Requires businesses in financial, essential infrastructure, and health care industries to develop cybersecurity plans.

This bill requires businesses in New Jersey's financial, essential infrastructure, and healthcare sectors to create and maintain cybersecurity programs. These programs must include risk assessments, incident response plans, and alignment with recognized industry standards like NIST. Businesses must submit their plans to the state's Cybersecurity and Communications Integration Cell (NJCCIC) and annually certify compliance. Non-compliant businesses may face mandatory audits by independent cybersecurity firms at their own expense.