NM EO 2024-011
New Mexico Executive Order 2024-011 — Strengthening State Agency Cybersecurity (NIST AI/cyber baselines)
NM · N.M. Exec. Order No. 2024-011 (Apr. 5, 2024)
- Status
- In effect
- Took effect
- April 5, 2024
- Applies to
- New Mexico state agencies
- Enforced by
- New Mexico Department of Information Technology
Governor Lujan Grisham's EO 2024-011 requires New Mexico state agencies to adopt NIST baselines covering AI, cloud, supply chain, and ransomware risks by November 1, 2024.
Who is protected: New Mexicans whose interactions with state government involve AI tools and sensitive data
Legal detail
Lujan Grisham EO 2024-011 (Apr. 5, 2024): mandates NIST 800-series cybersecurity baselines across NM state agencies; explicitly includes AI risk-management baselines (NIST AI RMF) alongside cloud, supply-chain, and ransomware controls; compliance deadline Nov. 1, 2024.
Key facts
| Jurisdiction | NM |
|---|---|
| Level | State |
| Strength | Limited |
| Enacted | April 5, 2024 |
| Citation | N.M. Exec. Order No. 2024-011 (Apr. 5, 2024) |
| Private right of action | No, agency enforcement only |
| Topics | government use of AI |
| Agency page | Executive Order 2024-011 — Office of the Governor |
More AI rules in NM
- NM Project Jupiter air permit hearing (Oct 19, 2026) · Proposed / pending
- NM Land Commissioner blocks Project Jupiter pipeline (July 14, 2026) · In effect
Related government use of AI rules elsewhere
- CA EO N-6-26 (AI Workforce) · In effect
- WA SB 5982 (Data Center / Clean Energy) · In effect
- Arkansas public entity AI/ADS policy mandate (Act 848, 2025) · In effect
- Inver Grove Heights MN data center moratorium amended under lawsuit (2026) · In effect
- FERC order directing PJM and other grid operators to reform tariffs on… · Enacted (not yet in effect)
- San Marcos citywide data center ban (Land Use Matrix amendment) · In effect
See something wrong or out of date? Submit a correction. Every entry must carry a verifiable source.