Industry lobbies for reduced reporting requirements under CIRCIA

Private sector entities are pushing back against the Cybersecurity and Infrastructure Security Agency's (CISA) proposed reporting rules under the Cyber Incident Reporting for Critical Infrastructure Act (CIRCIA). Industry stakeholders seek to minimize the scope and frequency of mandatory cyberattack disclosures, while the final regulatory framework remains pending.