U.S. releases draft federal rules for cyberattack reporting rules for critical infrastructure companies

The United States Cybersecurity and Infrastructure Security Agency has released draft of the rules explaining how critical infrastructure companies must report cyberattacks to the government. Companies owning and operating infrastructure will need to report significant cyberattacks within 72 hours and report ransom payments within 24 hours. The rules target any company...
Continue reading…