How you may be affected by the new proposed Critical Infrastructure Cyber Incident Reporting Rule

The proposed Cyber Incident Reporting for Critical Infrastructure Act (CIRCIA) Reporting Requirements would require covered companies to report certain cyber incidents within 72 hours of discovery and ransomware attack payments within 24 hours. The rule applies to a wide range of industries across the entire economy and may impact a vast number of organizations.