# CISA Announces Enhanced Reporting Form for Cyber Incidents

Date: 9 Nov 2026
Released by: Cybersecurity and Infrastructure Security Agency

## MediaRelease.co Summary

The Cybersecurity and Infrastructure Security Agency unveiled an updated web-enabled cyber incident reporting form on its Incident Reporting Portal. The questionnaire asks more granular questions about incident type, including malware, social engineering, hacking techniques and insider threats, and incorporates the MITRE ATT&CK framework. CISA says better data will help it correlate related activity and spot trends. Only federal civilian agencies must report, though other organizations are encouraged to.

## Original release

WASHINGTON – Today, the Cybersecurity and Infrastructure Security Agency (CISA) unveiled the updated cyber incident reporting form, an enhanced web-enabled questionnaire available on CISA’s Incident Reporting Portal for reporting cyber incidents. By improving data quality, the more robust form strengthens the effectiveness and efficiency of national cyber defense. For instance, the new form will help CISA correlate related cyber threat activity to identify a larger trend from what otherwise would appear as independent incidents. The new cyber incident reporting form is guided by community feedback CISA has received over the years and the agency’s efforts to improve data quality that enables rapid yet thorough threat analysis. For example, questions about the type of incident are more comprehensive and seek more granular information, including whether the incident involved malware, social engineering, hacking techniques or an insider threat. Also, questions about observed activity now incorporate the MITRE ATT&CK® Framework, language about adversary behavior that is familiar to the cyber community. “In the team sport of cybersecurity, one organization’s detection is another’s protection,” said Acting Executive Assistant Director for Cybersecurity Chris Butera. “As the national coordinator for critical infrastructure cybersecurity and resilience, CISA is able to leverage such incident reporting to identify emerging cyber campaigns, warn potential targets, and strengthen the Nation’s collective defense.” While only federal civilian agencies are required to report, CISA encourages any organization that experiences a cyber incident to voluntarily report. For more information, please visit the Frequently Asked Questions webpage.

## Key details

- Issued by: Cybersecurity and Infrastructure Security Agency
- Published: 9 Nov 2026
- Publisher country: United States
- Subject country/region: National (United States)

Original source: https://www.cisa.gov/news-events/news/cisa-announces-enhanced-reporting-form-cyber-incidents
MediaRelease.co canonical URL: https://mediarelease.co/us/mr02789-cisa-enhanced-cyber-incident-reporting-form-09112026.html