State Rep. John Dimaio, Minority Leader - District 23 | Official U.S. House headshot
State Rep. John Dimaio, Minority Leader - District 23 | Official U.S. House headshot
A bill aimed at bolstering cybersecurity measures in colleges and universities has successfully passed the Assembly, sponsored by Assemblymen Greg McGuckin and Paul Kanitra. McGuckin emphasized the importance of proactive cybersecurity measures, stating, “Colleges and universities can best protect sensitive information and networks by being proactive, not reactive, which our bill requires.” The bill, known as A817, mandates that higher education institutions establish comprehensive cyber security plans to safeguard against potential threats.
McGuckin further explained that in the event of a breach, institutions must have a detailed plan in place to recover swiftly and securely. The bill requires these plans to address security risks, monitoring strategies, and mitigation methods, with regular updates to incorporate the latest technologies and information security techniques. Additionally, any cyberattack must be reported to the New Jersey Office of Homeland Security within 72 hours.
Highlighting the prevalent threat posed by organized foreign crime syndicates, Kanitra noted that these groups often exploit the vulnerabilities of understaffed IT departments and outdated security systems. While ransomware attacks are commonly reported, colleges and universities are also at risk of data breaches, phishing attacks, and social media vandalism. Statistics from Educause.edu revealed a 15% increase in cyberattacks against educational institutions in the first quarter of 2023 compared to the same period in 2022, with the recovery from such attacks potentially costing over $1 million.
Kanitra emphasized the broader impact of cyberattacks, stating, “These attacks affect everyone, because ultimately a vulnerable school costs taxpayers money. We need to ensure sensitive data and wallets are protected.” The bill presented by McGuckin and Kanitra aims to address these pressing concerns and strengthen cybersecurity measures to safeguard educational institutions from malicious cyber threats.