cyber incident reporting for critical infrastructure act

The federal government wants to help US businesses better defend themselves against cyberattacks — but little can be done if corporations don't report them. A new law forces them to do so, says Jen Easterly, head of the Cybersecurity and Infrastructure Security Agency. The Cyber Incident Reporting for Critical Infrastructure Act requires whoever operates critical infrastructure to report attacks coming from state and non-state actors.