CISA's New Proposed Cyber Incident Reporting Rule: Covered Entities, Enforcement, Exceptions, Penalties
Recording of a 90-minute CLE video webinar with Q&A
This CLE webinar will provide an overview of the proposed rule recently released by the U.S. Department of Homeland Security's Cybersecurity Infrastructure and Security Agency (CISA) requiring covered entities to report cyber incidents and ransom payments to CISA within prescribed time periods. The speaker will discuss the requirements of the proposed rule and provide guidance for advising clients on steps they should start taking now to prepare for this new cyber reporting framework.
Outline
- Overview of CISA's new proposed rule
- Covered entities--broad definition of "critical infrastructure"
- Substantial cyber incidents
- Reporting requirements and how they harmonize with other cyber disclosure rules
- Exemptions from reporting
- Data retention and recordkeeping requirements
- Enforcement and penalties
- Timeline for implementation of the proposed rule
- Steps businesses should take now in preparation for this new regulatory framework
- Final thoughts and key considerations
Benefits
The speaker will discuss these and other relevant issues:
- What is the background regarding the new proposed rule?
- What companies are considered "covered entities" under the proposed new rule?
- What types of cyber incidents must be reported and what are the prescribed timeframes for reporting?
- What are the exemptions from reporting?
- How will CISA enforce the proposed new rule and what are the penalties for failing to submit a required report?
Faculty
![Geiger, Harley](/img/t/7259aa5d289eac04d44cd260df9fb096.jpg)
Harley L. Geiger
Counsel
Venable
Mr. Geiger counsels organizations on a wide variety of cybersecurity law and policy matters. When advising clients on... | Read More
Mr. Geiger counsels organizations on a wide variety of cybersecurity law and policy matters. When advising clients on privacy and technology policy and regulations, he draws from his years of experience working in-house at a major cybersecurity company during the maturation of the industry. Mr. Geiger's substantive experience and industry connections position him as a sought-after speaker at events on technology policy and a noted commentator on technology policy and law. He regularly testifies before Congress and government agencies on technology laws and is actively involved in shaping related policies. Mr. Geiger founded and leads the Hacking Policy Council, a trade association that facilitates best practices for vulnerability management.
Close