Bill > S02671

This bill amends the state finance law to modify procurement requirements for end point devices, which are defined as personal computing goods like desktops, laptops, tablets, mobile phones, printers, and multi-functional devices. Specifically, the bill requires that when state agencies purchase these devices, they must ensure the procurement is consistent with standards, guidelines, or guidance developed as part of the National Institute of Standards and Technology (NIST) Cybersecurity Framework. The bill removes previous language that required devices to "meet" certain security standards and eliminates a provision that would have required agencies to update their procurement requirements within one year of any amendments to security standards. By aligning procurement with the NIST Cybersecurity Framework, the bill aims to enhance the cybersecurity of state agency technology infrastructure and ensure that purchased devices meet current best practices for digital security.

https://www.nysenate.gov/legislation/bills/2025/S2671