As 2021 draws to a close, Sheppard Mullin is sharing a recap of some of the most important cybersecurity development they covered this past year along with some suggestions on what companies (particularly those that do business with the federal government) should expect in 2022. This is part three of a four-part series.
“We have been keeping a close eye on proposed legislation related to cyber incident and ransomware payment reporting. Certain proposed legislation initially included in draft versions of the 2022 National Defense Authorization Act would have required critical infrastructure providers and contractors to report cyber incidents within 72 hours and ransomware payments within 24 hours. Despite widespread bipartisan support, these provisions were removed from the final version of the NDAA.”
Source: