Critical Electric Infrastructure Cybersecurity Incident Reporting Act

HR 1160 requires owners, operators, and users of critical electric infrastructure (like power grid systems) to report cybersecurity incidents and potential incidents to the Department of Energy within 24 hours. The bill amends federal law to establish this mandatory reporting requirement, with the Department of Energy tasked with creating regulations within 240 days of enactment to define "potential incidents" and manage submissions. It also mandates annual reports from the Department to Congress detailing the number of incidents reported and actions taken. This directly affects electric utility companies and grid operators responsible for maintaining critical infrastructure.