On 16 December 2024, the Cybersecurity and Infrastructure Agency opened a consultation, set to close on 15 January 2025, on the draft National Cyber Incident Response Plan (NCIRP). The plan outlines a national strategic framework for coordinated responses to cyber incidents related to asset response, threat response, intelligence support, and affected entity response. It details coordination mechanisms, decision points, and priority activities across the cyber incident response lifecycles. It also provides guidelines for cross-sector, public-private, or federal coordination in response to cyber incidents. Key updates include procedures for non-federal stakeholders to coordinate in cyber incident response, more streamlined content, and details on recent relevant legal and policy changes.
Original source