GAO Report Highlights Duplicative Federal Cybersecurity Regulations Increasing Critical Infrastructure Burdens

A new report from the U.S. Government Accountability Office (GAO) found that a growing number of federal cybersecurity regulations are creating potentially duplicative reporting obligations for critical infrastructure organizations. This increases compliance burdens without necessarily improving cyber resilience. The report noted limited progress in federal efforts to harmonize these regulations, with several initiatives delayed or stalled.