The Great Cyber Plan: US Government’s New Draft Ready for Your Two Cents!
The US government has rolled out a draft National Cyber Incident Response Plan, inviting feedback until January 15, 2025. CISA emphasizes it’s not a step-by-step guide but a flexible plan for public and private sectors to partner post-cyberattack. It’s a cyber incident playbook where everyone knows their role except the hackers.

Hot Take:
So the U.S. government is rolling out its fresh-off-the-presses National Cyber Incident Response Plan. It’s like the Avengers assembling, but instead of superheroes, we’ve got CISA and a bunch of other agencies ready to save the day from cyber villains. And the best part? They want your feedback! So, if you’ve got a knack for critiquing complex governmental documents, now’s your time to shine! Just make sure to send those comments before January 2025, because by then, the only thing more outdated than the old NCIRP will be your New Year’s resolutions.
Key Points:
- The draft NCIRP outlines roles and responsibilities for both public and private sectors during cyber incidents.
- CISA is seeking public feedback on the draft until January 15, 2025.
- It updates the 2016 plan and aligns with the White House’s 2023 National Cybersecurity Strategy.
- The NCIRP is a flexible framework, not a detailed instruction manual.
- The plan focuses on incidents with a severity level of 2 or higher in the Cyber Incident Severity Schema.