CISA Rolls Out Updated Cyber Incident Reporting Form
CISA has launched a revised web-based questionnaire on its Incident Reporting Portal for submitting cyber incident reports. The new form asks more detailed questions about incident types—such as malware, social engineering, hacking, or insider threats—and incorporates the MITRE ATT&CK Framework terminology for describing adversary behavior. Reporting remains mandatory only for federal civilian agencies, though CISA invites other organizations to submit reports voluntarily.