CISA outlines enforcement mechanisms for mandatory cyber incident reporting regime in proposed rulemaking

The Cybersecurity and Infrastructure Security Agency provides an overview of how it will enforce upcoming mandatory reporting for critical infrastructure requirements in a notice of proposed rulemaking.

CISA was tasked with creating a regime for mandatory reporting in the 2022 Cyber Incident Reporting for Critical Infrastructure Act. The agency published the NPRM on April 4, with a comment period closing June 3.

“CIRCIA provides a variety of mechanisms for CISA to use if CISA believes that a covered entity...