Assemble facts for a ransom-payment report without filing it
Key facts
- Human involvement
- RedLawyer-led
- How AI is used
- From the facts the lawyer enters, list the date the payment was made, the amount, and the demand as the lawyer states them. Do not write the report, do not send it, and do not decide that the entity is a covered entity.
- What the lawyer must review
- 6 U.S.C. 681b(a)(2)(A) provides that a covered entity that makes a ransom payment as the result of a ransomware attack against the covered entity shall report the payment to the Agency not later than 24 hours after the ransom payment has been made. Paragraph (a)(1)(A) is a different report: a covered entity that experiences a covered cyber incident shall report that incident not later than 72 hours after the covered entity reasonably believes the incident has occurred. The definitions of covered entity, covered cyber incident, and ransom payment were not opened. CISA's CIRCIA page, checked on 22 October 2026, states that covered cyber incident and ransomware payment reporting under CIRCIA will not be required until the CIRCIA final rule goes into effect, and that CISA continues to work on the final rule. The lawyer decides whether any report is made. The tool writes and sends nothing.
- Written for / version
- United States versionUS
Who does what
| Role | What they do |
|---|---|
| Assistance | Supporting preparation only. Consider narrowly defined preparation support after confirming the tool’s capability and permitted scope. The tool writes nothing into the document. Substantive advice, judgement and any restricted content remain with the responsible human. |
| Lawyer | Perform the substantive analysis and decisions. Independently check any permitted supporting work and approve the exact output for its intended use. |
Checklist
- Trace every relied-on figure to its source, confirm dates and assumptions, and independently recalculate totals or derived amounts.
- Check the current court or regulator requirements, prescribed form and attachments for the intended document and filing.
- Confirm the output against the client’s instructions and the complete relevant source material, including omissions or contradictions.
- Resolve exceptions and record the responsible lawyer’s approval of the exact output and intended use.