Critical infrastructure now required to report cyber incidents to CISA

Critical infrastructure operators are now required to report ransomware attacks, data breaches and other incidents to the Cybersecurity and Infrastructure Security Agency (CISA).