Congress approves cyber incident reporting for critical infrastructure

CISA director calls legislation to compel companies to report incidents within 72 hours of experiencing a cyberattack and within 24 hours of making a ransom payment a "game changer."

congress critical critical infrastructure cyber incident incident reporting infrastructure legislation policy reporting