CISA’s Wales outlines key terms, concepts shaping rulemaking on cyber incident reporting

CISA is looking for feedback on three key issues that are driving the agency’s work to craft incident reporting regulation for critical infrastructure, according to CISA executive director Brandon Wales.

The agency released a request for information on Sept. 12 with several questions to inform implementation of the incident reporting law, which directs CISA to set up a mandatory regime where critical infrastructure entities will have 72 hours to report incidents to the cyber agency and 24 hours to...