Assembly Bill A9951A

2021-2022 Legislative Session

Relates to procurement requirements for end point device security

download bill text pdf

Sponsored By

Archive: Last Bill Status - In Assembly Committee

  • Introduced
    • In Committee Assembly
    • In Committee Senate
    • On Floor Calendar Assembly
    • On Floor Calendar Senate
    • Passed Assembly
    • Passed Senate
  • Delivered to Governor
  • Signed By Governor

Do you support this bill?

Please enter your contact information

Home address is used to determine the senate district in which you reside. Your support or opposition to this bill is then shared immediately with the senator who represents you.

Optional services from the NY State Senate:

Create an account. An account allows you to officially support or oppose key legislation, sign petitions with a single click, and follow issues, committees, and bills that matter to you. When you create an account, you agree to this platform's terms of participation.

Include a custom message for your Senator? (Optional)

Enter a message to your senator. Many New Yorkers use this to share the reasoning behind their support or opposition to the bill. Others might share a personal anecdote about how the bill would affect them or people they care about.
Actions

Bill Amendments

2021-A9951 - Details

Current Committee:
Assembly Ways And Means
Law Section:
State Finance Law
Laws Affected:
Amd §165, St Fin L
Versions Introduced in 2023-2024 Legislative Session:
A2833

2021-A9951 - Summary

Directs that state agencies require that procurement of personal computing goods, services and solutions meet the National Institute of Standards and Technology (NIST) Cybersecurity Framework.

2021-A9951 - Bill Text download pdf 

                             
                     S T A T E   O F   N E W   Y O R K
 ________________________________________________________________________
 
                                   9951
 
                           I N  A S S E M B L Y
 
                              April 19, 2022
                                ___________
 
 Introduced  by  M. of A. OTIS -- read once and referred to the Committee
   on Science and Technology
 
 AN ACT to amend the  state  finance  law,  in  relation  to  procurement
   requirements for end point device security
 
   THE  PEOPLE OF THE STATE OF NEW YORK, REPRESENTED IN SENATE AND ASSEM-
 BLY, DO ENACT AS FOLLOWS:

   Section 1. Section 165 of the state finance law is amended by adding a
 new subdivision 9 to read as follows:
   9. END POINT DEVICE SECURITY. (A) FOR THE PURPOSES OF THIS SUBDIVISION
 "END POINT DEVICE" SHALL MEAN  PERSONAL  COMPUTING  GOODS  THAT  INCLUDE
 DESKTOPS,  LAPTOPS,  ALL-IN-ONES, TABLETS, THIN CLIENTS, AND MONITORS OF
 VARIOUS SIZES; PRINTERS; AND MULTI-FUNCTIONAL DEVICES THAT INCLUDE IMAG-
 ING DEVICES THAT COMBINE OPERATIONS SUCH AS COPYING, PRINTING,  SCANNING
 AND FAXING INTO ONE MACHINE.
   (B)  THE COMMISSIONER AND ALL STATE AGENCIES, WHEN PROCURING END POINT
 DEVICES, SHALL REQUIRE THOSE DEVICES, SERVICES AND SOLUTIONS TO MEET THE
 NATIONAL INSTITUTE OF  STANDARDS  AND  TECHNOLOGY  (NIST)  CYBERSECURITY
 FRAMEWORK.
   (C)  WITHIN  ONE  YEAR  OF  ADOPTION OF ANY AMENDMENTS TO THE SECURITY
 STANDARDS AND GUIDELINES REFERENCED IN PARAGRAPH (B) OF THIS SUBDIVISION
 THE COMMISSIONER AND EACH STATE AGENCY  SHALL  UPDATE  THEIR  END  POINT
 DEVICE PROCUREMENT REQUIREMENTS.
   §  2.  This  act shall take effect on the ninetieth day after it shall
 have become a law.
 
 
 
 
  EXPLANATION--Matter in ITALICS (underscored) is new; matter in brackets
                       [ ] is old law to be omitted.
                                                            LBD03252-02-1

2021-A9951A (ACTIVE) - Details

Current Committee:
Assembly Ways And Means
Law Section:
State Finance Law
Laws Affected:
Amd §165, St Fin L
Versions Introduced in 2023-2024 Legislative Session:
A2833

2021-A9951A (ACTIVE) - Summary

Directs that state agencies require that procurement of personal computing goods, services and solutions meet the National Institute of Standards and Technology (NIST) Cybersecurity Framework.

2021-A9951A (ACTIVE) - Bill Text download pdf 

                             
                     S T A T E   O F   N E W   Y O R K
 ________________________________________________________________________
 
                                  9951--A
 
                           I N  A S S E M B L Y
 
                              April 19, 2022
                                ___________
 
 Introduced  by  M. of A. OTIS -- read once and referred to the Committee
   on Science and  Technology  --  committee  discharged,  bill  amended,
   ordered reprinted as amended and recommitted to said committee
 
 AN  ACT  to  amend  the  state  finance  law, in relation to procurement
   requirements for end point device security
 
   THE PEOPLE OF THE STATE OF NEW YORK, REPRESENTED IN SENATE AND  ASSEM-
 BLY, DO ENACT AS FOLLOWS:
 
   Section 1. Section 165 of the state finance law is amended by adding a
 new subdivision 9 to read as follows:
   9. END POINT DEVICE SECURITY. (A) FOR THE PURPOSES OF THIS SUBDIVISION
 "END  POINT  DEVICE"  SHALL  MEAN  PERSONAL COMPUTING GOODS THAT INCLUDE
 DESKTOPS, LAPTOPS, ALL-IN-ONES, TABLETS, MOBILE OR CELLULAR  TELEPHONES,
 THIN  CLIENTS,  AND MONITORS OF VARIOUS SIZES; PRINTERS; AND MULTI-FUNC-
 TIONAL DEVICES THAT INCLUDE IMAGING DEVICES THAT COMBINE OPERATIONS SUCH
 AS COPYING, PRINTING, SCANNING AND FAXING INTO ONE MACHINE.
   (B) THE COMMISSIONER AND ALL STATE AGENCIES, WHEN PROCURING END  POINT
 DEVICES, SHALL REQUIRE THOSE DEVICES, SERVICES AND SOLUTIONS TO MEET THE
 NATIONAL  INSTITUTE  OF  STANDARDS  AND  TECHNOLOGY (NIST) CYBERSECURITY
 FRAMEWORK.
   (C) WITHIN ONE YEAR OF ADOPTION OF  ANY  AMENDMENTS  TO  THE  SECURITY
 STANDARDS AND GUIDELINES REFERENCED IN PARAGRAPH (B) OF THIS SUBDIVISION
 THE  COMMISSIONER  AND  EACH  STATE  AGENCY SHALL UPDATE THEIR END POINT
 DEVICE PROCUREMENT REQUIREMENTS.
   § 2. This act shall take effect on the ninetieth day  after  it  shall
 have become a law.
 
 
 
 
  EXPLANATION--Matter in ITALICS (underscored) is new; matter in brackets
                       [ ] is old law to be omitted.
                                                            LBD03252-03-2

Comments

Open Legislation is a forum for New York State legislation. All comments are subject to review and community moderation is encouraged.

Comments deemed off-topic, commercial, campaign-related, self-promotional; or that contain profanity, hate or toxic speech; or that link to sites outside of the nysenate.gov domain are not permitted, and will not be published. Attempts to intimidate and silence contributors or deliberately deceive the public, including excessive or extraneous posting/posts, or coordinated activity, are prohibited and may result in the temporary or permanent banning of the user. Comment moderation is generally performed Monday through Friday. By contributing or voting you agree to the Terms of Participation and verify you are over 13.

Create an account. An account allows you to sign petitions with a single click, officially support or oppose key legislation, and follow issues, committees, and bills that matter to you. When you create an account, you agree to this platform's terms of participation.