Requires a comprehensive review of all cyber security services to be performed every five years

8 Co-sponsors

• Tony Avella
• John A. DeFrancisco
• John J. Flanagan
• Rich Funke
• Martin J. Golden
• Jack M. Martins
• Michael F. Nozzolio
• James L. Seward

Title of bill

An act to amend the executive law, in relation to a cyber security report

Purpose or general idea of bill

This bill would amend the executive law to requires a comprehensive review of all cyber security services to be performed every five years.

Summary of specific provisions

This bill would add a new section 719 to the executive law to establish a Quinquennial Cyber Security Report.

Specifically, this new section would:

*Require the Commissioner of the Division of Homeland Security and Emergency Services, in consultation with the Superintendent of the State Police, the Chief Information Officer, and the President of the Center for Internet Security, to prepare and issue a quinquennial cyber security report;

*Require that such report must include an assessment of each and every cyber security need of the state or New York and a detailed description of how that need is being met; and

*Further require, that persons statutorily entitled to receive the report, would also be entitled to request additional information to supplement the report.

Justification

According to the such entities as the United States Department of Homeland Security, Interpol and the New York State White Collar Crime Task Force, cybercrime is a pervasive and rapidly expanding threat. New York state is particularly at risk to cybercrime due to its status as a global hub of international business and commerce. As, most major national and international banks, insurance companies and brokerage houses also have headquarters or a significant presence within the state, such present a particularly attractive target to those who wish to engage in cyber crime or cyber terrorism.

In addition to regulating the various business entities noted above, New York State government, also stores and maintains vast quantities of sensitive personal data pertaining to the citizens of our state. The state thereby has an incumbent duty to ensure that the cyber security needs of all entities with state government are being met in order to protect such information.

By requiring the Division of Homeland Security and Emergency Services' to identify the various cyber security needs of our state, and detail how the needs are being met, we can ensure that adequate cyber security measures are being taken, and that best practices are being employed to foster the public protection and security the people of our state deserve.

Prior legislative history

This is a new bill.

Fiscal implications

None noted.

Effective date

This act would take effect immediately.