Yvette Clarke actually said...

"I would certainly be happy to explore whether we need to add language directing CISA to provide additional compliance assistance to small businesses."

"I want to be clear that we do not expect all critical infrastructure owners and operators to be subject to this reporting requirement."

"That hearing convinced me that Congress must act to ensure the Cybersecurity and Infrastructure Security Agency (CISA) receives timely cyber incident information from critical infrastructure owners an..."

"At the hearing, I asked whether we would benefit from implementing a mandatory cyber incident reporting framework."