as of June 2026. |
| JoLene Swint Deputy State Chief Information Officer (DAS/EIS) | Number two in EIS; oversees budget, the program management office, shared services, and contract administration — a key operational and procurement-adjacent relationship. Confirmed current as of June 2026. |
| Ben Gherezgiher State Chief Information Security Officer / Director, Cyber Security Services | Owns statewide security policy, the state SOC, GovRAMP posture, and incident response — the gate for anything touching state data. Has held the CISO/CSS role since 2022; the seat is filled (not the transition/open status previously flagged), though verify spelling and title before outreach. |
| State Chief Data Officer Enterprise data strategy | Owns data governance, sharing, and analytics direction — relevant for data-platform and AI-readiness conversations. Confirm current officeholder. |
| DAS Procurement Services Statewide contracting & OregonBuys | Owns SPAs, solicitations, and vendor onboarding — the path onto the vehicles agencies buy through. |
News & Signals
Jul 2026
State CIO splits privacy and AI leadership: Michael Hanna-Butros Meyering named Chief Privacy and Communications Officer (July 21, 2026)
Nik Blosser, Oregon's first Chief Privacy Officer and AI Strategist, now focuses exclusively on AI as Chief AI Officer, while Meyering takes over the enterprise privacy program and executive communications. Both leaders report into CIO Terrence Woods's EIS org — a cleaner, dedicated AI relationship to engage on trusted-AI infrastructure and governance tooling.
May 2026
EIS reshuffles senior leadership: three new Assistant State CIOs and a Data Center Services deputy
EIS added ASCIOs Erinn Cartwright, Mukunda Penugonde, and Max Wagoner-Watts, and moved ASCIO Scott Emry to Deputy Director of Data Center Services — a broadened bench and a dedicated data-center lead. Refresh the EIS org map before outreach; State CIO Terrence Woods and Deputy CIO JoLene Swint remain in place.
May 2026
DAS consolidates statewide IT and information-security rules under the State CIO (new OAR Chapter 128)
A permanent administrative order renumbered identity/e-signature and state information-security rules into a single chapter under the CIO's office — organizational only, but a signal of continued centralization. Cite current rule locations when referencing Oregon security/IT standards.
May 2026
GovRAMP moves into Oregon procurement: cloud solicitations and contracts now require new security provisions
Under GovRAMP Phase 1 (Accept), new solicitation and contract documents for cloud/hosted services must include added security provisions for agencies subject to EIS authority (ORS 276A.300). Clear the appropriate GovRAMP authorization early for any as-a-service play.
Feb 2026
Oregon issues updated interim Generative AI guidance restricting GenAI to lower-sensitivity data
State-agency use of generative AI (including Microsoft Copilot and embedded AI) is limited to Level 1 (Published) and Level 2 (Limited) data unless EIS grants an exception. Align any AI offer to the state's data-classification guardrails rather than around them.
Feb 2026
New statewide Cyber and Information Security Policy takes effect (107-004-052)
A unified executive-branch cyber and information-security program under the State CISO / Cyber Security Services took effect 2/17/2026 — security posture is a hard, standardized procurement gate for anything touching state data.
Sources
- Oregon DAS — Enterprise Information Services (EIS)
- Oregon DAS — Procurement Services
- OregonBuys eProcurement
- GovRAMP (formerly StateRAMP)
- Oregon EIS — State CIO (Terrence Woods, Deputy CIO JoLene Swint)
- Oregon DAS — Leadership (Director Betsy Imholt)
- Oregon EIS — Updated Interim Guidance on Generative AI Access and Usage (Feb 6, 2026)
- Oregon DAS — Cyber and Information Security Policy 107-004-052 (eff. 2/17/2026)
- Oregon EIS — Cyber Security Services
- EIS Digest — May 2026
- Oregon EIS Newsroom — State CIO appoints Michael Hanna-Butros Meyering as Chief Privacy and Communications Officer (July 21, 2026)