Washington Response Declaration is an initiative of the Washington State government to protect critical infrastructure and public safety from cyber threats. It is a law that requires public and private entities to report cyber incidents to the Washington State Office of Cybersecurity. The law requires organizations to take steps to protect their networks, systems, and data from malicious actors and report any cyber incidents they discover. The Washington Response Declaration includes different types of cyber incident responses. These are: • Critical Infrastructure: This requires organizations to protect their systems and data, as well as report any cyber incidents to the Office of Cybersecurity as soon as possible. • Data Breach Notification: This requires organizations to notify affected parties of any data breaches or other cyber incidents within 45 days of discovery. • Security Requirements: This requires organizations to establish and maintain a security program that meets the standards set out in the Washington Response Declaration. • Incident Response Plans: This requires organizations to develop and maintain an incident response plan that outlines how they will respond to cyber incidents.