N.Y. Comp. Codes R. & Regs. tit. 9 § 5317.36
System software components and modules shall be verifiable by a secure means at the system level, denoting program identification and version. The system shall have the ability to allow for an independent integrity check of the components and modules from an outside source. Such ability is required for all control programs that may affect the integrity of the system. Such ability shall be capable of being authenticated by a third-party device, which may be embedded within the system software or having an interface port for a third-party device to authenticate the media. Such integrity check shall provide a means for field verification of the system components and modules to identify and validate the programs and files. The licensed independent testing laboratory, prior to system approval, shall approve the integrity check method. If the authentication program is contained within the system software, the manufacturer shall receive written approval from the licensed independent testing laboratory prior to submission.
N.Y. Comp. Codes R. & Regs. Tit. 9 § 5317.36