CISA Faces Resource Challenge in Implementing Cyber Reporting Rules

Caleb Skeath’s commentary was included a Cyberscoop article looking at a new cyber reporting proposal from the Cybersecurity and Infrastructure Security Agency (CISA) and how the agency will secure the resources it needs to implement the rule. Caleb discussed the industry comment period and what he expects to see.

Sharing his insight from advising clients on incident response, Caleb said, “there is not necessarily bright line differentiators between what is and what is not a covered cyber incident. A lot of these prongs or criteria refer to substantial losses of confidentiality, integrity, or availability or serious impact on safety and resiliency. A lot of that can be in the eye of the beholder and it could be a difficult judgment call to make in the heat of the moment.”