Bill > A493

This bill requires public agencies and government contractors in New Jersey to report cybersecurity incidents to the New Jersey Office of Homeland Security and Preparedness within 72 hours of when the incident is reasonably believed to have occurred. The Office is required to establish a cyber incident reporting system to facilitate the submission of these notifications, which will be kept confidential and not subject to public records laws. The Office may anonymize and share cyber threat indicators and defensive measures to help prevent future attacks, as well as share the notifications with law enforcement. The Office is also required to submit an annual report to the Governor and Legislature on the number and types of incidents reported, the categories of entities that reported, and any changes to the reporting requirements.