IC Technology & Surveillance — 2026-05-28

CISA Reschedules CIRCIA Cyber Incident Reporting Town Halls for Critical Infrastructure After DHS Shutdown

BLUFCritical infrastructure entities should plan for continued CIRCIA compliance ambiguity into 2027, as a final rule published by December 31, 2026 is very unlikely despite the rescheduled June town halls.

CISA on May 26 announced a revised schedule of four virtual town halls on CIRCIA rulemaking, set for June 15–18, replacing sessions postponed from March and April 2026 123. CISA's announcement attributed the postponement to "the recent Democrat shutdown of the Department of Homeland Security"; Inside Privacy described the cause as a DHS funding lapse that ended April 30 13. The revised format consolidates five original two-hour sector sessions into two four-hour grouped sessions covering all 16 critical infrastructure sectors and two general sessions, all running 11:30 a.m. to 3:30 p.m. ET 23. Registration is available at cisa.gov/circia, with Acting Director Nick Andersen stating CISA will finalize the rule after incorporating stakeholder input 1.

Analysis
This assessment draws on CISA's own press release with secondary amplification but no independent reporting. The DHS funding lapse consumed two months of rulemaking calendar, and Acting Director Andersen has committed only to incorporating town hall input, not to a publication date. Post-comment processing for rules of this scope historically spans six to twelve months after stakeholder sessions close, making a final rule in the Federal Register by December 31, 2026 very unlikely. Moderate confidence reflects those three compounding constraints. The consolidation of sector sessions into grouped blocks may instead signal that substantive terms are settled and the town halls are procedural compliance rather than genuine input-gathering. Compliance officers should plan against a final rule arriving no earlier than 2027.

4 sources