CIRCIA (Cyber Incident Reporting for Critical Infrastructure Act)
CIRCIA: Required Reporting (Sec. 2242)

CIRCIA (Cyber Incident Reporting for Critical Infrastructure Act) CIRCIA-2242a4: Preservation of Data Relevant to the Incident

Any covered entity subject to the reporting requirements must preserve data relevant to the covered cyber incident or ransom payment in accordance with the procedures established in the CISA final rule.

Other controls in CIRCIA: Required Reporting (Sec. 2242)

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.