Bill > SB377

This bill amends Title 62 of the Pennsylvania Consolidated Statutes to establish new requirements for government procurement of information technology equipment, specifically focusing on end point devices (any Internet-capable computer hardware device on a TCP/IP network). The bill mandates that when the state contracts for these devices, services, and solutions, they must be configurable, secure, and maintainable in alignment with national security standards, specifically the National Institute of Standards and Technology (NIST) Special Publication 800 series guidelines and industry best practices for computer security. This means that any end point devices purchased by the government must meet recognized certifications and security standards at the time of procurement, ensuring that the technology acquired meets current cybersecurity benchmarks. The bill will only apply to contracts entered into after its effective date, which is 60 days from enactment, providing a clear timeline for implementation and giving government agencies time to adapt to the new procurement requirements.

Budget and Finance, Business and Industry

https://www.legis.state.pa.us/cfdocs/billinfo/bill_history.cfm?syear=2025&sind=0&body=S&type=B&bn=377