RSA 485-A:5-f: Cybersecurity Protection Program.

I. Wastewater treatment plants or wastewater facilities shall implement a cybersecurity protection program that is commensurate with the size and complexity of the wastewater treatment plant or wastewater facility in accordance with rules adopted by the department.

II. Wastewater treatment plants or wastewater facilities that do not use an Internet- connected control system are exempt from the provisions of this section.

III. In this section, "cybersecurity protection program" means steps to prevent an event from occurring on or being conducted through a computer network that jeopardizes the confidentiality, integrity, or availability of computers, information systems, communications systems, networks, physical or virtual infrastructure controlled by computers or information systems, or the information or processes residing thereon.

IV. The commissioner shall adopt rules to implement a cybersecurity protection program for wastewater treatment plants or wastewater facilities.