A Threat-Sharing Law Slides Into December. A CIRCIA Reporting Mandate Does Not

CISA 2015’s threat-sharing protections keep getting short extensions while CIRCIA’s 72-hour reporting mandate becomes permanent this month.