NY State Senate Bill 2017-S926A

Senate Bill S926A

2017-2018 Legislative Session

Requires a comprehensive review of all cyber security services to be performed every five years

download bill text pdf

Archive: Last Bill Status - In Senate Committee Finance Committee

Introduced
- In Committee Assembly
- In Committee Senate
- On Floor Calendar Assembly
- On Floor Calendar Senate
- Passed Assembly
- Passed Senate
Delivered to Governor
Signed By Governor

Please enter your contact information

First Name

Last Name

Email Address

A valid email address is required.

Home address is used to determine the senate district in which you reside. Your support or opposition to this bill is then shared immediately with the senator who represents you.

Optional services from the NY State Senate:

Create an account. An account allows you to officially support or oppose key legislation, sign petitions with a single click, and follow issues, committees, and bills that matter to you. When you create an account, you agree to this platform's terms of participation.

Include a custom message for your Senator? (Optional)

Enter a message to your senator. Many New Yorkers use this to share the reasoning behind their support or opposition to the bill. Others might share a personal anecdote about how the bill would affect them or people they care about.

Actions

View Actions

	Assembly Actions - Lowercase Senate Actions - UPPERCASE
Jan 22, 2018	reported and committed to finance
Jan 16, 2018	print number 926a
Jan 16, 2018	amend and recommit to veterans, homeland security and military affairs
Jan 03, 2018	referred to veterans, homeland security and military affairs returned to senate died in assembly
Jun 19, 2017	referred to governmental operations delivered to assembly passed senate ordered to third reading cal.1883 committee discharged and committed to rules
Feb 14, 2017	reported and committed to finance
Jan 05, 2017	referred to veterans, homeland security and military affairs

Votes

- Jun 19, 2017 - Floor Vote
  S926A
  
  62
  
  Aye
  
  0
  
  Nay
  
  0
  
  Absent
  
  1
  
  Excused
  
  0
  
  Abstained
  - - Floor Vote: Jun 19, 2017
      
      aye (62)
      
      Addabbo Jr.
      
      Akshar
      
      Alcantara
      
      Amedore
      
      Avella
      
      Bailey
      
      Benjamin
      
      Bonacic
      
      Boyle
      
      Breslin
      
      Brooks
      
      Carlucci
      
      Comrie
      
      Croci
      
      DeFrancisco
      
      Diaz
      
      Dilan
      
      Felder
      
      Flanagan
      
      Funke
      
      Gallivan
      
      Gianaris
      
      Golden
      
      Griffo
      
      Hamilton
      
      Hannon
      
      Helming
      
      Hoylman-Sigal
      
      Jacobs
      
      Kaminsky
      
      Kennedy
      
      Klein
      
      Krueger
      
      LaValle
      
      Lanza
      
      Larkin
      
      Latimer
      
      Little
      
      Marcellino
      
      Marchione
      
      Montgomery
      
      Murphy
      
      O'Mara
      
      Ortt
      
      Parker
      
      Peralta
      
      Persaud
      
      Phillips
      
      Ranzenhofer
      
      Ritchie
      
      Rivera
      
      Robach
      
      Sanders Jr.
      
      Savino
      
      Serino
      
      Seward
      
      Squadron
      
      Stavisky
      
      Stewart-Cousins
      
      Tedisco
      
      Valesky
      
      Young
      
      excused (1)
      
      Serrano
  Jan 22, 2018 - Veterans, Homeland Security And Military Affairs Committee Vote
  S926A
  
  13
  
  Aye
  
  0
  
  Nay
  
  0
  
  Aye with Reservations
  
  0
  
  Absent
  
  0
  
  Excused
  
  0
  
  Abstained
  - - Veterans, Homeland Security And Military Affairs Committee Vote: Jan 22, 2018
      
      aye (13)
      
      Addabbo Jr.
      
      Amedore
      
      Carlucci
      
      Comrie
      
      Croci
      
      Felder
      
      Golden
      
      Jacobs
      
      Kaminsky
      
      Larkin
      
      Marchione
      
      Ortt
      
      Sanders Jr.
  Feb 13, 2017 - Veterans, Homeland Security And Military Affairs Committee Vote
  S926A
  
  13
  
  Aye
  
  0
  
  Nay
  
  0
  
  Aye with Reservations
  
  0
  
  Absent
  
  0
  
  Excused
  
  0
  
  Abstained
  - - Veterans, Homeland Security And Military Affairs Committee Vote: Feb 13, 2017
      
      aye (13)
      
      Addabbo Jr.
      
      Amedore
      
      Carlucci
      
      Comrie
      
      Croci
      
      Felder
      
      Golden
      
      Jacobs
      
      Kaminsky
      
      Larkin
      
      Marchione
      
      Ortt
      
      Sanders Jr.
  Jun 19, 2017 - Rules Committee Vote
  S926A
  
  25
  
  Aye
  
  0
  
  Nay
  
  0
  
  Aye with Reservations
  
  0
  
  Absent
  
  0
  
  Excused
  
  0
  
  Abstained
  - - Rules Committee Vote: Jun 19, 2017
      
      aye (25)
      
      Bonacic
      
      Breslin
      
      Carlucci
      
      DeFrancisco
      
      Dilan
      
      Flanagan
      
      Gianaris
      
      Griffo
      
      Hannon
      
      Kennedy
      
      Krueger
      
      LaValle
      
      Lanza
      
      Larkin
      
      Little
      
      Marcellino
      
      Montgomery
      
      Parker
      
      Ranzenhofer
      
      Robach
      
      Savino
      
      Seward
      
      Squadron
      
      Stewart-Cousins
      
      Valesky

Bill Amendments

Original

A (Active)

co-Sponsors

View additional co-sponsors

2017-S926 - Details

See Assembly Version of this Bill:: A3451
Current Committee:: Senate Finance
Law Section:: Executive Law
Laws Affected:: Add §719, Exec L
Versions Introduced in 2015-2016 Legislative Session:: S3405, A6133

2017-S926 - Summary

Requires a comprehensive review of all cyber security services to be performed every five years.

2017-S926 - Sponsor Memo

                                 BILL NUMBER:  S926

 TITLE OF BILL :

An act to amend the executive law, in relation to a cyber security
report

 PURPOSE OR GENERAL IDEA OF BILL :

This bill would amend the executive law to requires a comprehensive
review of all cyber security services to be performed every five
years.

 SUMMARY OF SPECIFIC PROVISIONS :

This bill would add a new section to the executive law to establish a
Quinquennial Cyber Security Report.

Specifically, this new section would:

*Require the Commissioner of the Division of Homeland Security and
Emergency Services, in consultation with the Superintendent of the
State Police, the Chief Information Officer, and the President of the
Center for Internet Security, to prepare and issue a quinquennial
cyber security report;

*Require that such report must include an assessment of each and every
cyber security need of the state or New York and a detailed
description of how that need is being met; and

*Further require, that persons statutorily entitled to receive the
report, would also be entitled to request additional information to
supplement the report.

 JUSTIFICATION :

According to the such entities as the United States Department of
Homeland Security, Interpol and the New York State White Collar Crime
Task Force, cybercrime is a pervasive and rapidly expanding threat.
New York state is particularly at risk to cybercrime due to its status
as a global hub of international business and commerce. As, most major
national and international banks, insurance companies and brokerage
houses also have headquarters or a significant presence within the
state, such present a particularly attractive target to those who wish
to engage in cyber crime or cyber terrorism.

In addition to regulating the various business entities noted above,
New York State government, also stores and maintains vast quantities
of sensitive personal data pertaining to the citizens of our state.
The state thereby has an incumbent duty to ensure that the cyber
security needs of all entities with state government are being met in
order to protect such information.

By requiring the Division of Homeland Security and Emergency Services'
to identify the various cyber security needs of our state, and detail
how the needs are being met, we can ensure that adequate cyber
security measures are being taken, and that best practices are being
employed to foster the public protection and security the people of
our state deserve.

 PRIOR LEGISLATIVE HISTORY :

S3405 of 2015/16: Passed in the Senate

 FISCAL IMPLICATIONS :

None noted.

 EFFECTIVE DATE :
This act would take effect immediately.

2017-S926 - Bill Text download pdf

                            
 
                     S T A T E   O F   N E W   Y O R K
 ________________________________________________________________________
 
                                    926
 
                        2017-2018 Regular Sessions
 
                             I N  S E N A T E
 
                              January 5, 2017
                                ___________
 
 Introduced  by  Sens. CROCI, AKSHAR, AVELLA, DeFRANCISCO, FUNKE, GOLDEN,
   SEWARD -- read twice and ordered  printed,  and  when  printed  to  be
   committed to the Committee on Veterans, Homeland Security and Military
   Affairs
 
 AN  ACT  to  amend  the  executive  law, in relation to a cyber security
   report

   THE PEOPLE OF THE STATE OF NEW YORK, REPRESENTED IN SENATE AND  ASSEM-
 BLY, DO ENACT AS FOLLOWS:
 
   Section 1. The executive law is amended by adding a new section 719 to
 read as follows:
   §  719.  QUINQUENNIAL  CYBER SECURITY REPORT.  1. THE COMMISSIONER, IN
 CONSULTATION WITH THE SUPERINTENDENT OF  THE  STATE  POLICE,  THE  CHIEF
 INFORMATION  OFFICER, AND THE PRESIDENT OF THE CENTER FOR INTERNET SECU-
 RITY, SHALL PREPARE A REPORT, TO  BE  DELIVERED  TO  THE  GOVERNOR,  THE
 TEMPORARY  PRESIDENT  OF  THE  SENATE,  THE SPEAKER OF THE ASSEMBLY, THE
 CHAIR OF THE SENATE STANDING COMMITTEE ON  VETERANS,  HOMELAND  SECURITY
 AND  MILITARY  AFFAIRS, AND THE CHAIR OF THE ASSEMBLY STANDING COMMITTEE
 ON GOVERNMENTAL OPERATIONS, ON OR BEFORE THE FIRST DAY OF SEPTEMBER, TWO
 THOUSAND SEVENTEEN, AND THEN EVERY FIVE YEARS THEREAFTER, WHICH PROVIDES
 A COMPREHENSIVE REVIEW OF ALL CYBER SECURITY SERVICES PERFORMED BY,  AND
 ON BEHALF OF, THE STATE OF NEW YORK.
   2.  THE  REPORT  REQUIRED PURSUANT TO SUBDIVISION ONE OF THIS SECTION,
 SHALL INCLUDE A DETAILED ASSESSMENT OF EACH  AND  EVERY  CYBER  SECURITY
 NEED  OF  THE STATE OF NEW YORK, INCLUDING BUT NOT LIMITED TO, ITS STATE
 AGENCIES AND ITS PUBLIC AUTHORITIES, AND FOR EACH AND EVERY  SUCH  CYBER
 SECURITY   NEED   SO   IDENTIFIED,  SHALL  FURTHER  INCLUDE  A  DETAILED
 DESCRIPTION OF:
   (A) THE TYPE OF CYBER SECURITY SERVICE USED TO ADDRESS SUCH NEED;
   (B) THE SCOPE OF THE NEED SO ADDRESSED, AS WELL AS THE  SCOPE  OF  THE
 SERVICE USED TO ADDRESS SUCH NEED;
   (C) THE COST OF THE SERVICE USED TO ADDRESS SUCH NEED;
 
  EXPLANATION--Matter in ITALICS (underscored) is new; matter in brackets
                       [ ] is old law to be omitted.

                                                            LBD01791-01-7

 S. 926                              2
 
   (D)  THE  EFFECTIVENESS  OF THE CYBER SECURITY SERVICE USED TO ADDRESS
 SUCH NEED;
   (E)  THE  ENTITY PROVIDING SUCH CYBER SECURITY SERVICE USED TO ADDRESS
 SUCH NEED;
   (F) THE GOVERNMENT, INDUSTRY AND/OR ACADEMICALLY ACCEPTED  BEST  CYBER
 SECURITY PRACTICE FOR ADDRESSING SUCH NEED;
   (G)  HOW  OTHER STATES, AND THE FEDERAL GOVERNMENT HAVE ADDRESSED SUCH
 NEED; AND
   (H) HOW PRIVATE SECTOR ENTITIES ADDRESSED SUCH NEED.
   3. DURING THE PREPARATION OF THE REPORT REQUIRED BY SUBDIVISION ONE OF
 THIS SECTION, AND AFTER  ITS  DELIVERY  TO  THE  PERSONS  IDENTIFIED  TO
 RECEIVE  SUCH  REPORT, THE COMMISSIONER, THE SUPERINTENDENT OF THE STATE
 POLICE, THE CHIEF INFORMATION OFFICER, AND THE PRESIDENT OF  THE  CENTER
 FOR  INTERNET  SECURITY,  AS  WELL  AS THE DIVISIONS, OFFICES AND CORPO-
 RATIONS UNDER THEIR DIRECTION, SHALL PROVIDE TO SUCH PERSONS ENTITLED TO
 RECEIVE SUCH REPORT, ANY AND ALL ADDITIONAL INFORMATION SUCH PERSONS MAY
 REQUEST, WITH RESPECT TO ANY CYBER SECURITY ISSUE CONCERNING:
   (A) THE STATE OF NEW YORK, INCLUDING BUT NOT LIMITED TO,  ANY  AGENCY,
 BOARD, BUREAU, COMMISSION, DEPARTMENT, DIVISION, INSTITUTION, OFFICE, OR
 PUBLIC AUTHORITY OF THE STATE;
   (B)  ANY  LOCAL  GOVERNMENT  ENTITY, INCLUDING BUT NOT LIMITED TO, ANY
 COUNTY, TOWN, CITY, VILLAGE, SCHOOL DISTRICT, SPECIAL DISTRICT, AND  ANY
 AGENCY,  BOARD,  BUREAU,  COMMISSION, DEPARTMENT, DIVISION, INSTITUTION,
 OFFICE, OR PUBLIC AUTHORITY OF SUCH LOCAL GOVERNMENT ENTITY;
   (C) ANY REGULATED ENTITY OF THE STATE OF NEW YORK OR LOCAL  GOVERNMENT
 ENTITY;
   (D) ANY NOT-FOR-PROFIT CORPORATION IN THE STATE OF NEW YORK;
   (E)  ANY  PRIVATE  SECTOR BUSINESS IN THE STATE OF NEW YORK, INCLUDING
 BUT NOT LIMITED TO, A SOLE PROPRIETOR,  PARTNERSHIP,  LIMITED  LIABILITY
 COMPANY OR BUSINESS CORPORATION; AND/OR
   (F) ANY CITIZEN OF THE STATE OF NEW YORK.
   4.  WHERE COMPLIANCE WITH THIS SECTION SHALL REQUIRE THE DISCLOSURE OF
 CONFIDENTIAL INFORMATION, OR THE  DISCLOSURE  OF  SENSITIVE  INFORMATION
 WHICH  IN  THE  JUDGMENT  OF THE COMMISSIONER WOULD JEOPARDIZE THE CYBER
 SECURITY OF THE STATE:
   (A) SUCH CONFIDENTIAL OR SENSITIVE INFORMATION SHALL  BE  PROVIDED  TO
 THE  PERSONS  ENTITLED  TO RECEIVE THE REPORT AS PROVIDED BY SUBDIVISION
 ONE OF THIS SECTION, AS FOLLOWS:
   (I) IN THE CASE OF THE REPORT REQUIRED  BY  SUBDIVISION  ONE  OF  THIS
 SECTION, IN THE FORM OF A SUPPLEMENTAL APPENDIX TO THE REPORT; AND
   (II)  IN  THE  CASE OF A RESPONSE TO A REQUEST FOR INFORMATION MADE IN
 ACCORDANCE WITH SUBDIVISION THREE OF THIS SECTION, IN A SECURE MANNER AS
 DETERMINED BY THE COMMISSIONER;
   (B) NEITHER A SUPPLEMENTAL APPENDIX TO THE REPORT, NOR  ANY  CONFIDEN-
 TIAL  OR  SENSITIVE  INFORMATION PROVIDED IN ACCORDANCE WITH SUBDIVISION
 THREE OF THIS SECTION, SHALL BE POSTED  ON  THE  DIVISION'S  WEBSITE  AS
 REQUIRED BY SUBDIVISION FIVE OF THIS SECTION;
   (C)  NEITHER  A SUPPLEMENTAL APPENDIX TO THE REPORT, NOR ANY CONFIDEN-
 TIAL OR SENSITIVE INFORMATION PROVIDED IN  ACCORDANCE  WITH  SUBDIVISION
 THREE OF THIS SECTION, SHALL BE SUBJECT TO THE PROVISIONS OF THE FREEDOM
 OF  INFORMATION  LAW PURSUANT TO ARTICLE SIX OF THE PUBLIC OFFICERS LAW;
 AND
   (D) THE PERSONS ENTITLED TO RECEIVE THE REPORT AS PROVIDED BY SUBDIVI-
 SION ONE OF THIS SECTION, MAY DISCLOSE THE SUPPLEMENTAL APPENDIX TO  THE
 REPORT,  AND  ANY  CONFIDENTIAL  OR  SENSITIVE  INFORMATION  PROVIDED IN
 ACCORDANCE WITH SUBDIVISION THREE OF THIS SECTION, TO THEIR PROFESSIONAL

 S. 926                              3
 
 STAFF, BUT SHALL NOT OTHERWISE PUBLICLY DISCLOSE  SUCH  CONFIDENTIAL  OR
 SECURE INFORMATION.
   5. EXCEPT WITH RESPECT TO ANY CONFIDENTIAL OR SENSITIVE INFORMATION AS
 DESCRIBED IN SUBDIVISION FOUR OF THIS SECTION, THE DIVISION SHALL POST A
 COPY  OF  THE REPORT PREPARED IN ACCORDANCE WITH SUBDIVISION ONE OF THIS
 SECTION, ON ITS WEBSITE, NOT MORE THAN FIFTEEN DAYS AFTER SUCH REPORT IS
 DELIVERED TO THE PERSONS ENTITLED TO RECEIVE SUCH REPORT.  THE  DIVISION
 MAY  FURTHER  POST ANY AND ALL FURTHER INFORMATION IT MAY DEEM APPROPRI-
 ATE, ON ITS WEBSITE, REGARDING CYBER SECURITY,  AND  THE  PROTECTION  OF
 PUBLIC AND PRIVATE COMPUTER SYSTEMS, NETWORKS, HARDWARE AND SOFTWARE.
   § 2. This act shall take effect immediately.

co-Sponsors

View additional co-sponsors

2017-S926A (ACTIVE) - Details

See Assembly Version of this Bill:: A3451
Current Committee:: Senate Finance
Law Section:: Executive Law
Laws Affected:: Add §719, Exec L
Versions Introduced in 2015-2016 Legislative Session:: S3405, A6133

2017-S926A (ACTIVE) - Summary

Requires a comprehensive review of all cyber security services to be performed every five years.

2017-S926A (ACTIVE) - Sponsor Memo

                                
 
BILL NUMBER: S926A           Revised 1/31/18

SPONSOR: CROCI
 
TITLE OF BILL:  An act to amend the executive law, in relation to a
cyber security report

 
PURPOSE OR GENERAL IDEA OF BILL:

This bill would amend the executive law to require a comprehensive
review of all cyber security services to be performed every five years.

 
SUMMARY OF SPECIFIC PROVISIONS:

This bill would add a new section to the executive law to establish a
Quinquennial Cyber Security Report.

Specifically, this new section would:

*Require the Commissioner of the Division of Homeland Security and Emer-
gency Services, in consultation with the Superintendent of the State
Police, the Chief Information Officer, and the President of the Center

for Internet Security, to prepare and issue a quinquennial cyber securi-
ty report;

*Require that such report must include an assessment of each and every
cyber security need of the state or New York and a detailed description
of how that need is being met; and

*Further require, that persons statutorily entitled to receive the
report, would also be entitled to request additional information to
supplement the report.

 
JUSTIFICATION:

According to the such entities as the United States Department of Home-
land Security, Interpol and the New York State White Collar Crime Task
Force, cybercrime is a pervasive and rapidly expanding threat.  New York
state is particularly at risk to cybercrime due to its status as a
global hub of international business and commerce. As most major
national and international banks, insurance companies and brokerage
houses also have headquarters or a significant presence within the
state, such present a particularly attractive target to those who wish
to engage in cyber crime or cyber terrorism.

In addition to regulating the various business entities noted above, New
York State government, also stores and maintains vast quantities of
sensitive personal data pertaining to the citizens of our state. The
state thereby has an incumbent duty to ensure that the cyber security
needs of all entities with state government are being met in order to
protect such information.

By requiring the Division of Homeland Security and Emergency Services to
identify the various cyber security needs of our state, and detail how
the needs are being met, we can ensure that adequate cyber security
measures are being taken, and that best practices are being employed to
foster the public protection and security the people of our state
deserve.

 
PRIOR LEGISLATIVE HISTORY:
S3405 of 2015/16: Passed in the Senate

 
FISCAL IMPLICATIONS:

None noted.

 
EFFECTIVE DATE:
This act would take effect immediately.

2017-S926A (ACTIVE) - Bill Text download pdf

                            
 
                     S T A T E   O F   N E W   Y O R K
 ________________________________________________________________________
 
                                  926--A
 
                        2017-2018 Regular Sessions
 
                             I N  S E N A T E
 
                              January 5, 2017
                                ___________
 
 Introduced  by  Sens. CROCI, AKSHAR, AVELLA, DeFRANCISCO, FUNKE, GOLDEN,
   HELMING, ROBACH, SERINO, SEWARD -- read twice and ordered printed, and
   when printed to be committed to the Committee  on  Veterans,  Homeland
   Security  and  Military  Affairs  --  recommitted  to the Committee on
   Veterans, Homeland Security and Military Affairs  in  accordance  with
   Senate  Rule  6, sec. 8 -- committee discharged, bill amended, ordered
   reprinted as amended and recommitted to said committee
 
 AN ACT to amend the executive law,  in  relation  to  a  cyber  security
   report
 
   THE  PEOPLE OF THE STATE OF NEW YORK, REPRESENTED IN SENATE AND ASSEM-
 BLY, DO ENACT AS FOLLOWS:
 
   Section 1. The executive law is amended by adding a new section 719 to
 read as follows:
   § 719. QUINQUENNIAL CYBER SECURITY REPORT.   1. THE  COMMISSIONER,  IN
 CONSULTATION  WITH  THE  SUPERINTENDENT  OF  THE STATE POLICE, THE CHIEF
 INFORMATION OFFICER, AND THE PRESIDENT OF THE CENTER FOR INTERNET  SECU-
 RITY,  SHALL  PREPARE  A  REPORT,  TO  BE DELIVERED TO THE GOVERNOR, THE
 TEMPORARY PRESIDENT OF THE SENATE, THE  SPEAKER  OF  THE  ASSEMBLY,  THE
 CHAIR  OF  THE  SENATE STANDING COMMITTEE ON VETERANS, HOMELAND SECURITY
 AND MILITARY AFFAIRS, AND THE CHAIR OF THE ASSEMBLY  STANDING  COMMITTEE
 ON GOVERNMENTAL OPERATIONS, ON OR BEFORE THE FIRST DAY OF SEPTEMBER, TWO
 THOUSAND  EIGHTEEN, AND THEN EVERY FIVE YEARS THEREAFTER, WHICH PROVIDES
 A COMPREHENSIVE REVIEW OF ALL CYBER SECURITY SERVICES PERFORMED BY,  AND
 ON BEHALF OF, THE STATE OF NEW YORK.
   2.  THE  REPORT  REQUIRED PURSUANT TO SUBDIVISION ONE OF THIS SECTION,
 SHALL INCLUDE A DETAILED ASSESSMENT OF EACH  AND  EVERY  CYBER  SECURITY
 NEED  OF  THE STATE OF NEW YORK, INCLUDING BUT NOT LIMITED TO, ITS STATE
 AGENCIES AND ITS PUBLIC AUTHORITIES, AND FOR EACH AND EVERY  SUCH  CYBER
 SECURITY   NEED   SO   IDENTIFIED,  SHALL  FURTHER  INCLUDE  A  DETAILED
 DESCRIPTION OF:
   (A) THE TYPE OF CYBER SECURITY SERVICE USED TO ADDRESS SUCH NEED;
 
  EXPLANATION--Matter in ITALICS (underscored) is new; matter in brackets
                       [ ] is old law to be omitted.

                                                            LBD01791-02-8

 S. 926--A                           2
 
   (B) THE SCOPE OF THE NEED SO ADDRESSED, AS WELL AS THE  SCOPE  OF  THE
 SERVICE USED TO ADDRESS SUCH NEED;
   (C) THE COST OF THE SERVICE USED TO ADDRESS SUCH NEED;
   (D)  THE  EFFECTIVENESS  OF THE CYBER SECURITY SERVICE USED TO ADDRESS
 SUCH NEED;
   (E) THE ENTITY PROVIDING SUCH CYBER SECURITY SERVICE USED  TO  ADDRESS
 SUCH NEED;
   (F)  THE  GOVERNMENT, INDUSTRY AND/OR ACADEMICALLY ACCEPTED BEST CYBER
 SECURITY PRACTICE FOR ADDRESSING SUCH NEED;
   (G) HOW OTHER STATES, AND THE FEDERAL GOVERNMENT HAVE  ADDRESSED  SUCH
 NEED; AND
   (H) HOW PRIVATE SECTOR ENTITIES ADDRESSED SUCH NEED.
   3. DURING THE PREPARATION OF THE REPORT REQUIRED BY SUBDIVISION ONE OF
 THIS  SECTION,  AND  AFTER  ITS  DELIVERY  TO  THE PERSONS IDENTIFIED TO
 RECEIVE SUCH REPORT, THE COMMISSIONER, THE SUPERINTENDENT OF  THE  STATE
 POLICE,  THE  CHIEF INFORMATION OFFICER, AND THE PRESIDENT OF THE CENTER
 FOR INTERNET SECURITY, AS WELL AS  THE  DIVISIONS,  OFFICES  AND  CORPO-
 RATIONS UNDER THEIR DIRECTION, SHALL PROVIDE TO SUCH PERSONS ENTITLED TO
 RECEIVE SUCH REPORT, ANY AND ALL ADDITIONAL INFORMATION SUCH PERSONS MAY
 REQUEST, WITH RESPECT TO ANY CYBER SECURITY ISSUE CONCERNING:
   (A)  THE  STATE OF NEW YORK, INCLUDING BUT NOT LIMITED TO, ANY AGENCY,
 BOARD, BUREAU, COMMISSION, DEPARTMENT, DIVISION, INSTITUTION, OFFICE, OR
 PUBLIC AUTHORITY OF THE STATE;
   (B) ANY LOCAL GOVERNMENT ENTITY, INCLUDING BUT  NOT  LIMITED  TO,  ANY
 COUNTY,  TOWN, CITY, VILLAGE, SCHOOL DISTRICT, SPECIAL DISTRICT, AND ANY
 AGENCY, BOARD, BUREAU, COMMISSION,  DEPARTMENT,  DIVISION,  INSTITUTION,
 OFFICE, OR PUBLIC AUTHORITY OF SUCH LOCAL GOVERNMENT ENTITY;
   (C)  ANY REGULATED ENTITY OF THE STATE OF NEW YORK OR LOCAL GOVERNMENT
 ENTITY;
   (D) ANY NOT-FOR-PROFIT CORPORATION IN THE STATE OF NEW YORK;
   (E) ANY PRIVATE SECTOR BUSINESS IN THE STATE OF  NEW  YORK,  INCLUDING
 BUT  NOT  LIMITED  TO, A SOLE PROPRIETOR, PARTNERSHIP, LIMITED LIABILITY
 COMPANY OR BUSINESS CORPORATION; AND/OR
   (F) ANY CITIZEN OF THE STATE OF NEW YORK.
   4. WHERE COMPLIANCE WITH THIS SECTION SHALL REQUIRE THE DISCLOSURE  OF
 CONFIDENTIAL  INFORMATION,  OR  THE  DISCLOSURE OF SENSITIVE INFORMATION
 WHICH IN THE JUDGMENT OF THE COMMISSIONER  WOULD  JEOPARDIZE  THE  CYBER
 SECURITY OF THE STATE:
   (A)  SUCH  CONFIDENTIAL  OR SENSITIVE INFORMATION SHALL BE PROVIDED TO
 THE PERSONS ENTITLED TO RECEIVE THE REPORT AS  PROVIDED  BY  SUBDIVISION
 ONE OF THIS SECTION, AS FOLLOWS:
   (I)  IN  THE  CASE  OF  THE REPORT REQUIRED BY SUBDIVISION ONE OF THIS
 SECTION, IN THE FORM OF A SUPPLEMENTAL APPENDIX TO THE REPORT; AND
   (II) IN THE CASE OF A RESPONSE TO A REQUEST FOR  INFORMATION  MADE  IN
 ACCORDANCE WITH SUBDIVISION THREE OF THIS SECTION, IN A SECURE MANNER AS
 DETERMINED BY THE COMMISSIONER;
   (B)  NEITHER  A SUPPLEMENTAL APPENDIX TO THE REPORT, NOR ANY CONFIDEN-
 TIAL OR SENSITIVE INFORMATION PROVIDED IN  ACCORDANCE  WITH  SUBDIVISION
 THREE  OF  THIS  SECTION,  SHALL  BE POSTED ON THE DIVISION'S WEBSITE AS
 REQUIRED BY SUBDIVISION FIVE OF THIS SECTION;
   (C) NEITHER A SUPPLEMENTAL APPENDIX TO THE REPORT, NOR  ANY  CONFIDEN-
 TIAL  OR  SENSITIVE  INFORMATION PROVIDED IN ACCORDANCE WITH SUBDIVISION
 THREE OF THIS SECTION, SHALL BE SUBJECT TO THE PROVISIONS OF THE FREEDOM
 OF INFORMATION LAW PURSUANT TO ARTICLE SIX OF THE PUBLIC  OFFICERS  LAW;
 AND

 S. 926--A                           3
 
   (D) THE PERSONS ENTITLED TO RECEIVE THE REPORT AS PROVIDED BY SUBDIVI-
 SION  ONE OF THIS SECTION, MAY DISCLOSE THE SUPPLEMENTAL APPENDIX TO THE
 REPORT, AND  ANY  CONFIDENTIAL  OR  SENSITIVE  INFORMATION  PROVIDED  IN
 ACCORDANCE WITH SUBDIVISION THREE OF THIS SECTION, TO THEIR PROFESSIONAL
 STAFF,  BUT  SHALL  NOT OTHERWISE PUBLICLY DISCLOSE SUCH CONFIDENTIAL OR
 SECURE INFORMATION.
   5. EXCEPT WITH RESPECT TO ANY CONFIDENTIAL OR SENSITIVE INFORMATION AS
 DESCRIBED IN SUBDIVISION FOUR OF THIS SECTION, THE DIVISION SHALL POST A
 COPY OF THE REPORT PREPARED IN ACCORDANCE WITH SUBDIVISION ONE  OF  THIS
 SECTION, ON ITS WEBSITE, NOT MORE THAN FIFTEEN DAYS AFTER SUCH REPORT IS
 DELIVERED  TO  THE PERSONS ENTITLED TO RECEIVE SUCH REPORT. THE DIVISION
 MAY FURTHER POST ANY AND ALL FURTHER INFORMATION IT MAY  DEEM  APPROPRI-
 ATE,  ON  ITS  WEBSITE,  REGARDING CYBER SECURITY, AND THE PROTECTION OF
 PUBLIC AND PRIVATE COMPUTER SYSTEMS, NETWORKS, HARDWARE AND SOFTWARE.
   § 2. This act shall take effect immediately.

Comments

Open Legislation is a forum for New York State legislation. All comments are subject to review and community moderation is encouraged.

Comments deemed off-topic, commercial, campaign-related, self-promotional; or that contain profanity, hate or toxic speech; or that link to sites outside of the nysenate.gov domain are not permitted, and will not be published. Attempts to intimidate and silence contributors or deliberately deceive the public, including excessive or extraneous posting/posts, or coordinated activity, are prohibited and may result in the temporary or permanent banning of the user. Comment moderation is generally performed Monday through Friday. By contributing or voting you agree to the Terms of Participation and verify you are over 13.

Create an account. An account allows you to sign petitions with a single click, officially support or oppose key legislation, and follow issues, committees, and bills that matter to you. When you create an account, you agree to this platform's terms of participation.

Senate Bill S926A

Share this bill

Sponsored By

Archive: Last Bill Status - In Senate Committee Finance Committee

Bill Amendments

co-Sponsors

2017-S926 - Details

2017-S926 - Summary

2017-S926 - Sponsor Memo

2017-S926 - Bill Text download pdf

co-Sponsors

2017-S926A (ACTIVE) - Details

2017-S926A (ACTIVE) - Summary

2017-S926A (ACTIVE) - Sponsor Memo

2017-S926A (ACTIVE) - Bill Text download pdf

Comments