CISA: Nearly 311,000 ‘Small Entities’ Covered By Proposed Cyberattack Reporting Rules

CISA said proposed rules that are aimed at improving transparency and information sharing about major cyberattacks affecting U.S. critical infrastructure may not become final until 2025 or 2026.