Stay compliant with CISA’s new cyber incident reporting portal

TLDR:

• CISA has unveiled a new cyber incident reporting portal called the CISA Services Portal with enhanced functionality.
• The portal is being launched ahead of the implementation of the Cyber Incident Reporting for Critical Infrastructure Act (CIRCIA).

CISA has unveiled a new cyber incident reporting portal called the CISA Services Portal with enhanced functionality. The new portal allows users to save and update reports, share reports with third parties, search and filter reports, and chat with CISA officials informally. CISA Executive Assistant Director for Cybersecurity, Jeff Greene, emphasized the importance of organizations reporting cyber incidents for their own benefit and to help the broader community. This initiative comes as CISA prepares to implement the landmark Cyber Incident Reporting for Critical Infrastructure Act (CIRCIA), which will require organizations across all 16 critical infrastructure sectors to report serious cyber incidents to CISA within 72 hours and ransomware attacks within 24 hours.

In addition to the new portal, CISA is hiring more employees and upgrading technology to support the influx of incident reports expected under CIRCIA. The agency is also working to harmonize CIRCIA with existing incident reporting regulations and ensure minimal burden on the private sector. CISA Director Jen Easterly highlighted that the focus of CIRCIA is on rendering assistance, protecting privacy, and sharing information with partners. The new portal and the impending regulations mark a significant step towards enhancing cybersecurity and incident reporting within critical infrastructure sectors.