<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<REGINFO_RIN_DATA xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" RUN_DATE="2026-04-19-04:00" xsi:noNamespaceSchemaLocation="https://www.reginfo.gov/public/xml/REGINFO_XML_Ver10262011.xsd">
    <RIN_INFO>
        <RIN>0301-AA00</RIN>
        <PUBLICATION>
            <PUBLICATION_ID>202310</PUBLICATION_ID>
            <PUBLICATION_TITLE>The Regulatory Plan and the Unified Agenda of Federal Regulatory and Deregulatory Actions</PUBLICATION_TITLE>
        </PUBLICATION>
        <AGENCY>
            <CODE>0301</CODE>
            <NAME>Office of the National Cyber Director</NAME>
            <ACRONYM>ONCD</ACRONYM>
        </AGENCY>
        <RULE_TITLE>Cyber Regulatory Harmonization</RULE_TITLE>
        <ABSTRACT><![CDATA[<!DOCTYPE html>
<html>
<head>
</head>
<body>
<p>The Office of the National Cyber Director (ONCD) invites public comments on opportunities for and obstacles to harmonizing cybersecurity regulations. Strategic Objective 1.1 of the National Cybersecurity Strategy <a title="" href="https://mail.google.com/mail/u/0/#m_227131157158521667__ftn1" name="m_227131157158521667__ftnref1"><span class="m_227131157158521667MsoFootnoteReference"><span class="m_227131157158521667MsoFootnoteReference">[1] </span></span></a>recognizes that while voluntary approaches to critical infrastructure cybersecurity have produced meaningful improvements, the lack of mandatory requirements has resulted in inadequate and inconsistent outcomes.&nbsp; The Strategy calls for establishing cybersecurity regulations to secure critical infrastructure where existing measures are insufficient, harmonizing and streamlining new and existing regulations, and enabling regulated entities to afford to achieve security. ONCD, in coordination with the Office of Management and Budget (OMB), has been tasked with leading&nbsp; the Administration&rsquo;s efforts on cybersecurity regulatory harmonization. <a title="" href="https://mail.google.com/mail/u/0/#m_227131157158521667__ftn2" name="m_227131157158521667__ftnref2"><span class="m_227131157158521667MsoFootnoteReference"><span class="m_227131157158521667MsoFootnoteReference">[2] </span></span></a>&nbsp;We will work with independent and executive branch regulators to identify opportunities to harmonize baseline cybersecurity requirements for critical infrastructure. <a title="" href="https://mail.google.com/mail/u/0/#m_227131157158521667__ftn3" name="m_227131157158521667__ftnref3"><span class="m_227131157158521667MsoFootnoteReference"><span class="m_227131157158521667MsoFootnoteReference">[3] </span></span></a>&nbsp;ONCD seeks input from stakeholders to understand existing challenges with regulatory overlap, and explore a framework for reciprocity (the recognition or acceptance by one regulatory agency of another agency&rsquo;s assessment, determination, finding, or conclusion with respect to the extent of a regulated entity&rsquo;s compliance with certain cybersecurity requirements) in regulator acceptance of other regulators&rsquo; recognition of compliance with baseline requirements.&nbsp;</p>
<p>&nbsp;</p>
<p>&nbsp;</p>
<div id="m_227131157158521667ftn1">
<p class="m_227131157158521667MsoFootnoteText"><a title="" href="https://mail.google.com/mail/u/0/#m_227131157158521667__ftnref1" name="m_227131157158521667__ftn1"><span class="m_227131157158521667MsoFootnoteReference"><span class="m_227131157158521667MsoFootnoteReference">[1] </span></span></a>&nbsp; <a href="https://www.whitehouse.gov/wp-content/uploads/2023/03/National-Cybersecurity-Strategy-2023.pdf" target="_blank" data-saferedirecturl="https://www.google.com/url?q=https://www.whitehouse.gov/wp-content/uploads/2023/03/National-Cybersecurity-Strategy-2023.pdf&amp;source=gmail&amp;ust=1691178200066000&amp;usg=AOvVaw2Nj_1h_KhP2f_nqkZNlI3H">https://www.whitehouse.gov/wp- <wbr />content/uploads/2023/03/ <wbr />National-Cybersecurity- <wbr />Strategy-2023.pdf </a></p>
<p class="m_227131157158521667MsoFootnoteText"><a title="" href="https://mail.google.com/mail/u/0/#m_227131157158521667__ftnref2" name="m_227131157158521667__ftn2"><span class="m_227131157158521667MsoFootnoteReference"><span class="m_227131157158521667MsoFootnoteReference">[2] </span></span></a>&nbsp;Pursuant to the National Cybersecurity Strategy: ONCD, in coordination with the Office of Management and Budget (OMB), will lead the Administration&rsquo;s efforts on cybersecurity regulatory harmonization.&rdquo;</p>
</div>
<div id="m_227131157158521667ftn3">
<p class="m_227131157158521667MsoFootnoteText"><a title="" href="https://mail.google.com/mail/u/0/#m_227131157158521667__ftnref3" name="m_227131157158521667__ftn3"><span class="m_227131157158521667MsoFootnoteReference"><span class="m_227131157158521667MsoFootnoteReference">[3] </span></span></a>Pursuant to the National Cybersecurity Strategy, the Cyber Incident Reporting Council will coordinate, deconflict, and harmonize Federal incident reporting requirements. ONCD is not requesting views from respondents on incident reporting regulations.</p>
</div>
</body>
</html>]]></ABSTRACT>
        <PRIORITY_CATEGORY>Info./Admin./Other</PRIORITY_CATEGORY>
        <RIN_STATUS>First Time Published in The Unified Agenda</RIN_STATUS>
        <RULE_STAGE>Prerule Stage</RULE_STAGE>
        <MAJOR>No</MAJOR>
        <UNFUNDED_MANDATE_LIST>
            <UNFUNDED_MANDATE>No</UNFUNDED_MANDATE>
        </UNFUNDED_MANDATE_LIST>
        <CFR_LIST>
            <CFR>6 CFR Ch. XI ( Parts1100-1199)</CFR>
        </CFR_LIST>
        <LEGAL_AUTHORITY_LIST>
            <LEGAL_AUTHORITY>6 U.S.C. 1500(c)(1)(C)(v)</LEGAL_AUTHORITY>
        </LEGAL_AUTHORITY_LIST>
        <LEGAL_DLINE_LIST/>
        <RPLAN_ENTRY>No</RPLAN_ENTRY>
        <TIMETABLE_LIST>
            <TIMETABLE>
                <TTBL_ACTION>Request for Information</TTBL_ACTION>
                <TTBL_DATE>03/00/2024</TTBL_DATE>
            </TIMETABLE>
        </TIMETABLE_LIST>
        <RFA_REQUIRED>No</RFA_REQUIRED>
        <GOVT_LEVEL_LIST>
            <GOVT_LEVEL>Federal</GOVT_LEVEL>
        </GOVT_LEVEL_LIST>
        <FEDERALISM>No</FEDERALISM>
        <PRINT_PAPER>No</PRINT_PAPER>
        <INTERNATIONAL_INTEREST>Yes</INTERNATIONAL_INTEREST>
        <AGENCY_CONTACT_LIST>
            <CONTACT>
                <FIRST_NAME>James</FIRST_NAME>
                <LAST_NAME>Halpert</LAST_NAME>
                <MIDDLE_NAME>Joseph</MIDDLE_NAME>
                <TITLE>General Counsel</TITLE>
                <AGENCY>
                    <CODE>0301</CODE>
                    <NAME>Office of the National Cyber Director</NAME>
                    <ACRONYM>ONCD</ACRONYM>
                </AGENCY>
                <PHONE>202 881-7985</PHONE>
                <EMAIL>james.j.halpert@ncd.eop.gov</EMAIL>
                <MAILING_ADDRESS>
                    <STREET_ADDRESS>New Executive Office Building, 4th Floor, Room 417, 725 17th Street NW,</STREET_ADDRESS>
                    <CITY>Washington</CITY>
                    <STATE>DC</STATE>
                    <ZIP>20503</ZIP>
                </MAILING_ADDRESS>
            </CONTACT>
        </AGENCY_CONTACT_LIST>
    </RIN_INFO>
</REGINFO_RIN_DATA>
