New US Law to Require Cyber Incident Report