UPDATE: CISA Reschedules Virtual "Town Halls" on Cyber Incident Reporting Requirements
On May 26, 2026, the U.S. Department of Homeland Security’s (DHS) Cybersecurity and Infrastructure Security Agency (CISA) announced the rescheduled dates for its “town hall” virtual meetings on the Cybersecurity Incident Reporting for Critical Infrastructure Act of 2022 (CIRCIA) rulemaking that will require large portions of American companies to notify the U.S. government when the company is victimized by a cyber incident. As we noted earlier this year, the town halls had originally been scheduled for March and April 2026, but were postponed because of the lapse in DHS’s appropriations.
CISA Will Hold Sector-Focused “Town Halls”
CISA will host a series of virtual “town hall” meetings between June 15-18, 2026, to obtain additional feedback on the CIRCIA rulemaking:
- “General” Session #1 (not focused on a particular critical infrastructure sector) – June 15, 2026
- Communications Sector; Dams Sector; Food and Agriculture Sector; Government Facilities Sector; Healthcare and Public Health Sector; Transportation Systems Sector; and Water and Wastewater Sector – June 16, 2026
- General Session #2 – June 17, 2026
- Chemical Sector, Commercial Facilities Sector; Critical Manufacturing Sector; Defense Industrial Base Sector; Energy Sector; Financial Services Sector; Information Technology Sector; and Nuclear Reactors, Materials, and Waste Sector – June 18, 2026
Interested parties should register via CISA.gov to participate in the meetings, which are an additional opportunity for potentially impacted stakeholders to provide feedback to CISA. Attendees can register for an opportunity to provide a 3-minute oral presentation, which can then be supplemented by written materials. Because the Department is already significantly behind on its statutory deadline, the town halls may be the last opportunity for industry to give its views on the scope and impact of this proposed rule. We are monitoring and participating in the Town Halls for clients. Please let us know if you would like further information.
***
Wiley’s Privacy, Cyber & Data Governance team has helped companies of all sizes from various sectors proactively address risks and compliance with new cybersecurity laws and requirements. Our team has been actively involved in advocacy to CISA on these new rules. Please reach out to any of the authors with questions.
