Banking group sees potential benefit from proposed language in Cyber Incident Reporting Council review to impact upcoming CISA rules

Common language proposed by the DHS-led Cyber Incident Reporting Council on how to define an incident and the trigger for reporting could have a positive impact on CISA’s upcoming rulemaking for critical infrastructure, according to the Bank Policy Institute.

The Cybersecurity and Infrastructure Security Agency is in the process of writing a proposed rule that will require critical infrastructure owners to report cyber incidents within 72 hours. The proposed rule and the CIRC report are requirements from the...