3 ms·
It's apparently "critical infrastructure operators", not all "firms". > sweeping cybersecurity legislation that will require critical infrastructure operators
by rectang 5y ago
It's apparently "critical infrastructure operators", not all "firms".
> sweeping cybersecurity legislation that will require critical infrastructure operators to quickly report data breaches and ransomware payments.
Pretty expansive though:
> The agency lists 16 broad sectors spanning health, energy, food and transportation as critical to the U.S., although the new legislation is yet to spell out precisely which companies would be required to report cyber incidents.
This data will eventually become public. So long as the DHS database exists it will be hacked eventually.
- reincarnate0x14 5y agoThe data should eventually become public. And regardless of if DHS is hacked (and lets be honest this is probably going to be kept in Excel somewhere), advanced actors like state-sponsored groups already know who they're hacking and already sell or trade access when it suits them. The public finding out how badly most "critical" companies are at security and integrity is really the best thing that can happen.