CISA’s CIRCIA rulemaking could reshape how serious cyber incidents get reported across critical infrastructure—and MSPs are right in the middle of it. In this episode, Uncle Marv breaks down what’s in play, what’s unclear, and what you should be building now so you’re not scrambling when clients (or regulators) start asking questions. Understand the 72-hour incident reporting expectation and the 24-hour ransom payment reporting requirement. Learn why MSPs may be treated like critical infrastructure, not “just vendors.” Get a practical view of what CISA expects inside an incident report (timelines, IOCs, TTPs, impact, mitigation). Hear where CISA is questioning scope: sector-based vs. size-based thresholds, and what that could mean for you. Find the operational gaps you need to close (logging, evidence aggregation, documentation speed). Links from the Show: Cybersecurity and Infrastructure Security Agency (CISA): https://www.cisa.gov/ Cyber Incident Reporting for Critical Infrastructure Act (CIRCIA): https://www.cisa.gov/circia Small Business Administration (SBA): https://www.sba.gov/ Environmental Protection Agency (EPA): https://www.epa.gov/ EPA Risk Management Program (RMP): https://www.epa.gov/rmp Department of Justice (DOJ): https://www.justice.gov/ === SPONSORS: Livestream Partner, ThreatLocker: https://www.itbusinesspodcast.com/threatlocker Technology Partner, NetAlly: https://www.itbusinesspodcast.com/netally/ Technology Partner: Bvoip: https://www.itbusinesspodcast.com/bvoip Technology Partner, Liongard: https://www.itbusinesspodcast.com/liongard Travel Partner: TruGrid: https://www.itbusinesspodcast.com/trugrid Digital Partner, Designer Ready: http://itbusinesspodcast.com/designerready === SHOW MUSIC: Item Title: Upbeat & Fun Sports Rock Logo Item URL: https://elements.envato.com/upbeat-fun-sports-rock-logo-CSR3UET Author Username: AlexanderRufire Item License Code: 7X9F52DNML === Connect with Uncle Marv🌐 Website: https://www.itbusinesspodcast.com/🎙 Host: Marvin Bee🛒 Uncle Marv’s Amazon Store (gear & tools I recommend): https://amzn.to/3EiyKoZ☕ Support the show: https://ko-fi.com/itbusinesspodcastIf you found value in this episode, share it with another MSP, IT provider, or tech entrepreneur. Your support helps keep practical, no-nonsense IT business conversations coming every week.

Ask this episode

“What did the council decide on item 42?” — answered with the speaker and the moment.

Transcript

Related