Eric Geller @ericgeller
Other big changes: * Management of incident reporting program goes to CISA's NCCIC, instead of a new office * CISA has 1 year, instead of 90 days, to create the ransomware vulnerability warning program * New 4-year sunset for warning program — PolitiTweet.org