Banking groups argue CISA incident reporting proposed rule goes beyond authorities provided by Congress

Four trade associations representing the banking sector are urging the Cybersecurity and Infrastructure Security Agency to reconsider the scope of reportable cyber incidents and refine the needed information requirements, in response to a notice of proposed rulemaking that they argue goes beyond the intent of Congress.

The groups say they “recognize the benefits of sharing threat intelligence and incident information” to CISA because it will enable the agency to “provide valuable tools and information to defend the nation’s critical infrastructure.”...