New York S02671 mandates that state agencies procure endpoint devices in line with NIST Cybersecurity Framework standards.

New York S02671 amends the state finance law to ensure that state agencies' procurement of endpoint devices adheres to relevant standards, guidelines, or guidance from the National Institute of Standards and Technology (NIST) Cybersecurity Framework. Endpoint devices include personal computing goods like desktops, laptops, tablets, and mobile phones, as well as printers and multifunctional devices. The commissioner and all state agencies must update their procurement requirements within a year of any amendments to the security standards and guidelines.

New York S02671 mandates that state agencies procure endpoint devices in line with NIST Cybersecurity Framework standards.

New York S02671 amends the state finance law to ensure that state agencies' procurement of endpoint devices adheres to relevant standards, guidelines, or guidance from the National Institute of Standards and Technology (NIST) Cybersecurity Framework. Endpoint devices include personal computing goods like desktops, laptops, tablets, and mobile phones, as well as printers and multifunctional devices. The commissioner and all state agencies must update their procurement requirements within a year of any amendments to the security standards and guidelines.