Cyber Incident Reporting for Critical Infrastructure Act Reporting Requirements

The US Cybersecurity and Infrastructure Security Agency invites Tribes to participate in a formal consultation on a Notice of Proposed Rulemaking (NPRM) entitled “Cyber Incident Reporting for Critical Infrastructure Act Reporting Requirements.” CISA issued the NPRM on April 4, 2024, pursuant to the Cyber Incident Reporting for Critical Infrastructure Act of 2022 (CIRCIA) which requires CISA to promulgate regulations implementing covered cyber incident and ransom payment reporting requirements for covered entities described in the final rule.