Companies will have to designate cybersecurity coordinators and follow clear rules for incident response.

The attack on the Toronto Transit Commission follows another on the Ann Arbor Transportation Authority last week.

Broadly, the administration is also formulating a national cybersecurity strategy and looking at more regulations.

DHS Secretary Alejandro Mayorkas and Deputy Attorney General Lisa Monaco spelled out the plans at separate events.

It's the second set of requirements TSA has issued since the momentous Colonial Pipeline ransomware attack.

The company's response put on display broader Hill concerns about the private sector's ransomware safeguards.

Colonial Pipeline did not have guidance in place on how to handle a ransom demand by cybercriminals, its CEO acknowledged in a Senate hearing.

It’s a big shift to the federal approach to pipeline security.

It's another sign that Biden administration officials believe the status quo for federal cyber protections for critical infrastructure is untenable