Assembly Actions -
Senate Actions - UPPERCASE
|Jun 06, 2023||
referred to ways and means
delivered to assembly
ordered to third reading cal.1642
committee discharged and committed to rules
|Mar 08, 2023||
referred to procurement and contracts
Senate Bill S5615
2023-2024 Legislative Session
Current Bill Status - In Assembly Committee
- In Committee Assembly
- On Floor Calendar Assembly
- Passed Assembly
- Delivered to Governor
- Signed By Governor
2023-S5615 (ACTIVE) - Details
2023-S5615 (ACTIVE) - Sponsor Memo
BILL NUMBER: S5615 SPONSOR: THOMAS TITLE OF BILL: An act to amend the state finance law, in relation to procurement requirements for end point device security PURPOSE OR GENERAL IDEA OF BILL: To strengthen New York procurement requirements to prevent cyberattacks. SUMMARY OF SPECIFIC PROVISIONS: Section one of the bill amends section 165 of the state finance law by adding a new subdivision 9 to require the commissioner of general services and all state agencies to procure end point devices that meet the National Institute of Standards and Technology (NIST) guidelines and best practices for computer security. This subdivision also requires that the commissioner and each state agency update their end point device procurement requirements to reflect any amendments made to the NIST guidelines within one year of its adoption.
2023-S5615 (ACTIVE) - Bill Text download pdf
S T A T E O F N E W Y O R K ________________________________________________________________________ 5615 2023-2024 Regular Sessions I N S E N A T E March 8, 2023 ___________ Introduced by Sen. THOMAS -- read twice and ordered printed, and when printed to be committed to the Committee on Procurement and Contracts AN ACT to amend the state finance law, in relation to procurement requirements for end point device security THE PEOPLE OF THE STATE OF NEW YORK, REPRESENTED IN SENATE AND ASSEM- BLY, DO ENACT AS FOLLOWS: Section 1. Section 165 of the state finance law is amended by adding a new subdivision 9 to read as follows: 9. END POINT DEVICE SECURITY. (A) FOR THE PURPOSES OF THIS SUBDIVISION "END POINT DEVICE" SHALL MEAN PERSONAL COMPUTING GOODS THAT INCLUDE DESKTOPS, LAPTOPS, ALL-IN-ONES, TABLETS, MOBILE OR CELLULAR TELEPHONES, THIN CLIENTS, AND MONITORS OF VARIOUS SIZES; PRINTERS; AND MULTI-FUNC- TIONAL DEVICES THAT INCLUDE IMAGING DEVICES THAT COMBINE OPERATIONS SUCH AS COPYING, PRINTING, SCANNING AND FAXING INTO ONE MACHINE. (B) THE COMMISSIONER AND ALL STATE AGENCIES, WHEN PROCURING END POINT DEVICES, SHALL REQUIRE THOSE DEVICES, SERVICES AND SOLUTIONS TO MEET THE NATIONAL INSTITUTE OF STANDARDS AND TECHNOLOGY (NIST) CYBERSECURITY FRAMEWORK. (C) WITHIN ONE YEAR OF ADOPTION OF ANY AMENDMENTS TO THE SECURITY STANDARDS AND GUIDELINES REFERENCED IN PARAGRAPH (B) OF THIS SUBDIVISION THE COMMISSIONER AND EACH STATE AGENCY SHALL UPDATE THEIR END POINT DEVICE PROCUREMENT REQUIREMENTS. § 2. This act shall take effect on the ninetieth day after it shall have become a law. EXPLANATION--Matter in ITALICS (underscored) is new; matter in brackets [ ] is old law to be omitted. LBD07739-01-3
Open Legislation is a forum for New York State legislation. All comments are subject to review and community moderation is encouraged.
Comments deemed off-topic, commercial, campaign-related, self-promotional; or that contain profanity, hate or toxic speech; or that link to sites outside of the nysenate.gov domain are not permitted, and will not be published. Attempts to intimidate and silence contributors or deliberately deceive the public, including excessive or extraneous posting/posts, or coordinated activity, are prohibited and may result in the temporary or permanent banning of the user. Comment moderation is generally performed Monday through Friday. By contributing or voting you agree to the Terms of Participation and verify you are over 13.
Create an account. An account allows you to sign petitions with a single click, officially support or oppose key legislation, and follow issues, committees, and bills that matter to you. When you create an account, you agree to this platform's terms of participation.