CISA Director Addresses Agency Shakeups and Cyber Incident Reporting

CISA's Mission and Reorganization

• 🎯 CISA is focused on its core mission of protecting critical infrastructure from physical and cyber threats.
• 💡 While CISA is a young agency that has undergone changes, there are no planned organizational changes at this time.
• 🤝 Any future organizational changes will be communicated to Congress.

Staffing and Talent Acquisition

• 📈 CISA has the necessary staff to fulfill its mission and utilizes hiring authorities to ensure the right skills and talent are present.
• 🛠️ The agency is actively hiring to fill specific positions and maintain adequate staffing levels.

Cyber Incident Reporting Act Implementation

• 🗓️ The Cyber Incident Reporting for Critical Infrastructure Act of 2022 requires entities to report significant cyber incidents and ransomware payments to CISA.
• ⏳ The deadline for final regulations has been extended to May 2026, a decision driven by substance rather than inaction.
• 💬 CISA is actively engaged in stakeholder engagement and reviewing over 280 public comments to ensure the regulations are effective and not overly burdensome.
• 🤝 Efforts are underway to align the regulations with congressional intent and address concerns raised during the rulemaking process.