Requires businesses in financial, essential infrastructure, and health care industries to report cybersecurity incidents.

This bill requires businesses in New Jersey's financial, essential infrastructure, and healthcare sectors (called "sensitive businesses") to report cybersecurity incidents to the New Jersey Cybersecurity and Communications Integration Cell (NJCCIC) promptly after discovery. It mandates reporting for incidents compromising business systems (like billing or data) or industrial control systems that disrupt infrastructure. Within 30 days of a report, the NJCCIC must arrange for an independent cybersecurity audit of the business at the business's expense, identifying vulnerabilities and requiring corrective action plans. The law creates a new reporting and audit process to improve cybersecurity resilience in critical industries.