DHS Proposes Critical Infrastructure Reporting Rules

**Executive Summary:** The Department of Homeland Security previewed CISA's proposed rules under the Cyber Incident Reporting for Critical Infrastructure Act (CIRCIA), outlining requirements for covered critical-infrastructure entities to report cyber incidents (within 72 hours) and ransom payments (within 24 hours); the 447-page proposed rule will be officially published to open public comment and aims to improve federal response and assistance to victims.