Requires the formation of a cyber security advisory board and the implementation of a cyber security initiative

8 Co-sponsors

• Tony Avella
• David Carlucci
• John A. DeFrancisco
• John J. Flanagan
• Rich Funke
• Martin J. Golden
• Jack M. Martins
• Michael F. Nozzolio

Title of bill

An act to amend the executive law, in relation to a cyber security initiative

Purpose or general idea of bill

This bill would amend the executive law to establish the New York State Cyber Security Initiative, to create a New York State Cyber Security Advisory Board, a New York Cyber Security Partnership Program, and a New York State Cyber Security Information Sharing Program.

Summary of specific provisions

This bill would add a new section 719 to the executive law to establish the New York State Cyber Security Initiative.

Specifically, this new section would: *Make legislative findings;

*Defines "critical infrastructure and information systems";

*Establish within the division of homeland security (DHSES), a Cyber Security Advisory Board to make recommendations for protecting the state's critical infrastructure and information systems;

*Establish within DHSES, a Cyber Security Sharing and Threat Prevention Program, designed to increase the volume, timeliness, and quality of cyber threat information shared with the public and private sector; and

*Requires DHSES, in consultation with the State Police, the Office of Information Technology Services, and the Center for Internet Security, to issue a New York State Cyber Security Critical Infrastructure Risk Assessment Report, identifying critical infrastructure and where a cyber security incident could reasonably result in catastrophic regional or state-wide effects on public: health or safety, economic distress, and/or threaten public protection of the people and/or property of New York State.

Justification

According to the such entities as the United States Department of Homeland Security, Interpol and the New York State White Collar Crime Task Force, cybercrime is a pervasive and rapidly expanding threat. New York state is particularly at risk to cybercrime due to its status as a global hub of international business and commerce. As most major national and international banks, insurance companies and brokerage houses also have headquarters or a significant presence within the state, such present a particularly attractive target to those who wish to engage in cyber crime or cyber terrorism.

By establishing a Cyber Security Advisory Board in state law, New York State can identify ways to protect the state's critical infrastructure and information systems. Innovative, actionable policies developed by the Advisory Board will further ensure that New York state is in the forefront of public cyber security defense.

Modeled after a successful federal initiative, the Information Sharing and Threat Prevention Program, established by this bill, seeks to assist both the public and private sector to develop practices that will better protect and defend their interests against cyber threats.

Finally, the Risk Assessment Report, required under this legislation, will additionally allow New York, to leverage the expertise and advice of experienced and knowledgeable professionals, to identify security threats that are facing the state and its businesses and citizens, and develop effective ways to combat them.

Prior legislative history

This is a new bill. FISCAL IMPLICATIONS : None noted.

Effective date

This act would take effect immediately.