CISA Seeks More Granular Information on Cyber Incidents
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has released an expanded form for reporting cyber incidents. The updated form, released on November 9, 2026, includes a new questionnaire that requires more granular information on cyber incidents to improve data quality. The additional information will improve CISA’s ability to conduct rapid and thorough threat analyses, more effectively correlate related cyber threat activity to identify larger trends, and prioritize its response actions.
The new form incorporates MITRE ATT&CK Framework language about adversary behavior that is familiar to the cyber community, and requires reporting entities to provide more granular information about the nature of the incident, such as whether the attack involved malware, if social engineering was used, if the incident was due to an insider threat, and the hacking techniques used (if known).
Linha do tempo
-
CISA Seeks More Granular Information on Cyber Incidents
ler a análise desta fonte ocultar
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has released an expanded form for reporting cyber incidents. The updated form, released on November 9, 2026, includes a new questionnaire that requires more granular information on cyber incidents to improve data quality. The additional information will improve CISA’s ability to conduct rapid and thorough threat analyses, more effectively correlate related cyber threat activity to identify larger trends, and prioritize its response actions.
The new form incorporates MITRE ATT&CK Framework language about adversary behavior that is familiar to the cyber community, and requires reporting entities to provide more granular information about the nature of the incident, such as whether the attack involved malware, if social engineering was used, if the incident was due to an insider threat, and the hacking techniques used (if known).