Glossary: Security Operations and Incident Response

CIRCIA (Cyber Incident Reporting for Critical Infrastructure Act)

A US law that will require critical infrastructure companies to report major cyber incidents to CISA within 72 hours and ransom payments within 24 hours. These duties begin only once its final rule takes effect, and in October 2026 that rule was still under White House review.