Bill would require companies that own or operate parts of the nation’s critical infrastructure to report a cyberattack or breach within 72 hours of confirmation. The bill also would create a Cyber Incident Review Office that would be housed within the U.S. Cybersecurity and Infrastructure Security Agency. The Senate bill, which is being debated in the Intelligence Committee, would require incidents to be reported within 24 hours of discovery, rather than 72 hours. Several cybersecurity-related bills have been introduced in the House and Senate in response to recent cyber incidents.”]
Source: https://www.careersinfosecurity.com/house-debates-breach-notification-measure-a-17436