This is an unofficial, informational resource summarizing key aspects of the Cyber Incident Reporting for Critical Infrastructure Act of 2022 (CIRCIA) Notice of Proposed Rulemaking (NPRM).
WHAT WOULD BE A COVERED ENTITY UNDER CIRCIA AS PROPOSED IN 6 CFR §226.2?
- Does the entity meet one or more of the 16 sector-based criteria listed in proposed 6 CFR § 226.2?
- Is the entity in a critical infrastructure sector?
- Is the entity a small business as specified by the Small Business Administration?