N.Y.C. Charter § 20-j: Section 20-j. Office of cyber command.

a. The mayor shall establish an office of cyber command. Such office may be established in the executive office of the mayor or as a separate office or within any department the head of which is appointed by the mayor. Such office shall be headed by a director who shall be appointed by the mayor or the head of such department and who shall serve as the chief information security officer of the city.

b.

Powers and duties.

The director, in coordination with the commissioner of information technology and telecommunications as appropriate, shall have the power and duty to:

1. establish and regularly update cybersecurity policies and standards for city agencies;

2. regularly train appropriate city officers and employees on cybersecurity policies and standards;

3. review, at the request of the mayor, the budget priorities of all agencies for programs related to cybersecurity, and recommend to the mayor budget priorities among such programs;

4. at the direction of the deputy mayor for operations or another designee of the mayor, require any city agency to furnish data and information that is necessary to ensure the compliance of city agencies with cybersecurity policies and standards;

5. direct cybersecurity defense and response, in coordination with the department of emergency management as appropriate; and

6. perform such other responsibilities with respect to cybersecurity, including responsibilities delegated elsewhere by the charter, as the mayor shall direct.

c.

Agency cooperation.

All city agencies shall cooperate with the office so as to ensure the efficient performance of its duties.

(

L.L. 2020/089, 9/27/2020, eff. 9/27/2020

)