Severity: Low Guidance US
CISA enhances cyber incident reporting form with improved data collection capabilities
Original title: CISA Announces Enhanced Reporting Form for Cyber Incidents
- Published
- Source: cisa.gov
- Effective
- Not stated
- Deadline
- Not stated
- Framework: CISA
- BOD 26-04: Prioritizing Security Updates Based on Risk source
- in 8 days
- CISA Logging Reference Architecture: outcome-driven guidance for FCEB agencies to build Agency Logging Plans under OMB M-26-14
- Also: MITRE ATT&CK
Why it matters
CISA unveiled an updated cyber incident reporting form available on its Incident Reporting Portal that improves data quality and collection capabilities. The enhanced form includes more comprehensive questions about incident types (malware, social engineering, hacking, insider threats) and incorporates the MITRE ATT&CK Framework to capture adversary behavior in familiar language. By capturing more granular information, CISA can better correlate related threat activity, identify emerging campaigns, and strengthen national collective defense through more effective threat analysis and incident response prioritization.
What changed
- Form now includes more comprehensive questions about incident types, requesting granular information about whether incidents involved malware, social engineering, hacking techniques, or insider threats
- Questions about observed activity now incorporate the MITRE ATT&CK Framework to standardize adversary behavior language across the cyber community
- Enhanced web-enabled questionnaire improves data quality to enable rapid yet thorough threat analysis and incident correlation
- Form strengthens CISA's ability to correlate related cyber threat activity and identify larger trends from what appear as independent incidents
Who is affected
Federal civilian agencies are required to report; CISA encourages voluntary reporting from any organization that experiences a cyber incident
What to do
AI-assisted summary of the official document; the official text prevails. Not legal advice.