Bill > S297

This bill requires public agencies and government contractors in New Jersey to report any cybersecurity incidents to the New Jersey Office of Homeland Security and Preparedness within 72 hours of when they reasonably believe an incident has occurred. The Office is tasked with establishing a secure system to receive and maintain these confidential cybersecurity incident notifications, and must publish instructions on its website for submitting such reports. The bill also mandates the Office to produce annual reports on the types of incidents and mitigating measures taken, while allowing the anonymized sharing of cyber threat indicators and defensive measures to help prevent future attacks.