Critical infrastructure operators are now required to report ransomware attacks, data breaches and other incidents to the Cybersecurity and Infrastructure Security Agency (CISA).
https://www.securitymagazine.com/articles/97252-critical-infrastructure-now-required-to-report-cyber-incidents-to-cisa
