CISA Submits Final Cybersecurity Reporting Rule for Critical Infrastructure to OMB

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has submitted its final rule for the Cyber Incident Reporting for Critical Infrastructure Act (CIRCIA) to the Office of Information and Regulatory Affairs (OIRA) for interagency review. This action is a key step before the rule's publication, which will require critical infrastructure entities to report certain cyber incidents within 72 hours and ransomware payments within 24 hours, enhancing national cybersecurity.