Happy Monday and thanks for tuning in to this week’s segment of Mondays with Miranda!
Last week, on March 15th, President Biden signed into law the new Strengthening American Cybersecurity Act, which includes new cybersecurity incident reporting mandates for operators of federal infrastructure and federal civilian agencies. Those affected agencies will now be required to report to CISA within 72 hours of an incident (24 hours if ransomware attack), provide full descriptions of incidents, provide any known information about the responsible party, and more. The law also authorizes the Federal Risk and Authorization Management Program (FedRAMP) for five-years to ensure federal agencies are able to adopt cloud-based technologies.
This new law comes into effect at a time of global uncertainty, as a way to improve overall cybersecurity and create a clearer understanding of incident reporting requirements for business operators. For now, this law doesn’t affect businesses outside of critical infrastructure, but all businesses should still consider enhancing their cybersecurity and incident reporting plans.
That’s all for today! Thank you for tuning in to this week’s segment of “Mondays With Miranda!” Keep up to date with current news by following NeQter Labs on Twitter, Facebook, LinkedIn, and Youtube. We love comments and questions, so please feel free to send me an email at [email protected].
