Wales addresses scoping definitions under CISA’s upcoming incident reporting final rule

SAN FRANCISCO. CISA executive director Brandon Wales says the cyber agency will respond to feedback in the final rule on defining and scoping what is a “covered entity” and “covered cyber incident” for its upcoming cyber incident reporting regime, on a panel here at the RSA conference.

“The most critical questions that we will get feedback on are the definition of covered entity, the definition of covered incident and what is reportable, what is required to be recorded. And we...