CISA Releases Draft of National Cyber Incident Response Plan

News brief: The Cybersecurity and Infrastructure Security Agency (CISA) released a draft National Cyber Incident Response Plan (NCIRP) updating the 2016 guidance and reflecting changes in the national response ecosystem. The draft defines significant cyber incidents, outlines four lines of effort (asset response, threat response, intelligence support, and affected-entity response), describes detection and response phases, and encourages non-federal stakeholders to review the plan; the public comment period closes Jan 15, 2025.