Requires businesses in financial essential infrastructure, and health care industries to develop cybersecurity plans and report cybersecurity incidents.*

This bill requires businesses in New Jersey's financial, critical infrastructure (like utilities), and healthcare sectors to create and maintain cybersecurity plans. These plans must include risk assessments, incident response procedures, and alignment with recognized industry standards such as NIST. Businesses must submit their plans to the state's cybersecurity agency (NJCCIC) and annually certify compliance, with failure to do so triggering a state-ordered audit by an independent cybersecurity firm. The law aims to strengthen protections for critical systems without mandating immediate incident reporting to the state.