As the log4j vulnerability has shown, we must pass my bipartisan cyber incident reporting legislation. Im disappointed it was not included in the NDAA and will be working to get it passed as soon as possible.