Bill Text: NY S06453 | 2019-2020 | General Assembly | Introduced

---

Bill Title: Relates to contracts pertaining to information technology cloud services; requires bidders for such contracts to be certified by the federal risk authorization management program.

Spectrum: Partisan Bill (Democrat 1-0)

Status: (Introduced - Dead) 2020-01-08 - REFERRED TO ENERGY AND TELECOMMUNICATIONS [S06453 Detail]

Download: New_York-2019-S06453-Introduced.html

---

                STATE OF NEW YORK
        ________________________________________________________________________

                                          6453

                               2019-2020 Regular Sessions

                    IN SENATE

                                      June 11, 2019
                                       ___________

        Introduced  by  Sen.  SAVINO -- read twice and ordered printed, and when
          printed to be committed to the Committee on Rules

        AN ACT to amend the general municipal  law,  in  relation  to  contracts
          pertaining to information technology cloud services

          The  People of the State of New York, represented in Senate and Assem-
        bly, do enact as follows:

     1    Section 1. Section 103 of the general  municipal  law  is  amended  by
     2  adding a new subdivision 1-d to read as follows:
     3    1-d.   For   contracts  pertaining  to  information  technology  cloud
     4  services, bidders must be certified by the  federal  risk  authorization
     5  management  program,  also  known  as  FedRAMP, or an equivalent certif-
     6  ication, which will be audited regularly, as determined by  the  commis-
     7  sioner  of  the office of general services. As used in this subdivision,
     8  "federal risk authorization management program" and "FedRAMP" refers  to
     9  the  program  established by the United States government used to deter-
    10  mine whether cloud products and services are secure enough to  be  used.
    11  Costs  of complying with this subdivision shall be borne entirely by the
    12  bidding company.
    13    § 2. This act shall take effect three hundred sixty-five days after it
    14  shall have become a law. Effective immediately, the  office  of  general
    15  services is authorized to take actions necessary to promulgate rules and
    16  regulations  related to the implementation of this act on or before such
    17  date.



         EXPLANATION--Matter in italics (underscored) is new; matter in brackets
                              [ ] is old law to be omitted.
                                                                   LBD13209-01-9