Proposed Cybersecurity Rule Could Affect Many CRE Landlords

Attacks on building systems could easily be deemed within the scope of the rule and real estate owners who lease to covered entities would likely have to quickly report cyber incidents within 72 hours and payments made after a ransomware attack within 24 hours.

3 minute read May 01, 2024 at 12:03 AM
By
Erik Sherman
Proposed Cybersecurity Rule Could Affect Many CRE Landlords

A proposed federal cybersecurity rule from the U.S. Cybersecurity and Infrastructure Security Agency would require companies that own and operate critical infrastructure to report covered cyber incidents within 72 hours and payments made after a ransomware attack within 24 hours.

This premium content is locked for LawJournalNewsletters subscribers only

ENJOY UNLIMITED ACCESS TO THE SINGLE SOURCE OF OBJECTIVE LEGAL ANALYSIS, PRACTICAL INSIGHTS, AND NEWS IN LawJournalNewsletters

  • Stay current on the latest information, rulings, regulations, and trends
  • Includes practical, must-have information on copyrights, royalties, AI, and more
  • Tap into expert guidance from top entertainment lawyers and experts

Already have an account? Sign In Now

For enterprise-wide or corporate access, please contact Customer Service at [email protected] or call 1-877-256-2473.

NOT FOR REPRINT

© 2026 ALM Global, LLC, All Rights Reserved. Request academic re-use from www.copyright.com. All other uses, submit a request to [email protected]. For more information visit Asset & Logo Licensing.

Continue Reading

Agentic AI introduces risks that are novel and complex, but the most effective response is a familiar one. Zero Trust answers the problem of when an AI agent misfires on its own by constraining what an agent can do rather than betting on how it will behave.

July 31, 2026

The outsourcing of office and administrative services is expected to grow 50%-60% in the next five years. Contrary to what decision-makers think, and what the service providers hope you think, the biggest risk in outsourcing isn't choosing the wrong provider. It's outsourcing the wrong process, under the wrong model, with the wrong performance measures and contract terms.

July 31, 2026