CISA Eyes September Date for Final Cyber Incident Reporting Rule

The Cybersecurity and Infrastructure Security Agency (CISA) plans to finalize a cybersecurity incident reporting rule in September that would require critical infrastructure entities to report major cyber incidents directly to CISA, according to a regulation document published last week. This rule finalizes regulations to implement certain aspects of the Cyber Incident Reporting for Critical Infrastructure Act of 2022 (CIRCIA). Specifically, CIRCIA directs CISA to develop and implement regulatio