Cybersecurity Dive April 4, 2024
The most consequential federal critical infrastructure cyber incident regulation will be on the books in 18 months. Here are some of CIRCIA’s main asks.
The federal government is making headway on its efforts to get more organizations to disclose security incidents, with plans to compel upwards of 316,000 U.S. critical infrastructure owners, operators and suppliers to quickly divulge cyberattacks and ransom payments.
The proposed rule for the Cyber Incident Reporting for Critical Infrastructure Act of 2022, signed into law in March 2022 and dubbed CIRCIA, marks a sea change in how industries share sensitive and actionable cyber incident details at the federal level.
The Cybersecurity and Infrastructure Security Agency posted an initial version of its 447-page notice of proposed rulemaking...