Critically Important Organization?

Now It Is Critical to Report Security Incidents

Published by Cyber Defense Magazine, Partner IT Advisory Services, Trip Hillman, shares his thoughts on the Cyber Incident Reporting Act of 2022 and mandates within the law that require covered entities to inform the Cybersecurity and Infrastructure Security Agency (CISA) within 72 hours of a ‘significant’ cyber incident.

• “With the enactment of this law, one key takeaway for organizations is the overall change in tone from ‘you should report…’ to a ‘you will report.’ However, key aspects of how this will play out, such as the necessary content, method for reporting, reporting distribution and retention and process for amending or recalling submissions have been left for CISA to determine.”

© 2022