Industry groups told CISA they want the CIRCIA incident reporting rule to cover fewer organizations, require reports for fewer incidents, and collect less information when reporting is needed. The debate comes as CISA has missed multiple deadlines for finalizing the rule, while Congress and critical infrastructure stakeholders push for a narrower, more practical final version. #CIRCIA #CISA
Keypoints
- Industry groups want fewer companies covered by the rule.
- They want to report fewer incidents and provide less data.
- Many oppose reporting details about security measures.
- CISA has missed key deadlines, including the October 2025 and May targets.
- Congress and industry are pushing CISA to finalize a simpler rule.
Read More: https://cyberscoop.com/cisa-circia-cyber-incident-reporting-rule-feedback/