CISA Proposes Federal Cyber Incident Reporting Requirements for Businesses Across 16 Sectors

On April 8, 2024, Cravath prepared a memo for its clients entitled “CISA Proposes Federal Cyber Incident Reporting Requirements for Businesses Across 16 Sectors.” The memo examines the U.S. Department of Homeland Security’s Cybersecurity and Infrastructure Security Agency’s recently proposed rule, entitled “Cyber Incident Reporting for Critical Infrastructure Act (CIRCIA) Reporting Requirements,” which sets forth the nation’s first broadly applicable federal cyber incident reporting requirements. The memo summarizes the criteria that will determine what entities will be covered if the rule is adopted as proposed; what will need to be reported; when reports will need to be filed; and other key aspects of the proposed rule.

Please click here to read the memo.