DHS ISSUES RECOMMENDATIONS TO HARMONIZE CYBER INCIDENT REPORTING FOR CRITICAL INFRASTRUCTURE ENTITIES
October 20, 2023
The Department of Homeland Security (DHS) outlined a series of actionable recommendations on how the federal government can streamline and harmonize the reporting of cyber incidents to better protect the nation’s critical infrastructure. The recommendations are a requirement of the Cyber Incident Reporting for Critical Infrastructure Act (CIRCIA). Key recommendations include establishing model definitions, timelines, and triggers for reportable cyber incidents; creating a model cyber incident reporting form that federal agencies can adopt; and streamlining the reporting and sharing of information about cyber incidents, including the assessment of a potential single reporting web portal. The CIRCIA includes representation from 33 federal agencies. The report’s recommendations will inform the Cybersecurity and Infrastructure Security Agency’s ongoing rulemaking process to implement landmark cyber incident reporting requirements applicable to covered critical infrastructure entities, as mandated under CIRCIA.
If you have any questions, please contact Evelyn Sahr at 202.659.6622 or esahr@eckertseamans.com; Drew Derco at 202.659.6665 or dderco@eckertseamans.com; David Rockman at 412.566.1999 or drockman@eckertseamans.com; Jay Julien at 202.659.6648 or jjulien@eckertseamans.com, or any other attorney at Eckert Seamans with whom you have been working.