Requires certain State employees to receive training in cybersecurity best practices.
Impact
By implementing this training requirement, S3557 seeks to improve the overall security posture of state agencies. The proposed bill recognizes the growing importance of cybersecurity in safeguarding sensitive government data from increasing threats such as phishing scams, ransomware, and identity theft. This training is seen as a pivotal step towards ensuring that state employees are equipped with the knowledge to navigate these risks effectively, thus enhancing public safety and maintaining citizen trust in government operations.
Summary
Senate Bill S3557 aims to enhance cybersecurity within the state of New Jersey by requiring certain state employees to undergo annual training on cybersecurity best practices. The bill specifically targets those employees who have access to a state agency computer, including members of the legislature. The training is to be developed by the New Jersey Cybersecurity and Communications Integration Cell (NJCCIC), which focuses on educating employees about various cybersecurity threats and safe practices to mitigate risks associated with data breaches and cyber threats.
Contention
Although the bill has practical implications for improving the state’s cybersecurity efforts, there may be discussions around the feasibility and efficacy of such mandatory training. Some might question whether the training will be adequately comprehensive or if the resources dedicated to this initiative will be sufficient to implement the program successfully. Moreover, concerns could arise regarding the ongoing commitment of state employees to apply what they learn in training consistently and how compliance will be monitored effectively.
Requires businesses in financial essential infrastructure, and health care industries to develop cybersecurity plans and report cybersecurity incidents.