CISA Reschedules Town Halls for Cyber Incident Reporting Rule Amid Shutdown

The Cybersecurity and Infrastructure Security Agency (CISA) has announced a series of virtual town hall meetings scheduled for June 15-18, 2026, to gather stakeholder feedback on the Cyber Incident Reporting for Critical Infrastructure Act (CIRCIA). These sessions were postponed due to a partial government shutdown affecting the Department of Homeland Security, which has hindered CISA's ability to monitor cyber threats and conduct assessments. The CIRCIA rule aims to enforce stringent reporting requirements for critical infrastructure entities following cyber incidents, including ransomware attacks. Stakeholders from various sectors, including healthcare and financial services, are encouraged to participate and provide input on the rule's implementation. The final rule will require organizations to report certain cyber incidents within 72 hours and ransom payments within 24 hours. CISA's commitment to stakeholder engagement is emphasized as it seeks to minimize compliance burdens while enhancing national cybersecurity.

Key Points: • CISA's town hall meetings on CIRCIA are rescheduled for June 15-18, 2026. • The partial government shutdown has delayed CISA's incident reporting rule implementation. • Organizations will be required to report cyber incidents within 72 hours under CIRCIA.