Text to be removed highlighted in red.
1 New Paragraph; Department of Information Technology; Duties of Commissioner. Amend RSA 21-R:4 by inserting after paragraph XX the following new paragraph:
XXI. Recommending minimum cybersecurity standards for political subdivisions, based on CIS controls, as established and maintained by the Center for Internet Security. The department shall:
(a) Publish recommended minimum cybersecurity standards for political subdivisions, to be updated annually.
(b) Designate the New Hampshire cyber integration center to coordinate incident response of cybersecurity incident reports from political subdivisions.
2 New Paragraph; Department of Information Technology; Definitions. Amend RSA 21-R:1 by inserting after paragraph II the following new paragraph:
III. "Cybersecurity incident" means an occurrence that actually or potentially:
(a) Jeopardizes the confidentiality, integrity, or availability of an information system;
(b) Jeopardizes the information the system processes, stores, or transmits; or
(c) Constitutes a violation or imminent threat of violation of security policies, security procedures, or acceptable use policies.
3 New Section; Duties of Towns; Cybersecurity. Amend RSA 31 by inserting after section 103-a the following new section:
31:103-b Cybersecurity. The governing body, chief administrative officer, or the designee of any political subdivision who knows of or suspects a cybersecurity incident within such political subdivision, or within any vendor acting as an agent of the political subdivision, shall immediately report such incident, upon discovery, and shall disclose all known information and interactions to the New Hampshire cyber integration center of the department of information technology.
4 Department of Information Technology; Appropriation. The sum of $1 for the fiscal year ending June 30, 2021 is hereby appropriated to the department of information technology. The governor is authorized to draw a warrant for said sum out of any money in the treasury not otherwise appropriated.
5 Effective Date. This act shall take effect 60 days after its passage.
Text to be added highlighted in green.
1 New Paragraph; Department of Information Technology; Duties of Commissioner. Amend RSA 21-R:4 by inserting after paragraph XX the following new paragraph:
XXI. Recommending minimum cybersecurity standards for political subdivisions, based on CIS controls, as established and maintained by the Center for Internet Security. The department shall:
(a) Publish recommended minimum cybersecurity standards for political subdivisions, to be updated annually.
(b) Designate the New Hampshire cyber integration center to coordinate incident response of cybersecurity incident reports from political subdivisions.
2 New Paragraph; Department of Information Technology; Definitions. Amend RSA 21-R:1 by inserting after paragraph II the following new paragraph:
III. "Cybersecurity incident" means an occurrence that actually or potentially:
(a) Jeopardizes the confidentiality, integrity, or availability of an information system;
(b) Jeopardizes the information the system processes, stores, or transmits; or
(c) Constitutes a violation or imminent threat of violation of security policies, security procedures, or acceptable use policies.
3 New Section; Duties of Towns; Cybersecurity. Amend RSA 31 by inserting after section 103-a the following new section:
31:103-b Cybersecurity. The governing body, chief administrative officer, or the designee of any political subdivision who knows of or suspects a cybersecurity incident within such political subdivision, or within any vendor acting as an agent of the political subdivision, shall immediately report such incident, upon discovery, and shall disclose all known information and interactions to the New Hampshire cyber integration center of the department of information technology.
4 Department of Information Technology; Appropriation. The sum of $1 for the fiscal year ending June 30, 2021 is hereby appropriated to the department of information technology. The governor is authorized to draw a warrant for said sum out of any money in the treasury not otherwise appropriated.
5 Effective Date. This act shall take effect 60 days after its passage.