CISOs Have Greater Responsibilities Under the New Cyber Incident Reporting Act!

Darkreading.com reported that “When President Biden signed the omnibus spending bill Tuesday, he also put the bipartisan Cyber Incident Reporting Act into effect, which requires critical infrastructure companies in the 16 industry sectors identified by the federal government to report to CISA within 72 hours if they are experiencing a cyberattack and within 24 hours of making a ransomware payment.” The March 16, 2022 article titled “What the Newly Signed US Cyber-Incident Law Means for Security” included comments from Tom Kellermann (head of cybersecurity strategy at VMware) that “It's a game changer”.