Cybersecurity Agency Gets Three Comments, One Completely Off-Topic
Published Date: 1/17/2025
Notice
Summary
CISA is asking for your thoughts on a new incident reporting form that helps track cybersecurity problems. This form affects anyone who reports cyber incidents and aims to make sharing info easier and faster. You’ve got until February 18, 2025, to send in your comments—no cost to you, just a little time to help improve the process!
Analyzed Economic Effects
4 provisions identified: 2 benefits, 1 costs, 1 mixed.
New CISA Incident Reporting Form
If your organization reports cyber incidents to CISA, a new Incident Reporting Form will replace the current form for non-CIRCIA authorities. CISA estimates 26,000 respondents, an average initial report time of 3 hours and updated report time of 7.5 hours, total annual respondent burden of 198,250 hours, and total annualized respondent cost of $8,870,611.
Streamlining: Removed and Grouped Questions
CISA removed the proposed 'Violation of Law and Policy' question and will allow grouping like systems instead of requiring full details for every impacted system, except when specific system details are necessary. For entities reporting under FISMA, FEDRAMP, or other regulations whose regulators require it, CISA may still ask more detailed impacted-user and system questions.
New Preparedness and Logging Questions
The new form adds a question asking how prepared an entity was to handle the incident with answer choices: Unprepared, Minimally Prepared, Moderately Prepared, or Well Prepared. CISA also proposes adding fields to indicate availability of DNS security logs, DHCP logs, and IP address management logs for sharing.
CIRCIA Reports Remain Separate and Delayed
CISA says this information collection is distinct from the Cyber Incident Reporting for Critical Infrastructure Act (CIRCIA) reporting and will not replace CIRCIA reports. CISA anticipates that CIRCIA reporting will not go into effect until late 2025 or early 2026.
Personalized for You
How does this regulation affect your finances?
Personalize government policy and PRIA will tell you what this federal register document means for your household, plus every other regulation we track. PRIA reads each provision against your financial profile to show you exactly what matters to your wallet.
Key Dates
Related Federal Register Documents
2026-17126, Magnuson-Stevens Act Provisions; General Provisions for Domestic Fisheries; Application for Exempted Fishing Permits
The Assistant Regional Administrator for Sustainable Fisheries, Greater Atlantic Region, NMFS, has made a preliminary determination that an Exempted Fishing Permit (EFP) application contains all of the required information and warrants further consideration. The EFP would allow federally permitted fishing vessels to fish outside fishery regulations in support of exempted fishing activities proposed by the Maine Department of Marine Resources (ME DMR). Regulations under the Magnuson-Stevens Fishery Conservation and Management Act require publication of this notification to provide interested parties the opportunity to comment on applications for proposed EFPs.
2026-17076, Proposed Flood Hazard Determinations
Comments are requested on proposed flood hazard determinations, which may include additions or modifications of any Base Flood Elevation (BFE), base flood depth, Special Flood Hazard Area (SFHA) boundary or zone designation, or regulatory floodway on the Flood Insurance Rate Maps (FIRMs), and where applicable, in the supporting Flood Insurance Study (FIS) reports for the communities listed in the table below. The purpose of this notice is to seek general information and comment regarding the preliminary FIRM, and where applicable, the FIS report that the Federal Emergency Management Agency (FEMA) has provided to the affected communities. The FIRM and FIS report are the basis of the floodplain management measures that the community is required either to adopt or to show evidence of having in effect in order to qualify or remain qualified for participation in the National Flood Insurance Program (NFIP).
2026-17071, Changes in Flood Hazard Determinations
New or modified Base (1-percent annual chance) Flood Elevations (BFEs), base flood depths, Special Flood Hazard Area (SFHA) boundaries or zone designations, and/or regulatory floodways (hereinafter referred to as flood hazard determinations) as shown on the indicated Letter of Map Revision (LOMR) for each of the communities listed in the table below are finalized. Each LOMR revises the Flood Insurance Rate Maps (FIRMs), and in some cases the Flood Insurance Study (FIS) reports, currently in effect for the listed communities.
2026-17058, Self-Regulatory Organizations; Nasdaq ISE, LLC; Notice of Filing and Immediate Effectiveness of Proposed Rule Change To Amend the Exchange's Connectivity Schedule and Discontinue a Previously Proposed Offering
2026-17138, KBR Wyle Services, LLC; Grant of Permanent Variance
In this notice, OSHA grants a permanent variance to KBR Wyle Services, LLC (KBR) from a provision of the OSHA standard that regulates commercial diving operations.
2026-17083, 30-Day Notice of Proposed Information Collection: Requirements for Designating Housing Projects
HUD is seeking approval from the Office of Management and Budget (OMB) for the information collection described below. In accordance with the Paperwork Reduction Act, HUD is requesting comments from all interested parties on the proposed collection of information. The purpose of this notice is to allow for 30 days of public comment.
Previous / Next Documents
Previous: 2025-01164, Optimizing Pregnancy Registries; Public Workshop
The FDA is hosting a public workshop on March 27-28, 2025, to make pregnancy registries better and safer for moms-to-be using medicines. This event will bring together experts to tackle challenges and find new ways to study drug safety during pregnancy. Pregnant people, healthcare providers, and drug makers will benefit from improved safety info, with no direct cost but big health impact down the road.
Next: 2025-01166, Notice of Intended Disposition: U.S. Department of the Interior, Bureau of Land Management, Arizona State Office, Gila District Office, Safford Field Office, Stafford, AZ
The Bureau of Land Management’s Safford Field Office in Arizona plans to return human remains and a funerary object found in 1998 to the rightful Native American tribe or descendants. If no one claims them by January 20, 2026, these remains will be considered unclaimed. This process starts February 18, 2025, and ensures respect for Native American heritage while following the law.