On November 9, 2026, the Cybersecurity and Infrastructure Security Agency (CISA) unveiled an updated cyber incident reporting form. The new form is designed to be web-enabled, aiming to enhance the quality of data collected for national cyber defense purposes.
The updated form includes more comprehensive questions regarding the type of cyber incident experienced. This enhancement is intended to provide a better understanding of the incidents being reported.
CISA encourages all organizations that experience a cyber incident to voluntarily report it using the new form. This initiative is part of CISA's role as the national coordinator for critical infrastructure cybersecurity and resilience.
The form incorporates the MITRE ATT&CK® Framework, which is expected to help in understanding adversary behavior more effectively.