Cybersecurity attacks on state and local governments in the U.S. are increasing in frequency and sophistication. In response, New York has enacted legislation to enhance municipal responses to such incidents. The law mandates reporting of cybersecurity incidents to the state within 72 hours, with explicit rules for ransomware payments. It also requires government employee training, incident reviews, and data protection standards. Incident reports are exempt from public disclosure to protect sensitive information. The legislation aims to safeguard essential services and uphold public accountability during cyber incidents.
"Protecting the public is government's most important responsibility, but attacks on critical infrastructure put essential services and the people who rely on them at risk."
"This bill gives municipalities the structure, support and accountability they need to protect residents and taxpayers from prolonged disruption in the event of a cyberattack."
Collection
[
|
...
]