NRS 242.181 Adherence by using agencies to regulations; reporting of certain incidents; authority to establish uniform reporting system; uniformity of services.

333 words·~2 min read·/nv/chapter-242-information-services/242-181

A research copy — for the controlling text, always check the official state or federal source. Not legal advice.

1. Any using agency which uses the equipment or services of the Office shall adhere to the regulations, standards, practices, policies and conventions of the Office.

2. Each using agency shall report any suspected incident of:

(a)A data breach;

(b)A distributed denial of service incident;

(c)A ransomware incident;

(d)Any other incident that disrupts the delivery or essential services for more than 1 business day or directly affects life or property; or

(e)Noncompliance with the regulations, standards, practices, policies and conventions of the Office that is identified by the Office as security-related,

Ê to the Office of Information Security and Cyber Defense of the Office and the Security Operations Center within 24 hours after discovery of the suspected incident. If the Office of Information Security and Cyber Defense, in consultation with the Security Operations Center, determines that an incident of unauthorized access or noncompliance occurred, it shall immediately report the incident to the Chief. The Chief shall assist in the investigation and resolution of any such incident.

3. A report submitted by a using agency pursuant to subsection 2 must contain the following information:

(a)The date and time of the incident;

(b)The type of incident;

(c)The type of information system or data affected by the incident;

(d)The known and projected impact of the incident to the using agency;

(e)Whether law enforcement, a regulatory body or any other entity that could be affected by the incident has been notified, as applicable; and

(f)Any additional resources needed by the using agency to respond to the incident, as applicable.

4. The Chief may establish a uniform reporting system if the Office and Security Operations Center are organizationally collocated.

5. The Office shall provide services to each using agency uniformly with respect to degree of service, priority of service, availability of service and cost of service.