What CISA wants to see in CIRCIA reports

The U.S. federal government is advancing its efforts to enhance cybersecurity through the Cyber Incident Reporting for Critical Infrastructure Act of 2022 (CIRCIA), which mandates over 316,000 critical infrastructure entities to report cyberattacks and ransom payments. This move aims to standardize the sharing of cyber incident information across various sectors, strengthening the federal response to cyber threats. With a proposed ruling that includes a comprehensive reporting framework and an estimated impact covering two-thirds of all relevant entities over an 11-year period, the initiative is set to impose significant financial implications for both the industry and the federal government. The rule, emphasizing rapid reporting, detailed incident descriptions, and ransom payment disclosures, seeks to bolster cybersecurity resilience among critical infrastructure sectors.

Opens on Cybersecurity Dive