CISA pitches updated cyber incident response plan as an ‘agile, actionable’ framework

CISA published a draft update to the National Cyber Incident Response Plan (NCIRP) and opened a month-long public comment period, presenting a renewed framework for federal, state, local, tribal, territorial, and private-sector coordination during significant cyber incidents. The draft defines four lines of response (asset, threat, intelligence support, affected entity), assigns coordinating responsibilities across agencies (CISA, ODNI, DOJ/FBI, etc.), emphasizes industry input and predictability in engagement, and requests public feedback by Jan. 15, 2025.