American Chemistry Council urges CISA to adjust cyber incident trigger under upcoming reporting regime

The American Chemistry Council is asking the Cybersecurity and Infrastructure Security Agency to adjust the trigger for reporting a substantial cyber incident by making changes to the proposed criteria for covered entities, as part of the upcoming regime for critical infrastructure owners and operators.

“CISA proposes impact categories of unauthorized access that would trigger a substantial or significant cyber incident. The criteria are very broad and should be more targeted to actual risk and damage,” ACC writes in its...