CISA incident reporting lead details efforts to work with other agencies on setting requirements

The Cybersecurity and Infrastructure Security Agency is working with other agencies to set up agreements on incident reporting, according to CISA rulemaking lead Todd Klessman, while recognizing that his agency is going to have different needs compared to regulators.

CISA is in the process of establishing an incident reporting regime where critical infrastructure owners and operators will be required to report incidents to the agency within 72 hours and 24 hours for ransom payments.

The Cyber Incident Reporting for...