China now requires reporting severe cyberattacks within one hour if they affect over 50% of a province's population or ten million people. The irony: China is a leading offensive cyber actor against other nations, but wants rapid alerts to defend its own critical infrastructure using the same tactics it deploys abroad.
Chapters
China has implemented regulations for 1-hour reporting of severe cybersecurity incidents, including disruptions that impact over 50% of the people in a province or 10 million people, such as a critical infrastructure attack. The irony is thick as China is recognized as one of the most aggressive nation-state actors, renowned for its advanced foreign cyber operations that includes industrial espionage theft of defense secrets, and breaching national critical infrastructures. Unfortunately, there is brilliance in this move that requires Chinese companies and operators to quickly report severe cyberattacks. The faster government becomes aware, the quicker they can respond with national-level assets to mitigate the impacts. Given their international expertise in hacking, China has an excellent perspective in how such attacks can be used to disrupt adversaries and push foreign policy. Basically, China doesn't want to suffer in the ways that their targets might, and therefore is improving its response and recovery capabilities.