CISA Unveils Updated Cyber Incident Reporting Form

On November 9, 2026, the Cybersecurity and Infrastructure Security Agency (CISA) introduced an updated cyber incident reporting form. This enhanced web-enabled questionnaire is accessible through CISA’s Incident Reporting Portal and aims to improve the quality of data collected during cyber incidents.

The new form is designed to bolster national cyber defense by enabling CISA to correlate related cyber threat activities. This correlation can help identify broader trends that might otherwise appear as isolated incidents.

Feedback from the community has guided the development of this form, reflecting CISA’s commitment to enhancing data quality for more effective threat analysis. The updated questionnaire includes more detailed inquiries about the nature of incidents, such as whether they involve malware, social engineering, hacking techniques, or insider threats.

Additionally, the form incorporates the MITRE ATT&CK® Framework, which provides standardized language regarding adversary behavior familiar to cybersecurity professionals.

Chris Butera, Acting Executive Assistant Director for Cybersecurity, stated, “In the team sport of cybersecurity, one organization’s detection is another’s protection.” He emphasized that CISA’s role as the national coordinator for critical infrastructure cybersecurity allows it to leverage incident reports to identify emerging cyber campaigns and strengthen national defense.

While only federal civilian agencies are mandated to report incidents, CISA encourages all organizations that experience cyber incidents to voluntarily submit reports.

For further details, individuals can visit the Frequently Asked Questions page on CISA’s website.

CISA serves as the nation’s cyber defense agency, leading efforts to manage and reduce risks to the digital and physical infrastructure that Americans rely on daily.

Source: Dark Reading