NRS 242.1283 Establishment of certain policies and procedures for notification of specific threats; appointment of cybersecurity incident response teams; duties.
289 words·~1 min read·
/nv/chapter-242-information-services/242-1283A research copy — for the controlling text, always check the official state or federal source. Not legal advice.
NRS 242.1283 Establishment of certain policies and procedures for notification of specific threats; appointment of cybersecurity incident response teams; duties.
1. The Office of Information Security and Cyber Defense shall establish policies and procedures for:
(a)A state agency to notify the Office of any specific threat to the security of an information system operated or maintained by the state agency;
(b)Any other public or private entity to voluntarily notify the Office of any specific threat to the security of an information system;
(c)The Office to notify state agencies, appropriate law enforcement and prosecuting authorities and any other appropriate public or private entity of any specific threat to the security of an information system of which the Office has been notified; and
(d)The Deputy Director to convene a cybersecurity incident response team appointed pursuant to subsection 2 upon notification of the Office of a specific threat to the security of an information system.
2. In consultation with appropriate state agencies, local governments and agencies of the Federal Government, the Deputy Director shall appoint a cybersecurity incident response team or teams. Such a team may include, without limitation, an investigator employed by the Investigation Division of the Department of Public Safety.
3. A cybersecurity incident response team appointed pursuant to subsection 2 shall convene at the call of the Deputy Director and, subject to the direction of the Deputy Director, shall assist the Office of Information Security and Cyber Defense and any appropriate state agencies, local governments or agencies of the Federal Government in responding to a threat to the security of an information system.
4. A private entity may, in its discretion, use the services of a cybersecurity incident response team appointed pursuant to subsection 2.