CISA Hosts Cyber Snitch Sessions for Infra Bigwigs
Published Date: 2/13/2026
Proposed Rule
Summary
The Cybersecurity and Infrastructure Security Agency (CISA) is hosting virtual town hall meetings in March and April 2026 to get feedback on new rules requiring critical infrastructure sectors to report cyber incidents and ransom payments. These rules affect industries like energy, healthcare, finance, and more, aiming to boost cybersecurity and reduce risks. If you’re in these sectors, now’s the time to weigh in before the rules are finalized!
Analyzed Economic Effects
4 provisions identified: 1 benefits, 3 costs, 0 mixed.
Mandatory Cyber Incident Reporting
CISA is proposing rules under the Cyber Incident Reporting for Critical Infrastructure Act (CIRCIA) that would require 'covered entities' in critical infrastructure sectors to report 'covered cyber incidents' and 'ransom payments' to CISA. The NPRM was published April 4, 2024, and CIRCIA was enacted in March 2022; the town halls in March–April 2026 are part of the stakeholder input process.
Size-Based Coverage Criterion Under Consideration
The NPRM proposes, and CISA is seeking feedback on, including a size-based criterion that could make entities 'covered' solely because of their size. CISA seeks input on which entities would be covered only by size and on whether to keep or change this size-based threshold.
Potential Inclusion of MSPs and Cloud Providers
CISA is asking whether the final rule should include specific criteria to cover Managed Service Providers (MSPs) or Cloud Service Providers (CSPs), including reporting related to open-source software or code repositories. Stakeholders are invited to provide examples and suggested criteria during the March–April 2026 town halls.
Effort to Harmonize and Reduce Duplicate Reporting
CISA explicitly seeks input on approaches to harmonize CIRCIA reporting requirements with other federal, state, local, tribal, or territorial laws and on ways to reduce duplication or conflict. Stakeholders may suggest methods to avoid duplicate reporting during the town halls and by submitting written materials within seven calendar days after a meeting.
Your PRIA Score
Personalized for You
How does this regulation affect your finances?
Sign up for a PRIA Policy Scan to see your personalized alignment score for this federal register document and every other regulation we track. We analyze your financial profile against policy provisions to show you exactly what matters to your wallet.
Key Dates
Department and Agencies
Related Federal Register Documents
2026-13392 — EB-5 Reform and Integrity Act of 2022; Ensuring the Integrity of the EB-5 Program; Automatic Revocation of Petitions for Immigrant Classification
The EB-5 Reform and Integrity Act of 2022 shakes up the investor visa program by making sure only serious investors who create real jobs get green cards. It affects foreign investors and regional centers, adds new rules to stop fraud, and sets a deadline for public comments by August 31, 2026. This means more trust and transparency in the program, with changes rolling out soon and investments under closer watch.
2026-13137 — Marine Casualty Reporting on the Outer Continental Shelf
Starting July 30, 2026, companies working on the Outer Continental Shelf must report marine accidents based on who’s involved, not just where they happen. The rule raises the damage cost that triggers a report from $25,000 to $75,000, saving businesses money and making rules clearer and fairer. This change cuts industry costs by over $10,000 in 10 years and aligns U.S. rules with international standards for offshore activities.
2026-11285 — Clarification of Discretionary Employment Authorization for Certain Aliens
The Department of Homeland Security wants to clear up who can get special work permission if they’re temporarily allowed in the U.S. for urgent reasons, have deferred action, or are released under supervision. They’re also tightening rules for people with certain criminal records, unless helping law enforcement is involved. You’ve got until August 4, 2026, to share your thoughts—no fees or costs change yet, just a heads-up on new rules.
2026-09007 — Fee Adjustment for U.S. Immigration and Customs Enforcement Form I-246, Application for a Stay of Deportation or Removal
If you’re applying to pause your deportation or removal with Form I-246, get ready for a fee jump from $155 to $755! This change helps cover the real costs since the fee hasn’t changed since 1989. You’ve got until July 6, 2026, to share your thoughts before the new fee kicks in.
2026-08699 — Shipping Safety Fairways Along the Atlantic Coast
The Coast Guard is making the Atlantic Coast safer for ships by setting up special shipping lanes from New York to Florida. They’re reopening the comment period until June 22, 2026, so everyone can share their thoughts before the rules are finalized. This affects ship operators and coastal communities, aiming to keep sea travel smooth and safe without extra costs right now.
2025-19747 — Collection and Use of Biometrics by U.S. Citizenship and Immigration Services
The U.S. Citizenship and Immigration Services (USCIS) wants to update how they collect and use biometrics—like fingerprints and DNA—from anyone applying for immigration benefits, no matter their age. They’re also expanding when and how they collect this info, including after arrests, and setting new rules for special cases like VAWA and T visa applicants. If you want to share your thoughts, you’ve got until January 2, 2026, to speak up!
Previous / Next Documents
Previous: 2026-02929 — Establishment of Class E Airspace; Wall Municipal Airport, Wall, SD
The FAA wants to create new Class E airspace starting 700 feet above Wall Municipal Airport in South Dakota to help pilots fly safely using instruments, especially in bad weather. This change affects pilots and air traffic controllers by improving flight safety and management at the airport. Comments on this plan are open until March 30, 2026, and there’s no cost to the public.
Next: 2026-02961 — Electronic Bond Transmission
Starting soon, most bonds with U.S. Customs and Border Protection must be sent electronically, making the process faster and easier for businesses and sureties. This change helps protect U.S. revenue and keeps everyone following the rules. If you’re involved in customs bonds, get ready to switch to digital submissions by April 14, 2026!