Homeland Security Department Docket CISA-2022-0010 Proposed Rule

2024-06526: Cyber Incident Reporting for Critical Infrastructure Act (CIRCIA) Reporting Requirements

Comment Period Closed

Public comment closed .

Get alerted when the next rule lands

New rules open for comment on their own schedule. Pick how you want to hear about them — we email you when one appears.

Alert me on new Homeland Security Department rules or alert me on a subject

Publishing to members? Embed a live rule tracker on your own site — the proposed rules in your area and the comment deadlines closing on them, updating themselves. Free, one line of HTML.

Create a free account & build one →

Summary

The Cyber Incident Reporting for Critical Infrastructure Act of 2022 (CIRCIA), as amended, requires the Cybersecurity and Infrastructure Security Agency (CISA) to promulgate regulations implementing the statute's covered cyber incident and ransom payment reporting requirements for covered entities. CISA seeks comment on the proposed rule to implement CIRCIA's requirements and on several practical and policy issues related to the implementation of these new reporting requirements.

The agency’s own summary, as published.

What this changes

Amends 1 part of the Code of Federal Regulations — the standing rules this notice rewrites.

Don't miss the comment window

One Click Politics alerts you on every deadline, hearing, and rule change.

See all rules with comments due soon →