MITRE ATT&CK

CISA’s enhanced web-based incident form collects more detailed information, including expanded incident classifications and MITRE ATT&CK-aligned activity questions. Federal civilian agencies must report incidents, while submissions from other organizations remain voluntary; contractors supporting federal cyber operations may need to align response workflows with the updated form.