Extended CIRCIA rule comment period sought

The Cybersecurity and Infrastructure Security Agency has been urged by the U.S. Chamber of Commerce and over 20 industry groups to implement a 30-day extension to the two-month feedback period for its draft rule under the Cyber Incident Reporting for Critical Infrastructure Act, which would require cyber incident and ransomware disclosures within a 72- and 24-hour period, respectively, reports The Record, a news site by cybersecurity firm Recorded Future.

act agency chamber of commerce circia commerce critical critical infrastructure cyber cyber incident cybersecurity disclosures draft extension feedback governance risk and compliance government-regulations incident incident reporting industry infrastructure infrastructure security period ransomware reporting security under u.s. chamber of commerce