Eric Geller @ericgeller
Provisions added to language from House bill: * CISA has to compare incident reports w/ companies SEC filings * CISA's pre-reg outreach must include security response firms and cyber insurers * Pentesting and other VDP-compliant activity excluded from def'n of incident — PolitiTweet.org