CISA identifies challenges in implementing incident reporting law to Government Accountability Office

The Cybersecurity and Infrastructure Security Agency is facing challenges in its capabilities to review voluntary and mandatory incident reports as part of efforts to establish a reporting regime for critical infrastructure, according to a new report from the Government Accountability Office reviewing implementation of the 2022 law.

The 2022 Cyber Incident Reporting for Critical Infrastructure Act directed the Department of the Homeland Security and CISA to complete 13 requirements from the law by March 2024, including the release of a...