The U.S. Department of Homeland Security’s Cybersecurity and Infrastructure Security Agency (CISA) has created a new online portal for organizations to voluntarily report cybersecurity incidents, including ransomware attacks.

CISA launched the website as the agency prepares a final rule that will require organizations considered to be critical infrastructure to report cyber incidents and ransomware attacks to the agency. CISA issued a Notice of Proposed Rulemaking April 4 and is expected to release the final rule in 2025.

Adrianne Appel writes regulatory news, policy, and trends for Compliance Week. She previously reported about policy developments for Bloomberg Law and Bloomberg Government. Email: adrianne.appel@complianceweek.com LinkedIn:...