CIRCIA (Cyber Incident Reporting for Critical Infrastructure Act)

Summary

Requires critical infrastructure entities to report substantial cyber incidents to CISA within 72 hours and ransomware payments within 24 hours. CISA is directed to establish implementing regulations, create a centralized incident reporting system, and share anonymized threat intelligence with the private sector.