Cyber Resilience · CISA CIRCIA Final Rule

    CIRCIA Reporting Workbench

    Final rule effective late 2026. Covered entities in 16 critical-infrastructure sectors must report a covered cyber incident within 72 hours and a ransom payment within 24 hours. This module tracks the clock, the artefacts, and the supplemental-report cycle through to CISA acknowledgement.

    Covered incident SLA

    72 hours

    Ransom payment SLA

    24 hours

    Retention

    2 years

    Active reporting clock

    IncidentTypeSectorSLA remainingStatus
    Loading…