The governing body, or chief administrative officer or designee of any political subdivision, who knows of or suspects a cybersecurity incident within the political subdivision's information systems, or within any vendor acting as an agent of the political subdivision, shall immediately report such incident, upon discovery, and shall disclose all known information and interactions to the New Hampshire cyber integration center of the department of information technology. For purposes of this section, "cybersecurity incident" means an occurrence that actually or potentially jeopardizes the confidentiality, integrity, or availability of an information system or the information processes, stores, or transmits, or that constitutes a violation or imminent threat of violation of security policies, security procedures, or acceptable use policies.
N.H. Rev. Stat. Ann. § 31:103-b
Cybersecurity
Source. 2022, 190:1, eff
Official source: New Hampshire General Court. Reproduced from public-domain New Hampshire statutes; confirm against the official source for the current text. Not legal advice.