CISA Bares Regulatory Teeth in Incident-Reporting Proposal (1)

The US Cybersecurity and Infrastructure Security Agency is on the cusp of expanding its enforcement powers for the second time under the Biden Administration after introducing a proposal to bolster security monitoring of the nation’s most critical sectors.

The top US cybersecurity agency’s proposed incident-reporting rule comes after years of public panning over CISA’s perceived limited ability to execute its core mission. If finalized, the rule would bolster CISA’s authority to subpoena critical-infrastructure operators and refer entities shirking their public disclosure obligations to the Justice Department for civil enforcement, according to the 447-page notice of proposed rulemaking scheduled to be ...