Ampyx Cyber Blog

The Intersection of Regulation & Resilience

One Incident, Several Reports: What GAO's Panel & CISA's Town Halls Say About Harmonization [Updated]
Policy Pulse Patrick Miller Policy Pulse Patrick Miller

One Incident, Several Reports: What GAO's Panel & CISA's Town Halls Say About Harmonization [Updated]

A single cyber incident at a utility can owe reports to several federal agencies, each with its own clock and definition. The Government Accountability Office's latest panel heard that again, and electric, gas, oil, and water groups told the Cybersecurity and Infrastructure Security Agency the same thing in June. This post looks at where the overlap sits and where the reporting rule stands.

Read More
National Cyber Strategy: What It Means for Critical Infrastructure
Policy Pulse Patrick Miller Policy Pulse Patrick Miller

National Cyber Strategy: What It Means for Critical Infrastructure

The Trump administration released its long-awaited National Cyber Strategy. Six pages, six pillars, and a clear signal that federal cyber policy is shifting toward offensive posture and regulatory streamlining. For critical infrastructure operators, the document raises more questions than it answers. Here is what it says, what it doesn't, and what you should do about it.

Read More