Information Technology Industry Council
CISARulemakingCISA-2022-0010

Cyber Incident Reporting for Critical Infrastructure Act (CIRCIA) Reporting Requirements

RIN
Last modified
May 27, 2026
Comment window
closed 755d ago
Information Technology Industry Council filings
2

Activity

Information Technology Industry Council filed 2 comments on this docket between Nov 15, 2022 and Jul 3, 2024. 155 other organizations filed here. The comment window closed 755d ago.

What Information Technology Industry Council filed (2)

Jul 3, 2024· Comment Submitted by Information Technology Industry Council· CISA-2022-0010-0310

Please find attached comments from the Information Technology Industry Council (ITI).

Nov 15, 2022· Comment Submitted by Information Technology Industry Council· CISA-2022-0010-0097

See attached file(s) for comments from the Information Technology Industry Council responding to the RFI. Contact Courtney Lang (CLang@itic.org) with follow-up questions.

Abstract

The Cyber Incident Reporting for Critical Infrastructure Act of 2022 (CIRCIA), as amended, requires the Cybersecurity and Infrastructure Security Agency (CISA) to promulgate regulations implementing the statute’s covered cyber incident and ransom payment reporting requirements for covered entities. CISA seeks comment on the proposed rule to implement CIRCIA’s requirements and on several practical and policy issues related to the implementation of these new reporting requirements.

View on regulations.gov →