CISA Taking on New Regulatory Enforcement Role
The Department of Homeland Security’s Cybersecurity and Infrastructure Security Agency is a fairly young entity, but is already undergoing changes as it is tasked with new responsibilities. The latest is to serve as the agency of record for notifications about cyber attacks on critical infrastructure and ransomware payments, which will involve a 24-month regulatory notice period followed by 18 months to finalize regulations. “They’re going from a cooperative partner begging for information to a regulatory enforcer that has legitimate power to enforce compliance with particular requirements for cybersecurity,” said former CISA cyber policy lead Tatyana Bolton
Source:
