House Energy and Commerce approves electric sector incident reporting bill amid concerns over duplication

The House Energy and Commerce Committee has advanced legislation in a 49-1 vote that would require owners and operators of “critical electric infrastructure” to report cyber incidents to the Energy Department within 48 hours of discovery, amid concerns from a key lawmaker that it could result in duplication with CISA’s upcoming regime.

The Critical Electric Infrastructure Cybersecurity Incident Reporting Act designates DOE as the agency to receive notifications on “cybersecurity incidents and potential cybersecurity incidents” regarding “critical electric infrastructure” from...