Critical infrastructure owners and operators are now required to report cybersecurity incidents to the Department of Homeland Security Cybersecurity and Infrastructure Security Agency (CISA), after the passage of the Cyber Incident Reporting for Critical Infrastructure Act.  The act, included within the Consolidated Appropriations Act, 2022, is one of the most significant pieces of cybersecurity legislation in the past decade. Requiring owners and operators to report significant cyber incidents and ransomware attacks to CISA within 72 hours, the legislation will bring greater visibility for the Federal government, earlier disruption of malicious cyber campaigns, and better information and threat intelligence going back out to the private sector so they can defend against future attacks.

Read full article on Security Magazine