Skip to content
The Nexus
DossierENTITY

Cyber Incident Reporting for Critical Infrastructure Act

Coverage of Cyber Incident Reporting for Critical Infrastructure Act in the Nexus archive.

Earliest in view: Jul 24 · 20:58 UTCMost recent: Jul 24 · 20:58 UTC
Co-mentioned in this coverage
Cybersecurity and Infrastructure Security Agencyorganization1Auto Care Associationorganization1Nuclear Energy Instituteorganization1Alliance for Chemical Distributionorganization1AHIPorganization1insurance sectortopic1Nuclear Regulatory Commissionorganization1
Recent coverage
  • SECURITYJul 24 · 20:58 UTCCYBERSCOOP
    Industry’s message on CIRCIA: Please ask us fewer questions about cyberattacks

    Industry groups have consistently urged CISA to reduce the scope of the Cyber Incident Reporting for Critical Infrastructure Act (CIRCIA), advocating for fewer companies to be covered, fewer incidents reported, and less detailed information shared. CISA has delayed finalizing the rule multiple times, with industry sources doubting a September 2025 completion timeline. The law mandates reporting major cyberattacks within 72 hours and ransomware payments within 24 hours to enhance federal information sharing.

Cyber Incident Reporting for Critical Infrastructure Act · Dossier · The Nexus