Critical infrastructure operators get more time to shape new cyber reporting rules

The US government is holding more public meetings about new cyber incident reporting rules. This means companies running critical systems get another chance to tell regulators what they think before the rules are final.

The government wants to force companies that run critical infrastructure to report cyberattacks and ransom payments. These rules could be expensive and complex. Giving companies more time to comment means they can push for less burdensome requirements.