The Cybersecurity and Infrastructure Security Agency has announced a schedule of virtual town halls to gather additional stakeholder input as it continues to develop the cyber incident reporting rules under the Cyber Incident Reporting for Critical Infrastructure Act of 2022. CISA is required to implement the CIRCIA, which among other requirements mandates that covered critical infrastructure entities report significant cyber incidents within 72 hours and ransomware payments within 24 hours.
CISA missed its October 2025 statutory deadline to finalize its rules and has since been delayed due to the lapse in the Department of Homeland Security’s appropriations. The town halls will be held June 15–18 from approximately 11:30am to 3:30pm EST each day. To register, visit www.cisa.gov/circia and follow the instructions to complete registration.
