S T A T E   O F   N E W   Y O R K
 ________________________________________________________________________
 
                                   10605
 
                           I N  A S S E M B L Y
 
                               June 20, 2024
                                ___________
 
 Introduced by COMMITTEE ON RULES -- (at request of M. of A. Rajkumar) --
   read once and referred to the Committee on Governmental Operations
 
 AN  ACT  to  amend  the  state  technology law, in relation to requiring
   certain state employees to undergo annual cyber security training
 
   THE PEOPLE OF THE STATE OF NEW YORK, REPRESENTED IN SENATE AND  ASSEM-
 BLY, DO ENACT AS FOLLOWS:

   Section 1. The state technology law is amended by adding a new section
 108 to read as follows:
   §  108.  ANNUAL  CYBER  SECURITY TRAINING FOR STATE EMPLOYEES. 1. EACH
 STATE AGENCY SHALL IDENTIFY  STATE  EMPLOYEES  WHO  USE  A  COMPUTER  TO
 COMPLETE  AT  LEAST  TWENTY-FIVE  PERCENT  OF  SUCH  EMPLOYEES' REQUIRED
 DUTIES. AT LEAST ONCE PER YEAR, SUCH IDENTIFIED EMPLOYEES SHALL COMPLETE
 A CYBER SECURITY TRAINING PROGRAM APPROVED BY THE OFFICE.
   2. EACH STATE AGENCY MAY SELECT THE MOST  APPROPRIATE  CYBER  SECURITY
 TRAINING PROGRAM APPROVED BY THE OFFICE FOR EMPLOYEES OF EACH SUCH STATE
 AGENCY.
   3. THE EXECUTIVE HEAD OF EACH SUCH STATE AGENCY SHALL:
   (A)  VERIFY COMPLETION OF A CYBER SECURITY TRAINING PROGRAM BY EMPLOY-
 EES OF EACH SUCH STATE AGENCY IN SUCH FORM AND MANNER  AS  SPECIFIED  BY
 THE OFFICE; AND
   (B)  PERIODICALLY  REQUIRE  AN INTERNAL REVIEW OF THE AGENCY TO ENSURE
 COMPLIANCE WITH THE PROVISIONS OF THIS SECTION.
   4. THE OFFICE SHALL DEVELOP A FORM FOR EACH STATE  AGENCY  TO  USE  IN
 VERIFYING  COMPLETION  OF ANNUAL CYBER SECURITY TRAININGS AS REQUIRED BY
 PARAGRAPH (A) OF SUBDIVISION THREE OF  THIS  SECTION.  SUCH  FORM  SHALL
 ALLOW A STATE AGENCY TO INDICATE THE PERCENTAGE OF EMPLOYEE COMPLETION.
   5. THIS SECTION SHALL NOT APPLY TO STATE EMPLOYEES WHO HAVE BEEN:
   (A) GRANTED MILITARY LEAVE;
   (B)  GRANTED  LEAVE  UNDER THE FEDERAL FAMILY AND MEDICAL LEAVE ACT OF
 1993 (29 U.S.C. § 2601 ET SEQ.);
   (C) GRANTED LEAVE RELATED TO A SICKNESS OR DISABILITY COVERED BY WORK-
 ERS' COMPENSATION BENEFITS, IF SUCH EMPLOYEE NO LONGER HAS ACCESS  TO  A
 STATE AGENCY'S DATABASE AND INFORMATION TECHNOLOGY SYSTEMS; OR
 
  EXPLANATION--Matter in ITALICS (underscored) is new; matter in brackets
                       [ ] is old law to be omitted.
                                                            LBD15357-01-4
              

 A. 10605                            2
 
   (D)  GRANTED ANY OTHER TYPE OF EXTENDED LEAVE OR AUTHORIZATION TO WORK
 FROM AN ALTERNATIVE WORK SITE, IF SUCH EMPLOYEE NO LONGER HAS ACCESS  TO
 A STATE AGENCY'S DATABASE AND INFORMATION TECHNOLOGY SYSTEMS.
   §  2.  This  act  shall take effect on the sixtieth day after it shall
 have become a law. Effective immediately, the addition, amendment and/or
 repeal of any rule or regulation necessary  for  the  implementation  of
 this  act  on its effective date are authorized to be made and completed
 on or before such effective date.