Eric Geller @ericgeller
Some of the changes: * CISA can't set the cyber incident reporting deadline beyond 7 days after an incident (the floor is 72 hrs) * Companies don't have to report incidents to CISA if they already report to other agencies & those agencies share with CISA w/in 6 hours — PolitiTweet.org