The Cybersecurity and Infrastructure Security Agency is set to become a “regulatory enforcer” after receiving legal authority to require cybersecurity incident reports from critical infrastructure entities, a former agency leader told Federal