1. Each political subdivision shall adopt and maintain a cybersecurity incident response plan. Each new or revised plan must be filed within 10 days after adoption or revision with the Office.
2. The Office shall, by regulation, prescribe the contents of a cybersecurity incident response plan, which must include, without limitation, a plan:
(a) To prepare for a cybersecurity threat;
(b) To detect and analyze a cybersecurity threat;
(c) To contain, eradicate and recover from a cybersecurity incident; and
(d) For postincident activity that includes a discussion regarding information learned and any analytics associated with the cybersecurity incident.
3. Each political subdivision shall review its cybersecurity incident response plan at least once each year and, as soon as practicable after the review is completed but not later than December 31 of each year, file with the Office:
(a) Any revised cybersecurity incident response plan resulting from the review; or
(b) A written certification that the most recent cybersecurity incident response plan filed pursuant to this subsection or subsection 1 is the current cybersecurity incident response plan for the political subdivision.
4. Except as otherwise provided in NRS 239.0115, a cybersecurity incident response plan filed pursuant to the requirements of this section, including any revisions adopted thereto, is confidential and must be securely maintained by the Office. An officer, employee or other person to whom the plan is entrusted by the Office shall not disclose the contents of such a plan except:
(a) Upon the lawful order of a court of competent jurisdiction;
(b) As is reasonably necessary in the case of an act of terrorism or related emergency; or
(c) Pursuant to the provisions of NRS 239.0115.
5. As used in this section, "political subdivision" means a city or county of this State.
(Added to NRS by 2019, 2472)
Structure Nevada Revised Statutes
Chapter 480 - Administration of Laws Relating to Public Safety
NRS 480.100 - Creation; powers and duties set forth in chapter.
NRS 480.130 - Department: Divisions and Nevada Office of Cyber Defense Coordination.
NRS 480.150 - General duties and powers of Director; regulations.
NRS 480.160 - Main office of Department to be kept in Carson City; maintenance of branch offices.
NRS 480.170 - Deposit of money collected or received by State Fire Marshal Division.
NRS 480.300 - Creation of division.
NRS 480.320 - Payment of cadets.
NRS 480.350 - Qualifications of appointed personnel.
NRS 480.360 - Duties of personnel.
NRS 480.405 - "Act of terrorism" defined.
NRS 480.407 - "Criminal intelligence information" defined.
NRS 480.410 - "Investigation Division" defined.
NRS 480.420 - "Off-road vehicle" defined.
NRS 480.425 - "Public safety agency" defined.
NRS 480.430 - "Special mobile equipment" defined.
NRS 480.440 - "Vehicle" defined.
NRS 480.450 - Composition of Division.
NRS 480.460 - Duties of Chief of Division.
NRS 480.500 - Identification of dead bodies; missing persons.
NRS 480.800 - Justice Assistance Grant Trust Account.
NRS 480.810 - Account for Reentry Programs.
NRS 480.900 - Legislative findings and declarations regarding security of information systems.
NRS 480.904 - Administrator" defined.
NRS 480.906 - "Information system" defined.
NRS 480.908 - "Office" defined.
NRS 480.910 - "Security of an information system" defined.
NRS 480.912 - "State agency" defined.
NRS 480.920 - Nevada Office of Cyber Defense Coordination: Creation; composition.
NRS 480.924 - Duties of Office.
NRS 480.932 - Office to prepare and submit quarterly and annual reports.