Topic
Cyber Incident Reporting
140 published works
Rural Spectrum Scanner
CISA Restarts Engagement on Cyber Incident Reporting
The Cybersecurity and Infrastructure Security Agency has announced a schedule of virtual town halls to gather additional stakeholder input as it continues to develop the cyber incident reporting rules under…
The Federal Government Contracts & Procurement Blog
CIRCIA Is Coming: What Government Contractors Need to Know About the Upcoming Cyber Incident Reporting Rules
By Robbie Pratt, Nick Feldstern
The federal government’s most sweeping cyber incident reporting mandate is approaching its final stages, and government contractors across a wide range of industries should be paying close attention. The Cyber…
Byte Back
Navigating Cyber Disclosures in 2026: A Limited Renewal of CISA 2015, and “Take Two” on Finalizing CIRCIA’s Reporting Regulations
By Erik Dullea, Luis Hidalgo, Anokhy Desai
Key point: 2026 may be a pivotal year for organizations to monitor cyber incident reporting requirements—the voluntary sharing allowed under CISA 2015 remains available, but only through September, and regulations…
Inside Privacy
CISA Announces Town Halls to Gather Input on CIRCIA Proposed Rule
By Ashden Fein, Caleb Skeath, John Webster Leslie, Shayan Karbassi, Analese Bridges
Earlier this month, the U.S. Cybersecurity and Infrastructure Security Agency (“CISA”) announced a series of public town hall meetings to solicit additional stakeholder input on the Notice of Proposed Rulemaking…
Global Privacy & Security Compliance Blog
China’s CAC Announces New Cybersecurity Incident Reporting Measures
The measures, which take effect on November 1, 2025, position China with one of the more rigorous cybersecurity incident notification regimes in Asia. By Hui Xu, Rhys McWhirter, and Bianca…
China Law Vision
China’s New Cyber Incident Reporting Rules
By Samuel Yang, Chris Fung, Bill Zhou
Introduction Protecting the integrity of networks and data has become a global imperative. China, recognising this, has promulgated the "Administrative Measures for the Reporting of National Cybersecurity Incidents " ("Measures";…
Inside Privacy
CISA Delays Cyber Incident Reporting Rule for Critical Infrastructure
By Ashden Fein, Micaela McMurrough, Caleb Skeath, John Webster Leslie
The U.S. Cybersecurity and Infrastructure Security Agency (“CISA”) plans to delay the publication of its much-anticipated cybersecurity incident reporting rule implementing the Cyber Incident Reporting for Critical Infrastructure Act of…
Bright Law Blog
How To Make a Ransomware Payment Report
The Department of Home Affairs has announced that ransomware payment reporting is now active on this form. Under section 27 of the Cyber Security Act 2024, a reporting business entity…
Privacy Matters
UK: Consultation on Ransomware payments
By Jules Toynton, Rachel de Souza
On 14 January 2025, the UK Home Office published a consultation paper focusing on legislative proposals to reduce payments to cyber criminals and increasing incident reporting. The proposals set…
Pro Policyholder
The SEC’s Cybersecurity Incident, Governance, and Management Reporting Requirements: What you Need to Know to Avoid Cyber and D&O Coverage Gaps
By Emma Leonelli, Shelby Guilbert, Nicholas Hill, David Hirsch
The SEC public company cyber disclosure rule raises issues that companies should consider in reviewing existing insurance coverage and in assessing overall risk. The SEC recently adopted a new cybersecurity…