Incident Reporting
What is Incident Reporting?
The formal documentation and communication of security incidents to management, regulators, and other stakeholders as required by policy and regulation.
Terms that appear alongside incident reporting
Each of these is named in at least one of the same controls as incident reporting. The number is how many controls name both.
- cybersecurity 46 shared controls
- incident response 37 shared controls
- cyber incident 33 shared controls
- nist 24 shared controls
- governance 19 shared controls
- compliance 17 shared controls
- lessons learned 17 shared controls
- cisa 16 shared controls
Frameworks that govern incident reporting
What the standards actually require on incident reporting
Requirements naming incident reporting across 6 standards, quoted from the control text.
Provide incident information to the provider of the affected product or service and to the other organisations in the supply chain or its governance for the systems or components involved.
fbi-cjis-security-policy::IR-6(3) · IR-6(3) Incident Reporting | Supply Chain Coordination →Report system vulnerabilities associated with reported incidents to [Assignment: organization-defined personnel or roles].
NIST800-IR-6(2) · IR-6(2) Incident Reporting | Vulnerabilities Related to Incidents →Require vendors and suppliers to notify of incidents that may affect the organization.
CPG-6.A · Vendor and Supplier Incident Reporting →Directions 11-13 impose specific obligations on Virtual Asset (cryptocurrency) ecosystem + digital payment systems given the elevated cyber risk + financial crime risk.
CERTIN-VASP-VirtualAsset-CryptoExchange-KYC-FinancialTransactionRecords-DigitalPayment-Dir11to13 · CERT-In Directions 11-13 Virtual Asset Service Provider Requirements - KYC for Virtual Asset Exchanges/Custodian Wallets + Financial Transaction Records + Digital Payment System Incident Reporting →When the Contractor discovers a cyber incident affecting a covered contractor information system, the covered defense information residing therein, or its ability to perform operationally critical support, it shall conduct a review for evidence of compromise a...
DFARS-7012-c · Cyber incident reporting (72-hour rapid report) →Article 44 establishes the CYBERSECURITY INCIDENT REPORTING regime for NCCS in-scope entities. Significant cybersecurity incidents (defined in Article 44(2) by reference to impact on cross-border electricity flows) must be reported to the ECCA + the EECCG with...
NCCS-Art.44_45_46 · Cybersecurity incident reporting (NCCS Articles 44-46) →Questions people ask about incident reporting
What is Incident Reporting?
Why is Incident Reporting important for compliance?
Which compliance frameworks address Incident Reporting?
Where can I learn more about Incident Reporting?
See how Incident Reporting applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.