CISA launches an enhanced cyber incident reporting form
Original title: CISA Announces Enhanced Reporting Form for Cyber Incidents
The questionnaire asks about malware, social engineering, hacking, and insider threats, and maps activity to MITRE ATT&CK.
CISA unveiled an updated cyber incident reporting form on its Incident Reporting Portal. The questionnaire collects more granular incident types and uses MITRE ATT&CK language so the agency can correlate related activity and identify trends. Only federal civilian agencies must report; other organizations are encouraged to report voluntarily.
- Acting Executive Assistant Director Chris Butera framed reporting as collective defense.
- Incident-type questions cover malware, social engineering, hacking, and insider threats.
- Observed-activity questions use MITRE ATT&CK language.
- 1.Organizations can voluntarily submit incidents through CISA's Incident Reporting Portal.
- Organizations
- CISA
- Countries
- United States
From the original article
4 min read at darkreading.com
New questionnaire captures critical data and information that improves the agency’s ability to assess incidents, identify trends and prioritize response actions.
darkreading.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.