GAO Warns of Duplicative Federal Cybersecurity Regulations Increasing Burden on Critical Infrastructure

A new U.S. Government Accountability Office (GAO) report indicates that the increasing number of federal cybersecurity regulations is creating potentially duplicative reporting obligations for critical infrastructure organizations. The report notes limited progress in federal harmonization efforts and warns that overlapping requirements could hinder cyber resilience and increase compliance burdens.