RSA 485:3-e: Cybersecurity Protection Program.

I. Public water systems shall implement a cybersecurity protection program that is commensurate with the size and complexity of the public water system in accordance with rules adopted by the department.

II. Public water systems that do not use an Internet-connected control system are exempt from the provisions of this section.

III. In this section, "cybersecurity protection program" means steps to prevent an event from occurring on or being conducted through a computer network that jeopardizes the confidentiality, integrity, or availability of computers, information systems, communications systems, networks, physical or virtual infrastructure controlled by computers or information systems, or the information or processes residing thereon.

IV. The commissioner may adopt rules to implement a cybersecurity protection program for public water systems.