Proposed CISA rule would require reporting for cyber incidents and ransom payments

The Department of Homeland Security’s Cybersecurity and Infrastructure Security Agency is proposing a sweeping cyber incident reporting structure across 16 critical sectors, according to its notice of proposed rulemaking

 (PDF) on Wednesday.

CISA said it would provide 60 days for written public comments when the proposed rule is published on April 4.

WHY IT MATTERS

The security agency’s development of the…