standard

CIRCIA

US federal law directing CISA to collect reports of significant cyber incidents from critical-infrastructure entities and to circulate that information to other federal agencies, with the filing details set by CISA rulemaking.

Known aliases

Cyber Incident Reporting for Critical Infrastructure Act

Relationships

No evidence-backed relationships are recorded.

Current clusters

security1 publisher

One critical-infrastructure incident still triggers reporting duties at several federal agencies

A major critical-infrastructure intrusion can still owe reports to several federal agencies working from different definitions and timelines. An SC World perspective wants one submission to CISA to travel to all of them.

Publishers:scworld.com

Reality

Evidence32
Adoption: Insufficient
Hype gap+28
Incentives65
Confidence38