The Cybersecurity and Infrastructure Security Agency updated its cyber incident reporting form on Monday to improve data collection and identify patterns across disparate attacks, with further coverage provided by Nextgov.
The revised questionnaire, accessible via the agency's portal, requests granular details regarding malicious software, hacking techniques and insider threats. By integrating the MITRE Adversarial Tactics, Techniques and Common Knowledge framework, the agency aims to standardize descriptions of attacker behavior, allowing analysts to link incidents across various organizations. This update precedes the finalization of the Cyber Incident Reporting for Critical Infrastructure Act, which remains under White House review. Once implemented, the regulation will mandate that critical infrastructure entities report significant cyber incidents within 72 hours and ransom payments within 24 hours. While the agency seeks to strengthen national defense by identifying emerging campaigns, the initiative faces scrutiny from private companies concerned about the scope of the mandate and potential overlap with existing reporting requirements from other federal regulators. The agency continues to refine these processes to better assist victims and preempt future threats, despite previous delays in the rulemaking timeline caused by funding lapses.
Source: Nextgov
