Executive Summary
The State of New York’s Security Operations Center (NYSOC) is the nation’s leading model for “whole-of-state” cyber defense, and uniquely spans state, local, and municipal government organizations to extend critical protection to vulnerable public entities that often lack resources for an adequate defense.
Between 2018 and 2024, ransomware attacks against government entities resulted in an estimated $1.09 billion in downtime costs alone.1 Built in response to an increasingly aggressive threat landscape targeting critical infrastructure, public services, municipalities, educational institutions, and state agencies2,3, the NYSOC establishes a unified cyber defense ecosystem that brings together state entities, local governments, public authorities, law enforcement, emergency management, and strategic partners in a shared operational model.
The NYSOC is a centralized cyber coordination and operational fusion capability. In collaboration with NY Division of Homeland Security and Emergency Services (DHSES) and through subscriber onboarding, log collection, real-time monitoring, threat intelligence sharing, incident coordination, and proactive threat hunting, the initiative gives New York a new visibility paradigm: broader, deeper, and faster insight across the state’s cyber landscape.
That shared visibility materially improves the state’s defensive posture.
Operating 24x7x365 from Manhattan, Rochester, and Albany, the NYSOC is staffed by 60+ analysts and, as of June 2026, supports all state agency infrastructure managed by the New York State Office of Information Technology Services (ITS), and 34 additional state and local government entities, with many more still being onboarded.
This shared service model extends enterprise-grade cyber operations to public-sector organizations that may otherwise lack the resources to build and sustain such capabilities independently. At the same time, it strengthens statewide situational awareness, accelerates detection and response, and enables coordinated action at scale.
The initiative has transformed how New York identifies, prioritizes, escalates, and responds to cyber threats by combining centralized visibility, advanced analytics, collaborative operational governance, and shared defense services.
In doing so, New York has demonstrated national leadership in operationalizing a modern cyber defense model—one that protects individual subscribers while making the entire state more resilient.
