Capital & PolicyFunding
REGULATION WATCH:
CIRCIA Rule Faces September Deadline As Industry Seeks Narrower Filings
CISA is working toward a September target for the delayed CIRCIA rule as industry groups seek fewer covered entities, narrower incident triggers and leaner reporting requirements. The law sets 72-hour incident and 24-hour ransomware-payment reporting deadlines, while the proposed rule could cover more than 300,000 entities.