Financial sector sees potential ‘adverse’ impact to operations under CISA’s proposed data requirements for incident reports

The Financial Services Sector Coordinating Council wants the Cybersecurity and Infrastructure Security Agency to reconsider its proposed data elements that will be required under the upcoming incident reporting regime, expressing concern over potential impacts to operations if more attention on compliance is needed.

“The Proposed Rule outlines very granular requirements for the information covered entities would have to provide in CIRCIA reports -- including data on mitigation and response activities not specifically required by the CIRCIA statute,” the FSSCC says...