Health, Auto Sectors Call for Limits on Cyber Reporting Rule

Critical infrastructure professionals took advantage Monday of a final opportunity to convince the Cybersecurity and Infrastructure Security Agency to ease Biden-era requirements for how companies report cyber incidents to the US government before they go into effect.

In a two-hour town hall, which drew about 250 attendees, speakers said the proposed rule that would implement the Cyber Incident Reporting for Critical Infrastructure Act of 2022, known as CIRCIA, would create overlapping reporting requirements for companies that suffer cyber incidents like ransomware attacks.

About a dozen speakers representing local government, health, automotive, and construction sectors, among others, asked the agency to ...