Executive Summary

Mandatory cyber incident reporting is being extended to many more organizations. Those already subject to these regulations face new, more stringent, requirements.

Engaging proactively with government agencies and your own incident response and legal partners will make mandatory incident reporting as frictionless as possible and allow you to derive maximum benefit from the process.

Defining a ‘material’ incident for your organization and selecting appropriate incident response and legal firms are among the preparatory measures required.