Relief about passage, implementation concerns mark industry responses to incident reporting legislation

Industry groups have begun weighing in on the cyber incident reporting mandate for critical infrastructure passed by Congress, expressing a mix of anxiety about implementation and support for the legislation’s goals.

“This legislation recognizes that front-line defenders can’t drop everything amid a cyber event to try and guess what to report to the government and how to do it,” the Bank Policy Institute said in a statement following passage late Thursday of an omnibus appropriations package carrying the...