Sign in Subscribe
Local government

New York State Enhances Cybersecurity Measures to Protect State and Local Governments

Strategic Insights

— 2 min read

New York State has taken significant steps to bolster its cybersecurity measures, signing into law S.7672A/A.6769A, a vital piece of legislation aimed at strengthening the state's cybersecurity and resilience against mounting digital threats. The bill was announced in Governor Kathy Hochul's 2025 State of the State address and will require municipalities and public authorities to promptly report cybersecurity incidents and ransom payments to the New York State Division of Homeland Security and Emergency Services (DHSES). This move marks a critical step forward in enhancing the state's cybersecurity posture, ensuring the safety and security of its residents, and mitigating the risks associated with cyber threats.

Key Takeaways:

  • The new law requires all municipal corporations and public authorities to report cybersecurity incidents within 72 hours to DHSES and provide notice of payment of a ransom within 24 hours.
  • The legislation mandates annual cybersecurity awareness training for government employees across New York, setting a new standard for data protection in the state.
  • The bill also requires municipalities to take proactive measures to protect their networks and infrastructure, with a focus on enhancing their cyber defenses against emerging threats.
  • State and local governments are on the front lines of a growing wave of cyberattacks, which threaten essential services and public data.
  • Governor Hochul has emphasized the importance of coordinated, statewide action to help local agencies respond swiftly and protect the communities they serve.
  • State Senator Monica R. Martinez highlighted the urgent need for protecting the public and preventing attacks on critical infrastructure, which put essential services and people at risk.
  • Assemblymember Billy Jones noted the vital role of this piece of legislation in responding to the unique threats digital attackers pose to municipalities.
  • Assemblymember Steve Otis emphasized the need for cybersecurity awareness training and knowledge of cyberattacks statewide, allowing state cyber agencies to better advise local governments.
  • Underscoring New York State's commitment to cybersecurity, the enactment of S.7672A/A.6769A sets a precedent for other states to follow in protecting state and local critical infrastructure from cyber threats.
  • Governor Hochul's leadership in developing smart and effective cybersecurity policy has made New York a leader in the nation, with initiatives such as financial sector regulations, landmark legislation to protect the energy grid, and first-in-the-nation hospital cybersecurity regulations.

Statistics:

  • The new law aims to strengthen the state's cybersecurity posture against threats from emerging technologies.
  • According to reports, the state has invested millions of dollars in hardening local assets and ensuring the protection of critical data.
  • Over the last three years, Governor Hochul has made foundational investments in New York's cybersecurity, establishing the NYS Joint Security Operations Center (JSOC) and operationalizing the statewide shared services program for counties and municipalities.
  • The bill has been widely praised by local leaders and organizations, with the New York State Association of Counties Executive Director Stephen J. Acquario commending Governor Hochul for approving the legislation.
  • The New York State Conference of Mayors Executive Director Barbara Van Epps highlighted the critical step forward in strengthening the collective defense against digital threats.

Sources:

  • MIL OSI USA News (http://milnz.co.nz/mil-osi-aggregation/)- Copyright 2025 Multimedia Investments Ltd, distributed by Contify.com

Read more