Proposed changeProposed Rule
Cyber Incident Reporting for Critical Infrastructure Act (CIRCIA) Reporting Requirements
Department of Homeland Security (CISA) · April 4, 2024
About rule labelsAutomated summary and label. Securidigm Watch is an information service, not legal advice. Labels such as 'mandatory' are generated automatically and may be wrong or out of date; whether and how a rule applies depends on your designation and the official text. Always read the official source linked here and confirm with the issuing agency or your counsel.
Summary
The Cyber Incident Reporting for Critical Infrastructure Act of 2022 (CIRCIA), as amended, requires the Cybersecurity and Infrastructure Security Agency (CISA) to promulgate regulations implementing the statute's covered cyber incident and ransom payment reporting requirements for covered entities. CISA seeks comment on the proposed rule to implement CIRCIA's requirements and on several practical and policy issues related to the implementation of these new reporting requirements.
From Federal Register, quoted as published. Check the source before acting.
Why it's on these mode pages
- Maritime: CISA document for all critical infrastructure (all modes) (matched by rule)
- Pipeline: CISA document for all critical infrastructure (all modes) (matched by rule)
- Freight rail: CISA document for all critical infrastructure (all modes) (matched by rule)
- Passenger rail and transit: CISA document for all critical infrastructure (all modes) (matched by rule)
- Highway and motor carrier: CISA document for all critical infrastructure (all modes) (matched by rule)
- Postal and parcel: CISA document for all critical infrastructure (all modes) (matched by rule)
Change history
- November 9, 2026: First collected by Watch