CIRCIA Is Coming: What Government Contractors Need to Know About the Upcoming Cyber Incident Reporting Rules

The federal government’s most sweeping cyber incident reporting mandate is approaching its final stages, and government contractors across a wide range of industries should be paying close attention. The Cyber Incident Reporting for Critical Infrastructure Act of 2022, known as CIRCIA, will require hundreds of thousands of organizations to report significant cyber incidents and ransomware payments to the Cybersecurity and Infrastructure Security Agency (CISA) on tight timelines. The new requirements are likely to disproportionately impact government contractors because of the significant overl