The following groups are required within 48 hours of discovery to report cybersecurity incidents to the Indiana Office of Technology:
Counties, municipalities, townships, school corporations, library districts, local housing authorities, fire protection districts, public transportation corporations, local building authorities, local hospital authorities or corporations, local airport authorities, special service districts, special taxing districts or other separate local governmental entities that may sue and be sued.