NY A10006

Defines "critical energy infrastructure" as systems vital to the state whose disruption could jeopardize health, safety, energy reliability, or security, and "industrial control systems" as control components in gas distribution and transmission.

Requires the Public Service Commission to promulgate rules directing electric and gas corporations to develop monitoring tools for detecting unauthorized network behavior in industrial control systems by December 31, 2022.

Mandates the Public Service Commission to report to legislative leadership every five years on utility compliance with critical infrastructure protection measures and recommend additional legislation if needed.

Requires advanced metering infrastructure installations to use wireless mesh interoperability standards shared by at least two providers operating in the United States.

Adds cyber attack vulnerability assessments to the state's critical infrastructure protection duties and includes critical energy infrastructure protection in utility management and operations audits and emergency response plans.