The Department of Homeland Security's Cybersecurity and Infrastructure Security Agency (CISA) introduced a Notice of Proposed Rulemaking (NPRM) to strengthen cybersecurity on March 27, 2024.
This announcement, published in the “Federal Register,” is an important step towards protecting critical infrastructure from cyberattacks.
Read also: CISA: Added three new vulnerabilities to the KEV list
Based on the Critical Infrastructure Cyber Incident Reporting Act of 2022 (CIRCIA), the NPRM heralds a new era of improved cybersecurity protocols.
According to CIRCIA, CISA is ready to use data to detect ransomware in real time in cyberspace.
Rapidly sharing information about cyber incidents allows the cybersecurity organization to provide timely assistance and prevent similar attacks on other organizations, reducing the impact of threats to national security.
Homeland Security Secretary Alejandro N. Mayorkas highlighted the importance of CIRCIA in strengthening the nation’s cybersecurity, stating: “The cyber incident reports we receive through CIRCIA will allow us to effectively protect our nation’s critical digital infrastructure.”
Mayorkas emphasized the importance of collaborating with both public and private stakeholders as an integral part of shaping the proposed rule, requesting further input during the public consultation to improve the Final Regulation.
“CIRCIA enhances our ability to detect cyberthreat trends, provide assistance to victims of cyberattacks, and quickly share information with other potential victims, leading to cyber risk reduction across all sectors. The proposed rule comes from a partnership with public and private actors,” Mayorkas said.
CISA Director Jen Easterly welcomed CIRCIA as a refreshing addition to the cybersecurity landscape, noting its critical role in preventing attacks, promoting early threat detection, and facilitating coordinated responses with public and private sector partners.
See more: CISA: Volt Typhoon hackers target critical infrastructure – Protection tips
“Understanding the threats we face takes on a new dimension, allowing us to detect actions early and develop more coordinated responses with our partners in the public and private sectors, addressing cyber threats.
Since September 2022, CISA has carefully solicited input from a variety of stakeholders, including the critical infrastructure community, in shaping the NPRM. The open comment period provides stakeholders with another opportunity to provide input on the proposed regulations for cyber incident reporting and ransom payments, along with other aspects of the CIRCIA regulatory framework.
Using information gathered from the Request for Information (RFI) and hearing sessions held last year, the cybersecurity agency has tailored the Public Comment Draft Rulemaking (NPRM) to meet the needs and priorities of stakeholders.
🔒 Protect your privacy with Proton VPN
Swiss VPN from the creators of Proton Mail — strict no-logs policy, strong encryption, and built-in NetShield that blocks ads, trackers, & malware.
- ✔ No-logs, based in Switzerland (except 14-Eyes)
- ✔ NetShield: blocks ads, trackers & malicious domains
- ✔ Covers all devices — free version available
The link is an affiliate link — SecNews may receive a commission at no additional cost to you. It does not affect the independence of our article writing.
The implementation of CIRCIA marks a significant shift in the national cybersecurity strategy, enabling CISA to gain comprehensive knowledge of the dynamic nature of cyber threats. By providing early warnings to entities facing cyber risks, CIRCIA is the cornerstone of proactive measures to reduce cyber risks, thereby strengthening the country's critical infrastructure against potential cyber threats.
See also: NSA & CISA: Best practices for cloud service security
Through collective efforts and dedication, CISA aims to strengthen cybersecurity in the United States and ensure the resilience of critical infrastructure against evolving cyber threats.
Source: thecyberexpress
