China Imposes One-Hour Reporting Rule for Major Cyber Incidents www.darkreading.com/cybersecu…

Infrastructure providers in China will have a scant 60 minutes to report security incidents involving the most critical networks starting Nov. 1, following new regulations issued by the Chinese government.

The requirements, described in a notice published by the Cyberspace Administration of China, require network operators who build, operate, or provide services in China and its territories to report any security incidents to the appropriate ministry. The missive requires network operators to grade any incident and, if the security event impacted “key infrastructure,” report the incident within an hour. For “a major or particularly important network security incident,” the regulations require notification within 30 minutes.

Other types of incidents give more leeway to the network operation, allowing them to report the incident within two to four hours, depending on the criticality of the networks.