Submission of Public Comment on the Proposed Rule for the Cyber Incident Reporting for Critical Infrastructure Act

ICBA comments on the Cybersecurity and Infrastructure Security Agency’s proposed rule to implement the Cyber Incident Reporting for Critical Infrastructure Act. ICBA generally supports CIRCIA, which requires the reporting of cyber incidents by all businesses except for small business entities, but asks for an exemption for community banks because of current reporting requirements in place for banks and because some are small enough not to be critical infrastructure.