American Water Works Association
CISARulemakingCISA-2022-0010

Cyber Incident Reporting for Critical Infrastructure Act (CIRCIA) Reporting Requirements

RIN
Last modified
May 27, 2026
Comment window
closed 755d ago
American Water Works Association filings
2

Activity

American Water Works Association filed 2 comments on this docket between Nov 15, 2022 and Apr 19, 2024. 155 other organizations filed here. The comment window closed 755d ago.

What American Water Works Association filed (2)

Apr 19, 2024· Comment Submitted by American Water Works Association· CISA-2022-0010-0179

The attached request seeking a 30 day extension to the comment period is being transmitted on behalf of the American Water Works Association, Association of Metropolitan Water Agencies, National Association of Clean Water Agencies, National Association of Water Companies, National Rural Water Association, and Water Environment Federation.

Nov 15, 2022· Comment Submitted by American Water Works Association· CISA-2022-0010-0127

These comments are submitted on behalf of the American Water Works Association.

Abstract

The Cyber Incident Reporting for Critical Infrastructure Act of 2022 (CIRCIA), as amended, requires the Cybersecurity and Infrastructure Security Agency (CISA) to promulgate regulations implementing the statute’s covered cyber incident and ransom payment reporting requirements for covered entities. CISA seeks comment on the proposed rule to implement CIRCIA’s requirements and on several practical and policy issues related to the implementation of these new reporting requirements.

View on regulations.gov →