CIRCIA reporting deadline puts OT data integrity under the microscope

The U.S. government is moving closer to requiring covered critical infrastructure organizations to report significant cyber incidents within 72 hours and ransomware payments within 24 hours.

For critical infrastructure operators, the emerging question is whether they can demonstrate the integrity of the measurements, setpoints and commands on which safe operations depend.

CIRCIA raises stakes for incident detection CIRCIA's proposed 72-hour incident reporting window and 24-hour ransomware payment disclosure window would formalize federal notification obligations for organizations within the rule's scope.

"OT operators will have to prove what happened in their environment, not assume it," said Thomas Plank, CEO of Tributech, an industrial IoT data infrastructure provider.

That gap may become more consequential as AI systems make decisions using real-time industrial data.