CISA releases request for information seeking feedback on incident reporting implementation

The Cybersecurity and Infrastructure Security Agency has issued a request for information to get input on implementing its incident reporting regime for critical infrastructure owners, with a focus on defining key terms, reporting details, submission procedures and other info-sharing considerations.

“The Cybersecurity and Infrastructure Security Agency (CISA) is issuing this Request for Information (RFI) to receive input from the public as CISA develops proposed regulations required by the Cyber Incident Reporting for Critical Infrastructure Act of 2022 (CIRCIA). Among other...