Industry sources call for reducing regulatory ‘burdens’ in Warner-Rubio incident reporting bill; House version circulating

A bipartisan Senate bill requiring critical infrastructure operators to quickly report cyber incidents has earned positive early reviews from cybersecurity policy veterans, though industry sources say the measure’s regulatory mandates are too heavy-handed and should be revised as the legislation advances through the Senate.

“I have serious concerns about the Warner bill’s practicality, reach, and the burdens it would impose on hundreds of thousands of companies, not to mention on DHS to receive and meaningfully use what could be millions...