NJ A4198

New Jersey Cybersecurity and Communications Integration Cell (NJCCIC) must conduct a 12-month study of cybersecurity infrastructure of public entities and private businesses operating in the state to identify potential threats and vulnerabilities.

Within 120 days of enactment, NJCCIC must establish study parameters requiring all public entities and private businesses to report any cybersecurity incidents or breaches of security, along with investigation results, for a 12-month period.

Within six months after completing the study, NJCCIC must establish cybersecurity guidelines for all public entities and private businesses based on collected data.

Public entities and private businesses must implement the established cybersecurity guidelines within one year, after which civil administrative penalties may be imposed for non-compliance.

Department of Homeland Security and Preparedness must adopt a schedule of civil administrative penalties for failure to implement required guidelines.