Proposed changeProposed Rule
Cyber Incident Reporting for Critical Infrastructure Act (CIRCIA) Reporting Requirements; Extension of Comment Period
Department of Homeland Security (CISA) · May 6, 2024
About rule labelsAutomated summary and label. Securidigm Watch is an information service, not legal advice. Labels such as 'mandatory' are generated automatically and may be wrong or out of date; whether and how a rule applies depends on your designation and the official text. Always read the official source linked here and confirm with the issuing agency or your counsel.
Summary
On April 4, 2024, the Cybersecurity and Infrastructure Security Agency (CISA) published a proposed rule in the Federal Register, the Cyber Incident Reporting for Critical Infrastructure Act of 2022 (CIRCIA), which proposes regulations implementing the statute's covered cyber incident and ransom payment reporting requirements for covered entities. CISA is extending the public comment period for the proposed rulemaking for an additional 30 days through July 3, 2024, in response to comments received from the public requesting additional time.
From Federal Register, quoted as published. Check the source before acting.
Why it's on these mode pages
- Maritime: CISA document for all critical infrastructure (all modes) (matched by rule)
- Pipeline: CISA document for all critical infrastructure (all modes) (matched by rule)
- Freight rail: CISA document for all critical infrastructure (all modes) (matched by rule)
- Passenger rail and transit: CISA document for all critical infrastructure (all modes) (matched by rule)
- Highway and motor carrier: CISA document for all critical infrastructure (all modes) (matched by rule)
- Postal and parcel: CISA document for all critical infrastructure (all modes) (matched by rule)
Change history
- November 9, 2026: First collected by Watch