Public and Private Stakeholders: Get the Federal ‘Cyber Carrots’ Now Because the Stick is Coming!

In the wake of several recent high-profile cyber and ransomware attacks on critical infrastructure, Committees in both the House and Senate are drafting at least three separate pieces of legislation that would require victims of attacks to report them to CISA or NIST within a specified time frame, or potentially face punitive actions.