Requires certain State employees to receive training in cybersecurity best practices.
Impact
The implementation of A1912 is expected to have significant implications for the training and operational protocols of State agencies. By setting a standard for cybersecurity training, the bill will promote a uniform understanding of what constitutes best practices among employees across various departments. This consistency could lead to improved overall security posture within New Jersey's state government and diminish the risks associated with cybersecurity breaches, which can have considerable repercussions for public safety and the integrity of state operations.
Summary
Assembly Bill A1912 mandates that all State employees who have access to State agency computers must undergo annual training focused on cybersecurity best practices. This training will be developed by the New Jersey Cybersecurity and Communications Integration Cell. The requirements outlined in the bill are designed to enhance the cyber resilience of government operations and protect sensitive data from increasingly sophisticated cyber threats. The bill recognizes the crucial role that State employees play in maintaining cybersecurity and aims to ensure they are well-equipped with the necessary knowledge to prevent security breaches.
Contention
While there seems to be broad support for initiatives aimed at improving cybersecurity, concerns may arise surrounding the implementation aspects of the training program. Some stakeholders may question whether the resources allocated for training will be sufficient to cover all necessary topics effectively or how the state will manage and track completion of required training. Additionally, there may be debates regarding the effectiveness of online training courses compared to more interactive, hands-on training methods, especially in a field as critical and evolving as cybersecurity.
Requires businesses in financial essential infrastructure, and health care industries to develop cybersecurity plans and report cybersecurity incidents.
Relating to the establishment of the Texas Cyber Command and the transfer to it of certain powers and duties of the Department of Information Resources.