CISA Eyes Staff, Tech Upgrades to Support Cyber Incident Reporting

Caleb Skeath’s commentary was included a Federal News Network article covering how the Cybersecurity and Infrastructure Security Agency’s (CISA) new cyber incident reporting rules will require the agency to expand its staff and upgrade technology. Caleb comments on how the Cyber Incident Reporting for Critical Infrastructure Act (CIRCIA) raises two major questions: who exactly is going to be required to report under the rules, and what type of incidents will need to be reported?

“The law gave some contextual clues as to how those might be fleshed out, but there’s not a firm definition, there’s not a firm sense of how broadly either one might be scoped,” Caleb said. He added that “it will be interesting to see how CISA describes what a reportable incident is, and how they balance getting that information to allow them to achieve their objectives versus not getting overwhelmed with information if they make that requirement too broad.”