Banking sector groups offer considerations for determining ‘malicious intent’ under CISA reporting regime

A coalition of banking sector groups is urging CISA to set a “malicious intent” threshold for incident reporting that will help the agency achieve its desired outcome to share information back out to industry for preparation and response efforts.

“We encourage CISA to proceed in the spirit of the underlying CIRCIA law and focus on incidents where there is material harm to a covered entity,” the coalition said Monday in comments submitted to CISA on the upcoming regulation.

The...