Advertisement

CIRCIA

The GAO found 80 out of 117 rules that “either contain the same kind of reporting requirement applicable to a sector or the same reporting requirement as at least one other regulation.” (Getty Images)

Most federal cybersecurity reporting rules are duplicative, study finds

The Government Accountability Office looked at 117 rules across 37 agencies and found 70% had reporting requirements that were overlapping.
Madhu Gottumukkala, acting director of the Cybersecurity and Infrastructure Security Agency, testifies during the DHS oversight hearing in the Cannon House office building on Jan. 21, 2026. (Photo by Heather Diehl/Getty Images)

Acting CISA chief says DHS funding lapse would limit, halt some agency work

Acting Director Madhu Gottumukkala said it could affect everything from responding to threats to finalizing CIRCIA regulations.
Advertisement
Sean Plankey, of Pennsylvania, responds to questioning during Senate Committee on Homeland Security and Governmental Affairs hearings to examine his nomination to be Director of the Cybersecurity and Infrastructure Security Agency, of the Department of Homeland Security, in the Dirksen Senate office building, in Washington, DC, on Wednesday July 24, 2025. (Mattie Neretin/CNP/Sipa USA)

CISA is facing a tight CIRCIA deadline. Here’s how Sean Plankey can attempt to meet it

The agency has two months to publish its final rule. It will not meet that mark, but a new CISA director has the tools to move the…
Advertisement
Advertisement