Bill

Bill > A1981


NJ A1981

Requires businesses in financial, essential infrastructure, and health care industries to develop cybersecurity plans.


summary

Introduced
01/11/2022
In Committee
01/11/2022
Crossed Over
Passed
Dead
01/08/2024

Introduced Session

2022-2023 Regular Session

Bill Summary

This bill would require a sensitive business, defined as a business engaged in the financial, essential infrastructure, or healthcare industries to develop cybersecurity programs based on regulations to be adopted by the New Jersey Cybersecurity and Communications Integration Cell (NJCCIC) in the Office of Homeland Security and Preparedness. These requirements include updating cybersecurity programs to apply to all of the sensitive business' industrial control systems if applicable, reasonably conforming these programs to the most recent version of certain industry-recognized cybersecurity frameworks, and annually certifying compliance with these requirements. The bill would require sensitive businesses to submit their cybersecurity plans and revisions to the NJCCIC. The NJCCIC would be directed to audit any sensitive business that fails to submit a cybersecurity plan.

AI Summary

This bill would require businesses in the financial, essential infrastructure, and healthcare industries in New Jersey to develop comprehensive cybersecurity programs. These programs must conform to industry-recognized cybersecurity frameworks, be updated annually, and be submitted to the New Jersey Cybersecurity and Communications Integration Cell (NJCCIC) for review. The NJCCIC would be authorized to audit any business that fails to comply with the requirements. The bill aims to strengthen the cybersecurity posture of critical industries and protect against potential cyberattacks.

Committee Categories

Business and Industry

Sponsors (1)

Last Action

Introduced, Referred to Assembly Science, Innovation and Technology Committee (on 01/11/2022)

bill text


bill summary

Loading...

bill summary

Loading...
Loading...