CISA updates form for reporting cyber incidents

US cybersecurity agency CISA launched an updated online form for reporting cyber incidents.

The form is available through CISA’s Incident Reporting Portal and asks for more detailed information about incidents.

It includes questions about malware, social engineering, hacking techniques and insider threats, and uses terminology from the MITRE ATT&CK Framework.

The added detail is intended to help CISA link separate reports that may be part of a wider cyber campaign.

That could help the agency identify emerging threats and warn organizations that may be targeted.

Federal civilian agencies are required to report incidents, while other organizations are encouraged to report voluntarily.

CISA says the changes reflect feedback from the cybersecurity community and aim to support faster, more thorough threat analysis.