Brandon Wales, then-Acting Director Cybersecurity and Information Security Agency at U.S. Department of Homeland Security speaks during a Senate Homeland Security and Governmental Affairs Committee hearing May 11, 2021 on Capitol Hill. (Photo by Tasos Katopodis-Pool/Getty Images)
The draft cyber incident reporting rule faced significant pushback during a House hearing Wednesday, with industry groups arguing for a narrower reporting requirement.
The Cybersecurity and Infrastructure Security Agency’s reporting requirements represent a sea change for when private entities will have to report cybersecurity incidents.
Jen Easterly, Director of the Homeland Security Department’s Cybersecurity and Infrastructure Security Agency, arrives to testify before the House (Select) Strategic Competition Between the United States and the Chinese Communist Party Committee on Capitol Hill on January 31, 2024 in Washington, DC. (Photo by Kevin Dietsch/Getty Images)
Cybersecurity and Infrastructure Security Agency Director Jen Easterly testified before a House Homeland Security Subcommittee, at the Rayburn House Office Building on April 28, 2022. (Photo by Kevin Dietsch/Getty Images)
Jen Easterly (L), Director of the Cybersecurity and Infrastructure Security Agency, and Chris Inglis, the National Cyber Director, testify during their confirmation hearing before the Senate Homeland Security and Governmental Affairs Committee on June 10, 2021 in Washington, DC. (Photo by Kevin Dietsch/Getty Images)
Sens. Gary Peters, D-Mich., and Rob Portman, R-Ohio, speak to Secretary of Homeland Security Alejandro Mayorkas, right, after a Senate Homeland Security and Governmental Affairs hearing Sept. 21, 2021 in Washington, D.C. (Photo by Greg Nash – Pool/Getty Images)
Gary Gensler, Chair of the Securities and Exchange Commission, takes his seat before the start of the Senate Banking, Housing and Urban Affairs Committee hearing on Sept. 14, 2021. (Photo by BILL CLARK/POOL/AFP via Getty Images)