CISA Releases Draft Guidelines for Reporting Cyberattacks on Critical Infrastructure

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) released proposed regulations on March 27 governing the manner in which companies with critical infrastructure are required to notify the government of cyberattacks. The regulations were formulated by CISA subsequent to the enactment of the Cyber Incident Reporting for Critical Infrastructure Act (CIRCIA) by President Joe Biden on March 15, 2022. With the assistance of reports from businesses across industries, officials hope to be better able to identify attack patterns and ascertain the strategies employed by cybercriminals and nation-states in order to strengthen defenses. Secretary of Homeland Security Alejandro N. Mayorkas commented on the proposal in a CISA press release, saying “Cyber incident reports submitted to us through CIRCIA will enable us to better protect our nation’s critical infrastructure....