Bill

Bill > S1053


NJ S1053

Requires New Jersey Cybersecurity and Communications Integration Cell to study cybersecurity infastructure and establish cybersecurity guidelines.


summary

Introduced
01/09/2024
In Committee
01/09/2024
Crossed Over
Passed
Dead

Introduced Session

2024-2025 Regular Session

Bill Summary

This bill requires the New Jersey Cybersecurity and Communications Integration Cell (NJCCIC) to study the State's cybersecurity infrastructure and promulgate cybersecurity guidelines. Under the bill, the NJCCIC is required to conduct a 12-month study of the cybersecurity infrastructure of public entities and private businesses that conduct business in this State for the purpose of identifying potential cybersecurity threats and vulnerabilities to cyberattacks. Within 120 days of the bill's effective date, the NJCCIC is to establish parameters for the study, which are to include the requirement for public entities and private businesses that conduct business within the State to report to the NJCCIC, for a period of 12 months, any cybersecurity incident or breach of security and the results of the subsequent investigation of the cybersecurity incident or breach of security. The bill provides that within six months of the conclusion of the 12-month study, the NJCCIC is to establish cybersecurity guidelines for all public entities and private businesses that conduct business in the State based on the data collected under the bill. Public entities and private businesses that conduct business in the State are required to implement the cybersecurity guidelines within one year of the establishment of the guidelines, after which time a penalty may be imposed for failure to implement the guidelines. Further, under the bill, the NJCCIC is to monitor cybersecurity incidents and breaches of security after public entities and private businesses have implemented the required guidelines and modify the guidelines, as necessary. Finally, the Department of Homeland Security and Preparedness it to adopt, pursuant to the "Administrative Procedure Act," a schedule of civil administrative penalties to be applied for the failure of a public entity or private business that conducts business in the State to implement the required guidelines and rules and regulations to implement the provisions of the bill.

AI Summary

This bill requires the New Jersey Cybersecurity and Communications Integration Cell (NJCCIC) to conduct a 12-month study of the state's cybersecurity infrastructure to identify potential threats and vulnerabilities. Based on the study's findings, the NJCCIC must establish cybersecurity guidelines for all public entities and private businesses operating in New Jersey. These entities are required to implement the guidelines within one year, after which time penalties may be imposed for failure to do so. The Department of Homeland Security and Preparedness will adopt a schedule of civil administrative penalties for non-compliance. The NJCCIC will also monitor cybersecurity incidents and breaches and modify the guidelines as necessary.

Committee Categories

Justice

Sponsors (1)

Last Action

Introduced in the Senate, Referred to Senate Law and Public Safety Committee (on 01/09/2024)

bill text


bill summary

Loading...

bill summary

Loading...

bill summary

Loading...