Registered Investment Advisers (RIAs) in the U.S. have a similarly short timeframe to report cyber incidents to regulators