Nevada Revised Statutes Title 43. Public Safety; Vehicles; Watercraft § 480.935. Political subdivisions required to adopt and maintain cybersecurity incident response plan; plan to be filed with Office; requirements for plan; confidentiality; exceptions; regulations

1. Each political subdivision shall adopt and maintain a cybersecurity incident response plan. Each new or revised plan must be filed within 10 days after adoption or revision with the Office.

2. The Office shall, by regulation, prescribe the contents of a cybersecurity incident response plan, which must include, without limitation, a plan:

3. Each political subdivision shall review its cybersecurity incident response plan at least once each year and, as soon as practicable after the review is completed but not later than December 31 of each year, file with the Office:

4. Except as otherwise provided in NRS 239.0115, a cybersecurity incident response plan filed pursuant to the requirements of this section, including any revisions adopted thereto, is confidential and must be securely maintained by the Office. An officer, employee or other person to whom the plan is entrusted by the Office shall not disclose the contents of such a plan except:

5. As used in this section, “political subdivision” means a city or county of this State.