CIRCIA (Cyber Incident Reporting for Critical Infrastructure Act) CIRCIA-2247: Federal Sharing of Incident Reports

Any Federal agency that receives a report of a cyber incident, including a ransomware attack, must provide it to CISA as soon as possible and not later than 24 hours after receipt (unless a shorter period is agreed), supporting harmonized Federal sharing.