UK Sets Out New Cyber Reporting Requirements for Critical Infrastructure

Regulated entities will have to notify their sector-specific regulator and inform the NCSC within the first 24 hours of becoming aware of an incident. This notification will need to be followed by a full incident report within 72 hours.