Proposed CISA rule would require reporting for cyber incidents and ransom payments

The Department of Homeland Security's Cybersecurity and Infrastructure Security Agency is proposing a sweeping cyber incident reporting structure across 16 critical sectors, according to its notice of proposed rulemaking, published in the Federal Register (PDF) on Wednesday.

CISA said it would provide 60 days for written public comments when the proposed rule is published on April 4.

WHY IT MATTERS

The security agency's development of the proposed cyber incident reporting rules followed the passage of the Cyber Incident Reporting for …

agency cisa comments critical cyber cyber incident cyber incidents cybersecurity department department of homeland security federal federal register homeland security incident incident reporting incidents infrastructure infrastructure security notice payments pdf public ransom register reporting sectors security structure written