CISA Hosts Cyber Snitch Sessions for Infra Bigwigs
Published Date: 2/13/2026
Proposed Rule
Summary
The Cybersecurity and Infrastructure Security Agency (CISA) is hosting virtual town hall meetings in March and April 2026 to get feedback on new rules requiring critical infrastructure sectors to report cyber incidents and ransom payments. These rules affect industries like energy, healthcare, finance, and more, aiming to boost cybersecurity and reduce risks. If you’re in these sectors, now’s the time to weigh in before the rules are finalized!
Analyzed Economic Effects
4 provisions identified: 1 benefits, 3 costs, 0 mixed.
Mandatory Cyber Incident Reporting
CISA is proposing rules under the Cyber Incident Reporting for Critical Infrastructure Act (CIRCIA) that would require 'covered entities' in critical infrastructure sectors to report 'covered cyber incidents' and 'ransom payments' to CISA. The NPRM was published April 4, 2024, and CIRCIA was enacted in March 2022; the town halls in March–April 2026 are part of the stakeholder input process.
Size-Based Coverage Criterion Under Consideration
The NPRM proposes, and CISA is seeking feedback on, including a size-based criterion that could make entities 'covered' solely because of their size. CISA seeks input on which entities would be covered only by size and on whether to keep or change this size-based threshold.
Potential Inclusion of MSPs and Cloud Providers
CISA is asking whether the final rule should include specific criteria to cover Managed Service Providers (MSPs) or Cloud Service Providers (CSPs), including reporting related to open-source software or code repositories. Stakeholders are invited to provide examples and suggested criteria during the March–April 2026 town halls.
Effort to Harmonize and Reduce Duplicate Reporting
CISA explicitly seeks input on approaches to harmonize CIRCIA reporting requirements with other federal, state, local, tribal, or territorial laws and on ways to reduce duplication or conflict. Stakeholders may suggest methods to avoid duplicate reporting during the town halls and by submitting written materials within seven calendar days after a meeting.
Personalized for You
How does this regulation affect your finances?
Personalize government policy and PRIA will tell you what this federal register document means for your household, plus every other regulation we track. PRIA reads each provision against your financial profile to show you exactly what matters to your wallet.
Key Dates
Department and Agencies
Related Federal Register Documents
2026-17390, Automated Commercial Environment (ACE) Electronic Export Manifest for Rail Cargo
U.S. Customs and Border Protection (CBP) is revising its regulations pursuant to the Trade Act of 2002 requiring the transmission of export manifest data electronically in the Automated Commercial Environment (ACE) for cargo transported by rail for any train departing the United States. This rule mandates the electronic transmission of rail export manifest information, identifies the parties eligible to transmit information, and describes the time frames prior to departure in which the information is due. This rule enables CBP to address important cargo security concerns while providing efficiencies to the trade.
2026-17324, Fee for Certain H-1B Petitions
The Department of Homeland Security (DHS) proposes to establish a $103,265 fee, payable at the time of filing, for all H-1B cap-subject petitions, including those eligible for the advanced degree exemption, which would be imposed in addition to all other applicable fees or payments. This fee would serve as a dedicated revenue mechanism to help recover a portion of the federal government's costs of administering the lawful immigration system, including activities carried out by DHS, the U.S. Department of Justice (DOJ), the U.S. Department of State (DOS), and the U.S. Department of Labor (DOL).
2026-16313, Mandatory Electronic Filing (e-Filing)
This interim final rule (IFR) amends U.S. Department of Homeland Security (DHS) regulations to provide: USCIS may require mandatory electronic filing (e-filing) of certain benefit requests; the process USCIS will follow to require a benefit request to be e-filed; and how a waiver of the e-filing requirement for those individuals unable to file electronically may be requested. This rule is intended to increase digital intake and processing to move USCIS and requestors from a mostly paper process to an electronic process and further enhance the integrity of the immigration system and the security of the United States.
2026-14439, Establishing a Fixed Time Period of Admission and an Extension of Stay Procedure for Nonimmigrant Academic Students, Exchange Visitors, and Representatives of Foreign Information Media
Starting September 15, 2026, students, exchange visitors, and foreign media reps will get a fixed time to stay in the U.S. instead of an open-ended status. This change helps the government keep better track of who’s following the rules and makes extending stays clearer. It affects F, J, and I visa holders and could mean more careful planning and paperwork, but no new fees are mentioned.
2026-13392, EB-5 Reform and Integrity Act of 2022; Ensuring the Integrity of the EB-5 Program; Automatic Revocation of Petitions for Immigrant Classification
The EB-5 Reform and Integrity Act of 2022 shakes up the investor visa program by making sure only serious investors who create real jobs get green cards. It affects foreign investors and regional centers, adds new rules to stop fraud, and sets a deadline for public comments by August 31, 2026. This means more trust and transparency in the program, with changes rolling out soon and investments under closer watch.
2026-13137, Marine Casualty Reporting on the Outer Continental Shelf
Starting July 30, 2026, companies working on the Outer Continental Shelf must report marine accidents based on who’s involved, not just where they happen. The rule raises the damage cost that triggers a report from $25,000 to $75,000, saving businesses money and making rules clearer and fairer. This change cuts industry costs by over $10,000 in 10 years and aligns U.S. rules with international standards for offshore activities.
Previous / Next Documents
Previous: 2026-02929, Establishment of Class E Airspace; Wall Municipal Airport, Wall, SD
The FAA wants to create new Class E airspace starting 700 feet above Wall Municipal Airport in South Dakota to help pilots fly safely using instruments, especially in bad weather. This change affects pilots and air traffic controllers by improving flight safety and management at the airport. Comments on this plan are open until March 30, 2026, and there’s no cost to the public.
Next: 2026-02961, Electronic Bond Transmission
Starting soon, most bonds with U.S. Customs and Border Protection must be sent electronically, making the process faster and easier for businesses and sureties. This change helps protect U.S. revenue and keeps everyone following the rules. If you’re involved in customs bonds, get ready to switch to digital submissions by April 14, 2026!