Cyber Incident
What is Cyber Incident?
An event that actually or imminently jeopardizes the confidentiality, integrity, or availability of information or information systems.
Terms that appear alongside cyber incident
Each of these is named in at least one of the same controls as cyber incident. The number is how many controls name both.
- incident response 33 shared controls
- incident reporting 33 shared controls
- cybersecurity 22 shared controls
- ransomware 17 shared controls
- cisa 15 shared controls
- resilience 13 shared controls
- compliance 12 shared controls
- lessons learned 12 shared controls
Frameworks that govern cyber incident
What the standards actually require on cyber incident
Requirements naming cyber incident across 6 standards, quoted from the control text.
A covered entity that experiences a covered cyber incident must report it to CISA not later than 72 hours after the entity reasonably believes the incident has occurred.
CIRCIA-2242a1 · 72-Hour Covered Cyber Incident Report →Detect outcome: develop, put in place and practise the activities needed to find a cyber incident in good time, with measures that detect unintended activity on computer based systems and identify an incident promptly.
imo-maritime-cybersecurity-guidelines-msc-fal-1-circ-3-rev-4::3.5.4 · 3.5.4 Detect: timely detection of cyber incidents →Incident reporting is increasingly a regulatory or contractual duty toward flag and coastal states, customers, vendors and others, with deadlines from immediate to about two weeks, so the response plan should carry an appendix of the company's specific reporti...
bimco-cyber-security::10.7 · Reporting of cyber incidents →If DoD elects to conduct a damage assessment, the Contracting Officer will request that the Contractor provide all of the damage assessment information gathered in accordance with the media preservation paragraph.
DFARS-7012-g · Cyber incident damage assessment activities →Advanced control principles for cyber incident detection (required, with baseline and intermediate, of an AI whose inherent risk is high). Automated tools detect unauthorised changes to critical system files, firewalls, IPS, IDS and other security devices;
hkma-cyber-resilience-assessment-framework-c-raf::4.3.A · 4.3 Cyber incident detection: advanced level →Under the Foundational expectations of Principle 12, managing agents tell Lloyd's and the LMA about any significant data breach or cyber incident no later than 72 hours after it occurs.
lloyd-s-minimum-standards-cyber-security::P12.R1 · Report significant cyber incidents and data breaches to Lloyd's and the LMA within 72 hours →Questions people ask about cyber incident
What is Cyber Incident?
Why is Cyber Incident important for compliance?
Which compliance frameworks address Cyber Incident?
Where can I learn more about Cyber Incident?
See how Cyber Incident applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.