House Group Files Bipartisan Cyber Incident Reporting Bill

House members introduced legislation Friday that would direct the federal government to establish cyber incident reporting requirements for critical infrastructure owners and operators. Introduced by House Homeland Security Committee Chairman Bennie Thompson, D-Miss.; ranking member John Katko, R-N.Y.; Cybersecurity Subcommittee Chair Yvette Clarke, D-N.Y.; and ranking member Andrew Garbarino, R-N.Y., the Cyber Incident Reporting for Critical Infrastructure Act would direct the Department of Homeland Security’s Cybersecurity and Infrastructure Security Agency to establish requirements. Entities would report to a new cyber incident review office established by CISA. It would allow for a reporting window of at least 72 hours and provide liability protections. The bill was included as a bipartisan amendment to the National Defense Authorization Act for FY 2022, which passed the House in September. Senate members are negotiating various pieces of mandatory cyber reporting legislation (see 2109230065).