Requires New Jersey Cybersecurity and Communications Integration Cell to study cybersecurity infastructure and establish cybersecurity guidelines.
Impact
Following the completion of the study, the NJCCIC is tasked with developing cybersecurity guidelines applicable to all public entities and private businesses in New Jersey. These guidelines are expected to be based on the data collected during the study and must be implemented within one year of the guidelines being issued. The requirement for implementation emphasizes the state's commitment to enhancing cybersecurity measures, indicating a shift towards proactive management and assessment of cybersecurity risks across sectors.
Summary
Senate Bill S3645 requires the New Jersey Cybersecurity and Communications Integration Cell (NJCCIC) to conduct a comprehensive study of the cybersecurity infrastructure of public entities and private businesses operating in the state. This study aims to identify potential cybersecurity threats and vulnerabilities to cyberattacks, establishing a detailed framework for states and businesses to understand their cybersecurity posture more effectively. The bill mandates the NJCCIC to set parameters for this study, including guidelines for incident reporting, to be completed over a period of 12 months.
Contention
One of the notable aspects of S3645 is the potential imposition of penalties for non-compliance with the cybersecurity guidelines dictated by the NJCCIC. This introduces a regulatory measure that may raise concerns about the additional burdens placed on businesses, especially smaller enterprises that might lack the resources for comprehensive cybersecurity measures. Discussions on the bill may reveal a spectrum of opinions regarding the balance between necessary oversight and the operational autonomy of businesses in New Jersey.
Same As
Requires New Jersey Cybersecurity and Communications Integration Cell to study cybersecurity infastructure and establish cybersecurity guidelines.