CISA Enhances Cyber Incident Reporting Form for Improved Threat Analysis

• •CISA's updated reporting form enhances data quality for better threat analysis.
• •The form now includes questions based on the MITRE ATT&CK framework.
• •CISA encourages voluntary reporting from all organizations, not just federal agencies.

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has updated its cyber incident reporting form to enhance data quality and improve national cyber defense. The new form, available on CISA’s Incident Reporting Portal, features more granular questions regarding incident types, including malware, social engineering, and insider threats, while incorporating the MITRE ATT&CK framework. This update aims to help CISA correlate related cyber threat activities and identify broader trends. While only federal civilian agencies are mandated to report incidents, CISA encourages voluntary reporting from all organizations. The updated form is part of ongoing efforts to enhance cybersecurity measures as the agency awaits finalization of the Cyber Incident Reporting for Critical Infrastructure Act (CIRCIA) regulations, which would require critical infrastructure organizations to report significant cyber incidents within specified timeframes. The CIRCIA rule is currently pending approval at the White House.