On May 26th, 2026, CISA announced a revised schedule of town hall meetings to provide external stakeholders an additional opportunity to comment on the Cyber Incident Reporting for Critical Infrastructure Act (CIRCIA) Notice of Proposed Rulemaking (NPRM), originally issued on April 4, 2024. The new sessions replace the town hall meetings previously scheduled for March and April 2026, but were cancelled due to the lapse in DHS appropriations.
The proposed rule would implement the Cyber Incident Reporting for Critical Infrastructure Act of 2022 by establishing covered cyber incident and ransom payment reporting requirements for covered entities. AMWA previously submitted comments on the NPRM, emphasizing the need for greater clarity regarding which water sector utilities qualify as covered entities, particularly because the statute prohibits CISA from enforcing reporting requirements against state, local, tribal, or territorial government entities.
The water and wastewater sector will be discussed during the town hall session on Tuesday, June 16, from 11:30 a.m. to 3:30 p.m. ET. Members interested in attending can register at: www.cisa.gov/circia.