Relates to contracts pertaining to information technology cloud services; requires bidders for such contracts to be certified by the federal risk authorization management program.
STATE OF NEW YORK
________________________________________________________________________
8330
2019-2020 Regular Sessions
IN ASSEMBLY
June 14, 2019
___________
Introduced by M. of A. CUSICK -- read once and referred to the Committee
on Local Governments
AN ACT to amend the general municipal law, in relation to contracts
pertaining to information technology cloud services
The People of the State of New York, represented in Senate and Assem-bly, do enact as follows:
1 Section 1. Section 103 of the general municipal law is amended by
2 adding a new subdivision 1-d to read as follows:
3 1-d. For contracts pertaining to information technology cloud
4 services, bidders must be certified by the federal risk authorization
5 management program, also known as FedRAMP, or an equivalent certif-
6 ication, which will be audited regularly, as determined by the commis-
7 sioner of the office of general services. As used in this subdivision,
8 "federal risk authorization management program" and "FedRAMP" refers to
9 the program established by the United States government used to deter-
10 mine whether cloud products and services are secure enough to be used.
11 Costs of complying with this subdivision shall be borne entirely by the
12 bidding company.
13 § 2. This act shall take effect three hundred sixty-five days after it
14 shall have become a law. Effective immediately, the office of general
15 services is authorized to take actions necessary to promulgate rules and
16 regulations related to the implementation of this act on or before such
17 date.
EXPLANATION--Matter in italics (underscored) is new; matter in brackets
[] is old law to be omitted.
LBD13209-01-9
