Cybersecurity is the process of protecting internet-connected computer systems, such as hardware, software, and data, from cyber-threats. Cybersecurity is used by individuals and businesses to protect against unauthorized access to these computer systems when cyber criminals attempt to change, destroy, and steal sensitive data; extort money by making the systems unworkable; and interrupt business operations.
In New Mexico, cybersecurity is governed by a combination of state statutes and federal laws designed to protect computer systems and sensitive data from cyber-threats. The New Mexico Data Breach Notification Act (NMDBNA) requires businesses to implement reasonable security procedures and practices to protect personal information and to notify individuals if their personal information is compromised in a security breach. Additionally, New Mexico has laws that penalize unauthorized computer access, such as the Computer Crimes Act, which makes it illegal to access, alter, damage, or destroy any computer, computer system, computer network, or any computer software, program, documentation, data, or property contained in any computer, computer system, or computer network without authorization. At the federal level, laws such as the Computer Fraud and Abuse Act (CFAA) and the Cybersecurity Information Sharing Act (CISA) also provide a framework for cybersecurity, addressing unauthorized access and encouraging sharing of cybersecurity threat information between the private sector and the government. Businesses and individuals in New Mexico must comply with these regulations to ensure the protection of internet-connected systems and sensitive data from cyber-threats.