CISA kicks off public comment period for incident reporting notice of proposed rulemaking

The Cybersecurity and Infrastructure Security Agency is now accepting comments on its notice of proposed rulemaking to implement mandatory cyber incident reporting requirements for critical infrastructure entities, according to a Federal Register notice published today.

CISA posted the NPRM on March 27 under public inspection. Publication in the Federal Register starts a 60-day public comment period, which closes on June 3.

The 2022 Cyber Incident Reporting for Critical Infrastructure Act directed CISA to establish a mandatory incident reporting regime...