Cybersecurity Regulations: Multiple Sectors Are Subject to Potentially Duplicative Reporting Requirements
What GAO Found GAO identified 117 cybersecurity regulations established by 37 federal agencies for private entities, spanning nine critical infrastructure sectors. Most of those regulations either contain the same kind of reporting requirement applicable to a sector or the same reporting requirement as at least one other regulation, which may lead to duplication. Specifically, 80 of the 117 regulations (about 70 percent) had at least 125 total reporting requirements (see figure), with some regulations requiring multiple types of reporting. Cybersecurity Regulations with Reporting Requirements, as of June 2026 These regulations included sector-specific and cross-sector reporting requirements.
Reported by Maria LopezCybersecurity Regulations: Multiple Sectors Are Subject to Potentially Duplicative Reporting Requirements.
The item is dated Wed, 22 Jul 2026 07:27:47 -0400.
TeamCog is carrying it as a audits report from GAO reports and testimonies RSS.
What GAO Found GAO identified 117 cybersecurity regulations established by 37 federal agencies for private entities, spanning nine critical infrastructure sectors.
Most of those regulations either contain the same kind of reporting requirement applicable to a sector or the same reporting requirement as at least one other regulation, which may lead to duplication.
Specifically, 80 of the 117 regulations (about 70 percent) had at least 125 total reporting requirements (see figure), with some regulations requiring multiple types of reporting.
Cybersecurity Regulations with Reporting Requirements, as of June 2026 These regulations included sector-specific and cross-sector reporting requirements…
The handoff preserves the official source citation and source-completeness evidence supplied by discovery.
Official Source
GAO reports and testimonies RSS. Accessed 2026-07-22T15:00:07.935Z.