Gov. Kathy Hochul’s proposed rules include a mandate that hospitals develop their own cyber programs and response plans.