
As the Cybersecurity and Infrastructure Security Agency (CISA) begins to craft a proposed rule to require certain critical infrastructure entities to report ransomware attacks and cybersecurity incidents to the government, the agency shortly plans to ask for feedback on the “full gamut” of incident reporting, a senior CISA official said on Monday. The request for information (RFI) will be “open ended” and include some questions for the public and private sectors touching on what incidents should be covered, how information…