
After more than two dozen listening sessions and an official request for information that resulted in 130 comments, the Cybersecurity and Infrastructure Security Agency (CISA) has created a draft rule for proposed regulations for critical infrastructure entities to report major cyber incident that will be issued as scheduled in March 2024, the agency’s top official said on Thursday. The final rule is on schedule for release in Sept. 2025, CISA Director Jen Easterly told the House Homeland Security Subcommittee on…