Requires businesses in financial, essential infrastructure, and health care industries to develop cybersecurity plans.

This bill requires businesses in New Jersey's financial, essential infrastructure, and healthcare sectors (called "sensitive businesses") to develop and implement cybersecurity programs. These programs must include risk assessments, incident response plans, and alignment with recognized industry frameworks like NIST. Businesses must submit their plans to New Jersey's Cybersecurity Cell, provide annual compliance certifications, and undergo audits if they fail to comply. The law aims to protect critical systems from cyber threats while keeping submitted plans confidential, not public records.