The federal government is not responding effectively to the ransomware crisis, according to a report from the Senate Homeland Security panel.

The legislation eventually garnered widespread support on its way to becoming law, but much remains unresolved.

The report includes three case studies of ransomware attacks against U.S. companies within the past five years.

The measure, under which CISA would handle the incident reporting, must still win House approval.

Private-sector experts say that public-private threat sharing is key.

Aides continue to negotiate in a bid to overcome the dispute.