Bill > S3313

This bill establishes comprehensive cybersecurity incident reporting and response procedures for municipalities, counties, and school districts in New Jersey. The legislation requires all public agencies and government contractors to report cybersecurity incidents to the New Jersey Office of Homeland Security and Preparedness within 72 hours of discovering a potential breach. In the event of a cybersecurity incident affecting a municipality, county, or school district, the Office must contract an independent cybersecurity company to conduct a detailed audit within 30 days, identifying cyber threats, vulnerabilities, and strategies to address weaknesses. Following the audit, the governing body must submit a corrective action plan, and all county, municipal, and school district employees must complete a mandatory cybersecurity awareness training program developed by the Office of Homeland Security and Preparedness in consultation with the Attorney General. The bill provides financial support by allowing municipalities, counties, and school districts to apply for reimbursement of related costs and ensures the confidentiality of incident-related information by exempting it from public records disclosure. The legislation aims to enhance cybersecurity preparedness, response, and resilience across local government entities by implementing standardized reporting, assessment, and training protocols.

Budget and Finance, Housing and Urban Affairs

https://www.njleg.state.nj.us/bill-search/2024/S3313