As federal policy lags, state legislative pipeline is more important for CIOs