Requires municipalities, counties, and school districts to report cybersecurity incidents.
Impact
The implications of A1983 on state law are significant, as it sets into place a structured reporting framework for cybersecurity incidents. This is expected to enhance the overall cybersecurity posture of municipalities and school districts by necessitating audits conducted by independent cybersecurity firms following an incident report. The involvement of the New Jersey Cybersecurity and Communications Integration Cell further underscores state support for local entities to bolster their cybersecurity measures.
Summary
Assembly Bill A1983 mandates that municipalities, counties, and school districts in New Jersey are required to report any cybersecurity incidents that jeopardize the integrity, confidentiality, or availability of their information systems. This bill emphasizes the growing importance of cybersecurity in public governance and aims to ensure that public entities take responsibility for and respond effectively to cybersecurity threats.
Sentiment
General sentiment around the bill appears to be positive, primarily due to the increasing incidence of cyber threats targeting public institutions. Stakeholders recognize the need for better preparation and a standardized response process. There is, however, an underlying concern regarding the cost implications, as compliance with the reporting and auditing mandates may strain local budgets. This tension suggests a need for accompanying measures to support these entities financially.
Contention
Notable points of contention revolve around the resources required to meet the compliance mandates of the bill. Critics argue that while the intent behind the bill is commendable, the financial burden of audits and potential cybersecurity upgrades may overwhelm smaller municipalities and school districts. Additionally, there are concerns regarding the privacy of data shared in these incident reports, which is exempt from disclosure under the Open Public Records Act, potentially sparking debates about transparency and accountability.
Requires businesses in financial essential infrastructure, and health care industries to develop cybersecurity plans and report cybersecurity incidents.
Requires all municipal corporations to report cybersecurity incidents and demands of ransom payments to the division of homeland security and emergency services; defines terms; requires cybersecurity incident reviews; requires cybersecurity awareness training, cybersecurity protection and data protection standards for state maintained information systems.
Requires all municipal corporations to report cybersecurity incidents and demands of ransom payments to the division of homeland security and emergency services; defines terms; requires cybersecurity incident reviews; requires cybersecurity awareness training, cybersecurity protection and data protection standards for state maintained information systems.
Requires municipalities to share certain payments received in lieu of property taxes with school districts; informs counties and school districts of application for property tax exemption.
Requires municipalities comprised within regional school districts to share certain payments received in lieu of taxes with counties and regional school districts.
Requires instruction on cybersecurity in grades nine through 12; requires Office of Secretary of Higher Education to develop cybersecurity model curricula; establishes loan redemption programs for individuals in certain cybersecurity occupations.
Requires instruction on cybersecurity in grades nine through 12; requires Office of Secretary of Higher Education to develop cybersecurity model curricula; establishes loan redemption programs for individuals in certain cybersecurity occupations.