CISA Releases Cyber Incident Reporting Rule Draft

CISA has laid out the details of the Cyber Incident Reporting for Critical Infrastructure Act (CIRCIA), a law passed by the Biden administration in 2022 that will require critical infrastructure entities to report incidents and ransomware payment information to the agency.

The law, enacted two years ago, directs CISA to develop and implement the specific requirements tied to CIRCIA, which require companies that are part of 16 designated U.S. critical infrastructure sectors to report covered incidents within 72 hours of …

act administration agency biden biden administration circia cisa critical critical infrastructure cyber cyber incident draft entities incident incident reporting incidents information infrastructure law payment ransomware releases report reporting