Eric Geller @ericgeller
More diffs from draft: * CISA must respond to reports w/in 2 biz days & say if it needs more info * Draft req'd reporting of all ransomware incidents; new version only reqs it if they meet other criteria (e.g. nation-state) * Inclusion of CI firms now based on risk of disruption — PolitiTweet.org