The forthcoming mandate aims to triage vulnerabilities by real-world consequences of a successful cyberattack, marking a major shift in how the government decides which cyber risks demand attention ...