 Initiative Number: 1.4.2 Initiative Title: Issue final Cyber Incident Reporting for Critical Infrastructure Act (CIRCIA) rule Initiative Description The Cybersecurity and Infrastructure Security Agency will consult with SRMAs, DOJ, and other Federal agencies to implement CIRCIA. CISA will publish the CIRCIA Notice of Proposed Rulemaking and Final Rule per the statutory requirements, and develop the processes to advance effective actioning of incident reports to include sharing of incident reports with appropriate agencies. NCS Reference CISA will consult with SRMAs, the Department of Justice (DOJ), and other Federal agencies during the CIRCIA rule-making and implementation… Responsible Agency: CISA Contributing Entities: DOJ, FBI, SRMAs, USSS Completion Date: 4Q FY25 Initiative Number: 1.4.3 Initiative Title: Develop exercise scenarios to improve cyber incident response Initiative Description The Office of the National Cyber Director will work with the interagency and other relevant stakeholders to develop multiple tabletop exercise scenarios to allow the interagency to continue to refine delivering a whole-of-government response to a cyber incident. NCS Reference When Federal assistance is required, the Federal Government must present a unified, coordinated, whole-of-government response. Responsible Agency: ONCD Contributing Entities: DHS Completion Date: 1Q FY24 18 NATIONAL CYBERSECURITY STRATEGY IMPLEMENTATION PLAN

Select target paragraph3