New York State Assembly

 
•  Summary 
 
•  Actions 
 
•  Committee Votes 
 
•  Floor Votes 
 
•  Memo 
 
•  Text 
 
•  LFIN 
 
•  Chamber Video/Transcript 

A00426 Summary:

A00426 Actions:

A00426 Committee Votes:

Committee:SCIENCE AND TECHNOLOGY   Chair:Otis      
DATE:01/22/2025AYE/NAY:8/0  Action: Favorable refer to committee Rules        
Otis
Aye
Blumencranz
Aye
Vanel
Aye
Durso
Aye
Burke
Aye
Conrad
Aye
Gibbs
Excused
Bores
Aye
Hooks
Aye

Committee:RULES   Chair:Heastie      
DATE:01/28/2025AYE/NAY:31/0  Action: Favorable         
Heastie
Aye
Barclay
Aye
Pretlow
Aye
Hawley
Aye
Cook
Aye
Blankenbush
Aye
Glick
Aye
Ra
Aye
Dinowitz
Aye
Brabenec
Aye
Colton
Aye
Palmesano
Aye
Magnarelli
Aye
Reilly
Aye
Paulin
Aye
Smith
Aye
Peoples-Stokes
Aye
Jensen
Aye
Benedetto
Aye
Lavine
Aye
Lupardo
Aye
Braunstein
Aye
Davila
Aye
Hyndman
Aye
Rozic
Aye
Bronson
Aye
Hevesi
Aye
Hunter
Aye
Taylor
Aye
Cruz
Aye
Vanel
Aye

A00426 Floor Votes:

A00426 Memo:

NEW YORK STATE ASSEMBLY
MEMORANDUM IN SUPPORT OF LEGISLATION
 submitted in accordance with Assembly Rule III, Sec 1(f)



 
BILL NUMBER: A426
 
SPONSOR: Otis

 
TITLE OF BILL:
 
An act to amend the state finance law, in relation to procurement
requirements for end point device security
 
 
PURPOSE OR GENERAL IDEA OF BILL:
 
The purpose of this bill is to effectuate an amendment to Chapter 608
(approval memo 50) relating to procurement requirements for end point
device security to manage cybersecurity related risks.
 
 
SUMMARY OF PROVISIONS:.
 
Section one makes technical amendments requiring utilization of end
point devices be consistent with relevant guidelines developed by the
National Institute of Standards and Technology Cybersecurity Framework.
 
Section two is the effective date.
 
 
JUSTIFICATION:
 
This chapter makes technical amendments to clarify Chapter 608 of the
laws of 2024.
 
 
PRIOR LEGISLATIVE HISTORY:
 
This bill is a chapter amendment to Chapter 608 of the laws of 2024.
 
 
FISCAL IMPLICATIONS FOR STATE AND LOCAL GOVERNMENTS:
 
None.
 
 
EFFECTIVE DATE:
This act shall take effect on the same date and in the same manner as a
Chapter of the laws of 2024 amending the state finance law relating to
procurement requirements for end point device security, as proposed in
legislative bills numbers S. 5615 and A. 2833, takes effect.

A00426 Text:

 
                STATE OF NEW YORK
        ________________________________________________________________________
 
                                           426
 
                               2025-2026 Regular Sessions
 
                   IN ASSEMBLY
 
                                       (Prefiled)
 
                                     January 8, 2025
                                       ___________
 
        Introduced  by  M. of A. OTIS -- read once and referred to the Committee
          on Science and Technology
 
        AN ACT to amend the  state  finance  law,  in  relation  to  procurement
          requirements for end point device security

          The  People of the State of New York, represented in Senate and Assem-
        bly, do enact as follows:
 
     1    Section 1. Subdivision 9 of section 165 of the state finance  law,  as
     2  added  by  a  chapter of the laws of 2024 amending the state finance law
     3  relating to procurement requirements for end point device  security,  as
     4  proposed in legislative bills numbers S. 5615 and A. 2833, is amended to
     5  read as follows:
     6    9. End point device security. (a) For the purposes of this subdivision
     7  "end  point  device"  shall  mean  personal computing goods that include
     8  desktops, laptops, all-in-ones, tablets, mobile or cellular  telephones,
     9  thin  clients,  and monitors of various sizes; printers; and multi-func-
    10  tional devices that include imaging devices that combine operations such
    11  as copying, printing, scanning and faxing into one machine.
    12    (b) The commissioner and all state agencies, when procuring end  point
    13  devices,  shall  [require those devices, services and solutions to meet]
    14  be consistent with  any  relevant  standards,  guidelines,  or  guidance
    15  developed  as part of the National Institute of Standards and Technology
    16  (NIST) Cybersecurity Framework.
    17    [(c) Within one year of adoption of any  amendments  to  the  security
    18  standards and guidelines referenced in paragraph (b) of this subdivision
    19  the  commissioner  and  each  state  agency shall update their end point
    20  device procurement requirements.]
    21    § 2. This act shall take effect on the  same  date  and  in  the  same
    22  manner  as  a chapter of the laws of 2024 amending the state finance law
    23  relating to procurement requirements for end point device  security,  as
    24  proposed in legislative bills numbers S. 5615 and A. 2833, takes effect.
 
         EXPLANATION--Matter in italics (underscored) is new; matter in brackets
                              [ ] is old law to be omitted.
                                                                   LBD02682-01-5

A00426 LFIN:

 
NO LFIN

A00426 Chamber Video/Transcript: