CISA Updates Cyber Incident Reporting Form with MITRE ATT&CK Mapping and More Granular Incident Questions
The Cybersecurity and Infrastructure Security Agency (CISA) released an updated cyber incident reporting form on November 9, 2026 (grcreport.com). It is an enhanced web questionnaire on CISA's Incident Reporting Portal (cisa.gov). The new questions ask more specifically about malware, social engineering, hacking techniques and insider threats, and observed activity is now described with the MITRE ATT&CK framework (industrialcyber.co). CISA says the data will let it correlate related activity and spot campaigns that would otherwise look like independent incidents (industrialcyber.co). Only federal civilian agencies must report, while other organizations are encouraged to report voluntarily, and the update does not change who is required to report (grcreport.com). The story is a reporting-process update with no vulnerability, exploitation or threat actor involved, so the operational urgency for defenders is low.
Linha do tempo
-
CISA Updates Cyber Incident Reporting Form with MITRE ATT&CK Mapping and More Granular Incident Questions
ler a análise desta fonte ocultar
The Cybersecurity and Infrastructure Security Agency (CISA) released an updated cyber incident reporting form on November 9, 2026 (grcreport.com). It is an enhanced web questionnaire on CISA's Incident Reporting Portal (cisa.gov). The new questions ask more specifically about malware, social engineering, hacking techniques and insider threats, and observed activity is now described with the MITRE ATT&CK framework (industrialcyber.co). CISA says the data will let it correlate related activity and spot campaigns that would otherwise look like independent incidents (industrialcyber.co). Only federal civilian agencies must report, while other organizations are encouraged to report voluntarily, and the update does not change who is required to report (grcreport.com). The story is a reporting-process update with no vulnerability, exploitation or threat actor involved, so the operational urgency for defenders is low.