好的，用户希望我用中文总结一篇文章，控制在100字以内，不需要特定的开头。首先，我需要仔细阅读文章内容，抓住关键点。 文章主要讲的是美国网络安全和基础设施安全局（CISA）的一位高级官员在周二承诺，将很快更新一项备受期待的规定。这项规定要求关键基础设施的所有者和运营商向联邦政府报告重大网络安全事件。根据2022年的《关键基础设施网络事件报告法》（CIRCIA），CISA本应在去年10月发布最终规定，但后来推迟到2026年5月。由于行业反对，规则制定过程有所调整。官员Nick Andersen表示，未来几周内会有更新，但没有说明是新的规则制定还是继续当前计划。该法律要求在遭受重大网络攻击后72小时内报告，在支付勒索软件赎金后24小时内报告。 接下来，我需要将这些信息浓缩到100字以内。要包括CISA的承诺、法规名称、推迟情况、行业反馈、官员的表态以及报告的时间要求。 最后，确保语言简洁明了，不使用复杂的结构。 </think> 美国网络安全机构承诺不久将更新关键基础设施网络事件报告法规，该法规要求所有者在遭受重大网络攻击或支付勒索软件赎金后分别在72小时和24小时内向联邦政府报告。尽管法规原定于去年10月生效，但因行业反对而推迟至2026年5月，并可能调整规则制定流程。 2026-2-3 21:31:11 Author: therecord.media(查看原文) 阅读量:0 收藏
A top Cybersecurity and Infrastructure Security Agency official on Tuesday promised there would be an update soon on a long-awaited rule to require critical infrastructure owners and operators to report major cyber incidents to the federal government. The 2022 Cyber Incident Reporting for Critical Infrastructure Act (CIRCIA) required CISA to produce a final rule enacting the law by last October. However, that timeline slipped to May 2026. Agency officials have since indicated the rulemaking process would be tweaked after a version of the rule sparked industry backlash. “I think that we'll have some news on CIRCIA in pretty short order, in the next couple of weeks, hopefully,” Nick Andersen, executive assistant director for cybersecurity at CISA, told reporters on the sidelines of an event hosted by the Information Technology Industry Council. Andersen declined to say if the announcement would be about a new rulemaking process or if CISA would stick with the current program. The 2022 law requires critical infrastructure owners and operators to report to CISA within 72 hours if they suffer a major cyberattack and within 24 hours if they pay a ransomware demand. The statute came after a series of high-profile digital attacks, including the 2021 Colonial Pipeline hack.
Get more insights with the
Recorded Future
Intelligence Cloud.
如有侵权请联系:admin#unsafe.sh