Practice What You Preach, CISA

CISA has been pushing for legislation to get private companies to report their breaches within 72 Hours. (CIRCIA Act of 2022) Their reporting form wants you to share everything and everyone involved with your cyber incident. Now, when faced with their own cyber incident, they are silent. Recorded Futiure comments: "CISA declined to answer a range of questions about who was behind the incident, whether data had been accessed or stolen and what systems were taken offline."

It's a bit …

72 hours act breaches circia cisa comments companies cyber cyber incident cybersecurity everything incident legislation own practice private report reporting share silent