N.Y. Comp. Codes R. & Regs. tit. 9, § 6220.2 – Cyber security program.

(a) Each Board of Elections shall establish a cyber security program that includes all of the elements required under section 6220.3 of this Part to ensure the protection and safety of all systems and machines that access, store, process, and transmit election data, other than voting systems which already have security protocols pursuant to section 6210.11 of this Part.
(b) Each Board of Elections shall certify compliance of its cyber security program to the State Board of Elections annually but no later than August 1st in any given year.
(c) Such certification shall include a statement stating that it has successfully established each element outlined in section 6220.3 of this Part, or, in the alternative, submit a plan for compliance to the State Board of Elections that includes a target completion date for any outstanding elements.
(d) Each Board of Elections must designate two, bi-partisan elections system security officers (ESSOs) to the secure elections center in a letter to the co-executive directors of the State Board of Elections signed by both county commissioners, who are:
1. (1) responsible for the establishment of the cyber security program;
2. (2) designated as the points of contact with regard to the Board of Elections cyber security program, and in addition but not limited to, emergency response, incident communications, and recovery of election operations.
(e) Each Board of Elections must have an agreement in place with its information technology director, the head of the county information technology department or a contracted managed services provider to facilitate implementation of this cyber regulation.